Multi-modal access to an online service using hierarchical cryptographic keys for user authentication of accounts and subaccounts

Abstract

The exemplary embodiments may provide a password-less user authentication mechanism that enables users to be authenticated for accessing an online service. The online service may be, for example, a website that provides a service. A user registers with the online service and then is given a private cryptographic key that is used to gain access to the online service. The exemplary embodiments enable the creation of subaccounts that are affiliated with an account. At least one offspring cryptographic key pair for user authentication may be generated for each subaccount. The offspring cryptographic key pairs are derived from the primary cryptographic key pair for user authentication that is associated with the account. The offspring key cryptographic key pairs are used to gain access to the online service via a subaccount. Each subaccount may have different modes of access. Each subaccount may have different authorizations relative to use of the online service.