Authenticator app for consent architecture

Abstract

A methodfor authenticating operations within consent architecture includes obtaining an operation requestrequesting a service applicationto access a remote entityto perform an operation (). The method also includes issuing, by the service application, an authentication requestrequesting an authenticator applicationto obtain user authentication credentialsfor authenticating a userbefore the remote entity performs the operation. The method also includes encrypting, by the authenticator application, the obtained user authentication credentials using a public keyof the remote entity. The service application is restricted from obtaining the user authentication credentials in unencrypted form. The method also includes providing, by the authenticator application, the encrypted user authentication credentials to the service application and transmitting, by the service application, the operation request and the encrypted user authentication credentials to the remote entity.