Password-less authentication system and method

Abstract

A processor-implemented method for authenticating a login without a password. The method includes: receiving a request to authenticate a login, the request including a user identifier and excluding a password; based on the user identifier, identifying a device to be used to authenticate the login; and in response to determining that a login confirmation message has been received from the identified device, authenticating the login.

1 . A method for facilitating a login without a password, the method comprising:
 receiving, at a user device, an authentication request from a login authority server, the login authority server configured for receiving, from a request initiator, a request to authenticate a login from a client device;   outputting a request for confirmation to proceed with a login associated with the authentication request;   after outputting the request for confirmation, receiving input from an input mechanism associated with the device; and   responding to the authentication request by sending a response to the login authority server based on the received input, such that the login is authenticated without the use of a password.   
     
     
         2 . The method of  claim 1 , wherein the received input indicates a desire to proceed with the login and wherein the response authorizes the login authority server to inform the request initiator that the login has been authorized. 
     
     
         3 . The method of  claim 2 , wherein the outputted request for confirmation does not require input of a password and no password is input to the device between the outputting of the request for confirmation and the sending of the response. 
     
     
         4 . The method of  claim 1 , wherein the authentication request includes information identifying the request initiator and wherein the outputted request for confirmation is generated based on the information identifying the request initiator. 
     
     
         5 . The method of  claim 1 , wherein the received input indicates a desire to not proceed with the login and wherein the response informs the login authority server that the login is not authorized. 
     
     
         6 . The method of  claim 1 , further comprising:
 initiating a timer to track the elapsed time associated with the outputted request for confirmation; and   upon expiration of the timer, removing the outputted request for confirmation.   
     
     
         7 . The method of  claim 1 , wherein the user device and the client device are different devices. 
     
     
         8 . The method of  claim 1 , wherein the user device and the client device are the same device. 
     
     
         9 . A user device comprising:
 a communication subsystem for communicating with a login authority server;   a processor coupled to the communication subsystem;   an output device coupled to the processor; and   a memory coupled to the processor, the memory storing processor-executable instructions which, when executed by the processor, cause the processor to:   receive an authentication request from the login authority server, the login authority server configured for receiving, from a request initiator, a request to authenticate a login from a client device;   output, at the output device, a request for confirmation to proceed with a login associated with the authentication request;   after outputting the request for confirmation, receive input from an input mechanism associated with the device; and   respond to the authentication request by sending a response to the login authority server based on the received input, such that the login is authenticated without the use of a password.   
     
     
         10 . The user device of  claim 9 , wherein the received input indicates a desire to proceed with the login and wherein the response authorizes the login authority server to inform the request initiator that the login has been authorized. 
     
     
         11 . The user device of  claim 10 , wherein the outputted request for confirmation does not require input of a password and no password is input to the device between the outputting of the request for confirmation and the sending of the response. 
     
     
         12 . The user device of  claim 9 , wherein the authentication request includes information identifying the request initiator and wherein the outputted request for confirmation is generated based on the information identifying the request initiator. 
     
     
         13 . The user device of  claim 9 , wherein the received input indicates a desire to not proceed with the login and wherein the response informs the login authority server that the login is not authorized. 
     
     
         14 . The user device of  claim 9 , wherein the instructions further configure the processor to:
 initiate a timer to track the elapsed time following the generation of the outputted request for confirmation; and   upon expiration of the timer, remove the outputted request for confirmation.   
     
     
         15 . The user device of  claim 9 , wherein the user device and the client device are different devices. 
     
     
         16 . The user device of  claim 9 , wherein the user device and the client device are the same device. 
     
     
         17 . A non-transitory computer readable storage medium comprising processor-executable instructions which, when executed, configure a processor to:
 receive, at a user device, an authentication request from a login authority server, the login authority server configured for receiving, from a request initiator, a request to authenticate a login from a client device;   output a request for confirmation to proceed with a login associated with the authentication request;   after outputting the request for confirmation, receive input from an input mechanism associated with the device; and   respond to the authentication request by sending a response to the login authority server based on the received input, such that the login is authenticated without the use of a password.   
     
     
         18 . The non-transitory computer readable storage medium of  claim 17 , wherein the received input indicates a desire to proceed with the login and wherein the response authorizes the login authority server to inform the request initiator that the login has been authorized. 
     
     
         19 . The non-transitory computer readable storage medium of  claim 18 , wherein the outputted request for confirmation does not require input of a password and no password is input to the device between the outputting of the request for confirmation and the sending of the response. 
     
     
         20 . The non-transitory computer readable storage medium of  claim 17 , wherein the authentication request includes information identifying the request initiator and wherein the outputted request for confirmation is generated based on the information identifying the request initiator.