Methods and systems for device authentication

1. A method for disabling a device associated with a virtual identity, the method comprising:

receiving, from the device, a request to register an unregistered device, the request associated with an electronic on-line transaction comprising:

a passcode guess, wherein the passcode guess comprises a digital signature derived from a user-provided passcode; and

a device identifier;

determining that the passcode guess does not authorize registration of the unregistered device;

incrementing a number of incorrect passcode guesses received within a time interval, wherein the incrementing is based on predetermined values for a type of transaction;

determining that the number of incorrect passcode guesses received within the time interval is greater than or equal to a threshold;

storing an indication that subsequent requests associated with the device identifier should not register unregistered devices;

disabling the device associated with the virtual identity based on the receiving, the determining that the passcode guess, the incrementing, the determining that the number of incorrect passcode guesses received, and the storing the indication;

receiving a request to register a second unregistered device, the request to register the second unregistered device comprising:

a second passcode guess; and

the device identifier; and

denying the request to register the second unregistered device based on the indication.

2. The method of claim 1 , further comprising sending the indication that subsequent requests associated with the device identifier should not register unregistered devices to a pairing repository.

3. The method of claim 1 , wherein the unregistered device comprises a smart phone.

4. The method of claim 1 , wherein the request to register the unregistered device further comprises an encrypted salt value.

5. The method of claim 1 , wherein the request to register the unregistered device further comprises a pairing code.

6. The method of claim 1 , wherein the unregistered device comprises a laptop computer, a desktop computer, a thin client, a tablet computer, a server, or a personal digital assistant (PDA).

7. The method of claim 1 , wherein the time interval is a periodic time interval.

8. The method of claim 7 , wherein the periodic time interval is a day or a week.

9. The method of claim 1 , wherein the time interval is a sliding time interval measured from a current time.

10. The method of claim 1 , wherein the time interval is based on the type of transaction.

11. An identity repository comprising:

one or more interfaces that receive requests from a device;

one or more processors; and

one or more memories communicatively coupled to the one or more processors, having instructions stored thereon, which, when executed by the one or more processors, cause the one or more processors to:

receive a request from the device through the one or more interfaces, the request associated with an electronic on-line transaction comprising:

a passcode guess, wherein the passcode guess comprises a digital signature derived from a user-provided passcode; and

a device identifier;

determine that the passcode guess is incorrect;

increment a number of incorrect passcode guesses received within a time interval, wherein the incrementing is based on predetermined values for a type of transaction;

determine that the number of incorrect passcode guesses received within the time interval is greater than or equal to a threshold;

generate an indication in the one or more memories that subsequent requests associated with the device identifier should not be granted;

disable the device associated based on the receive, the determine that the passcode guess is incorrect, the increment, the determine that the number of incorrect passcode guesses received, and the generate the indication;

receive a request to register a second unregistered device, the request to register the second unregistered device comprising:

a second passcode guess; and

the device identifier; and

deny the request to register the second unregistered device based on the indication.

12. The identity repository of claim 11 , wherein the one or more memories further store encrypted personal information associated with a virtual identity, wherein the device identifier is associated with the virtual identity.

13. The identity repository of claim 11 , wherein the request from the device comprises a request to use a virtual identity.

14. The identity repository of claim 11 , wherein the request from the device comprises a request to pair an unregistered device with a virtual identity.

15. The identity repository of claim 11 , wherein the instructions, when executed by the one or more processors, further cause the one or more processors to:

send the indication to a pairing repository that is physically separate from the identity repository.

16. The identity repository of claim 11 , wherein the device comprises a laptop computer, a desktop computer, a thin client, a tablet computer, a server, a smart phone or a personal digital assistant (PDA).

17. The identity repository of claim 11 , wherein the time interval is a periodic time interval.

18. The identity repository of claim 17 , wherein the periodic time interval is a day or a week.

19. The identity repository of claim 11 , wherein the time interval is a sliding time interval measured from a current time.

20. The identity repository of claim 11 , wherein the time interval is based on the type of transaction.