User authentication

A method for authenticating a user attempting to access a secure environment controlled by a secure environment server processing system, wherein the method includes the server processing system:

• a) setting a personal identifier of the user by:
• receiving a personal identifier registration request from the user;
• transferring, to the user or a user device of the user, a first index indicative of a first selected key from a plurality of indexed keys stored in memory of the user device;
• receiving a registration code, wherein the user determines the registration code based on the first selected key presented by the user device and a desired personal identifier;
• determining, based on the registration code and the first selected key, a hash value which is associated with a user account stored in server accessible memory;
• (b) receiving, from the secure environment server processing system, an authentication request to authenticate the user attempting to access the secure environment;
• and
• (c) attempting to authenticate the user attempting to access the secure environment by:
• transferring, to the user or the user device associated with the user, a second index corresponding to a second selected key from the plurality of indexed keys;
• receiving data indicative of a code, wherein the user determines the code based on the second selected key presented by the user device and a personal identifier;
• determining, a hash value of the personal identifier using the code and the second selected key;
• comparing the determined hash value against the stored hash value associated with the user account;
• and
• transferring an authentication response to the secure environment server processing system, wherein the response is indicative of whether the user is authenticated for accessing the secure environment based on the comparison.

A non-transitory computer readable medium for configuring a server processing system to authenticate a user attempting to access a secure environment controlled by a secure environment server processing system, wherein the computer readable medium includes executable instructions which, upon execution, configure the server processing system to:

• (a) set a personal identifier of the user, wherein the server processing system is configured to:
• receive a personal identifier registration request from the user;
• transfer, to the user or a user device of the user, a first index indicative of a first selected key from a plurality of indexed keys stored in memory of the user device;
• receive a registration code, wherein the user determines the registration code based on the first selected key presented by the user device and a desired personal identifier;
• determine, based on the registration code and the first selected key, a hash value which is associated with a user account stored in server accessible memory;
• (b) receive, from the secure environment server processing system, an authentication request to authenticate the user attempting to access the secure environment;
• and
• (c) authenticate the user attempting to access the secure environment, wherein the server processing system is configured to:
• transfer, to the user or the user device associated with the user, a second index corresponding to a second selected key from the plurality of indexed keys;
• receive data indicative of a code, wherein the user determines the code based on the second selected key presented by the user device and a personal identifier;
• determine a hash value of the personal identifier using the code and the second selected key;
• compare the determined hash value against a stored hash value associated with the user account;
• and
• transfer an authentication response to the secure environment server processing system, wherein the response is indicative of whether the user is authenticated for accessing the secure environment based on the comparison.