METHOD, APPARATUS AND SYSTEM FOR SECURING A MOBILE APPLICATION

The invention pertains to a software token personalization method comprising: generating, at an authentication server, a first personalization seed; generating, at the authentication server, a first personalization initiating message comprising said first personalization seed; receiving, at a first authentication token associated with a user, said first personalization initiating message; retrieving, at the first authentication token, said first personalization seed from the first personalization initiating message; generating, at the first authentication token, a second personalization seed from the first personalization seed; generating, at the first authentication token, a second personalization message comprising the second personalization seed; receiving, at a second, different software authentication token, said second personalization message; retrieving, at the second software authentication token, said second initialization seed from the second personalization message; deriving, at the second software authentication token, a value for a credential generation key from the second personalization seed; and determining, at the authentication server, a server copy of the credential generation key. The invention also pertains to an associated apparatus and system.