from the authentication provider allows multiple service providers to use the same authentication provider such that subscribers of services from multiple service providers may register a single authentication provider and thus use a single method to produce the second identity credential an authentication provider provides a common validation service to a plurality of unrelated service providers an electronic user interface and a key chain token for carrying out the authentication process are also disclosed application_number US 89365104 A description fig1 shows a transaction resulting in establishing a session in order to establish the session 104 with the service provider 102 the subscriber 101 sends a message 111 containing a first username 131 a first password 132 and second password 133 to the service provider 102 the service provider 102 verifies that the first username 131 with the first password 132 identify the user 101 the service provider 102 correlates the identity of the user 101 with the second username 134 established through prior arrangement the service provider 102 sends a message 112 containing the second username 134 and the second password 133 to the authentication provider 103 designated through prior arrangement step 121 the authentication provider 103 verifies that the second username 134 and the second password 133 represent a valid credential and sends a reply message 113 containing the credential status.