Simplified multi-factor authentication

1. A method of handling a factor of a multi-factor authentication sequence, said method comprising:

receiving a biometric candidate at a device associated with an identity verification element, said device lacking access to a biometric template until received from said identity verification element;

generating a cryptographic key from said biometric candidate;

decrypting a previously stored, encrypted character sequence associated with said identity verification element, wherein said decrypting employs said cryptographic key and results in a decrypted character sequence;

transmitting said decrypted character sequence to said identity verification element;

receiving, from said identity verification element, an indication of character sequence verification;

determining, from said indication, that said identity verification element has verified said decrypted character sequence; and

responsive to said determining, proceeding with said multi-factor authentication sequence by:

extracting said biometric template from said identity verification element; and

determining that said biometric candidate matches said biometric template.

2. The method of claim 1 wherein said biometric candidate comprises a candidate fingerprint.

3. The method of claim 1 wherein said identity verification element comprises a smart card.

4. The method of claim 3 wherein said character sequence comprises a personal identification number associated with said smart card.

5. The method of claim 1 wherein said proceeding with said multi-factor authentication sequence further comprises:

receiving a random challenge from an associated device;

transmitting said random challenge to said identity verification element;

receiving a signed challenge from said identity verification element; and

transmitting said signed challenge to said associated device.

6. A smart card reader comprising:

a storage component interface for receiving a smart card for communication therewith;

a memory for storing an encrypted character sequence associated with said smart card, said memory lacking access to a biometric template until received from said smart card;

a biometric input device; and

a processor configured to:

receive a biometric candidate from said biometric input device;

generate a cryptographic key from said biometric candidate;

decrypt said encrypted character sequence, wherein said decrypting employs said cryptographic key and results in a decrypted character sequence;

transmit said decrypted character sequence to said smart card;

receive, from said smart card, an indication of character sequence verification;

determine, from said indication, that said smart card has verified said decrypted character sequence; and

responsive to said determining, proceed with a multi-factor authentication sequence by:

extracting said biometric template from said smart card; and

determining that said biometric candidate matches said biometric template.

7. The smart card reader of claim 6 wherein said biometric candidate comprises a candidate fingerprint.

8. The smart card reader of claim 6 wherein said character sequence comprises a personal identification number associated with said smart card.

9. The smart card reader of claim 6 wherein, to proceed with said multi-factor authentication sequence, said processor is further configured to:

receive a random challenge from an associated device;

transmit said random challenge to said identity verification element;

receive a signed challenge from said identity verification element; and

transmit said signed challenge to said associated device.

10. A non-transitory computer readable medium containing computer-executable instructions that, when performed by a processor, cause said processor to:

receive a biometric candidate at a device associated with an identity verification element, said device lacking access to a biometric template until received from said identity verification element;

generate a cryptographic key from said biometric candidate;

decrypt a previously stored, encrypted character sequence associated with an identity verification element, wherein said decrypting employs said cryptographic key and results in a decrypted character sequence;

transmit said decrypted character sequence to said identity verification element;

receive, from said identity verification element, an indication of character sequence verification;

determine, from said indication, that said identity verification element has verified said decrypted character sequence; and

responsive to said determining, proceed with a multi-factor authentication sequence by:

extracting said biometric template from said identity verification element; and

determining that said biometric candidate matches said biometric template.

11. The non-transitory computer readable medium of claim 10 wherein said biometric candidate comprises a candidate fingerprint.

12. The non-transitory computer readable medium of claim 10 said identity verification element comprises a smart card.

13. The non-transitory computer readable medium of claim 12 wherein said character sequence comprises a personal identification number associated with said smart card.

14. The non-transitory computer readable medium of claim 10 wherein, to further proceed with said multi-factor authentication sequence, said instructions further cause said processor to:

receive a random challenge from an associated device;

transmit said random challenge to said identity verification element;

receive a signed challenge from said identity verification element; and

transmit said signed challenge to said associated device.