Automating verification using secure encrypted phone verification

A computer system, comprising:

• a processor;
• a memory device coupled to the processor;
• and
• a computer readable storage device coupled to the processor, wherein the storage device contains program code executable by the processor via the memory device to implement a method for automatic and secure verification of a user using encrypted phone verification, the method comprising:
• detecting, by a processor of a computing system, an attempt to access a service requiring multi-factor authentication from a first user computing device;
• requesting, by the processor, a trusted platform module (TPM) public key from a second user computing device by sending a request to the first user computing device over a first network, wherein, as a function of sending the request:
• the first user computing device requests the TPM public key from the second user computing device over a second network;
• the second user computing device sends the TPM public key to the first user computing device over the second network;
• and
• the first user computer device sends the TPM public key to the computing system over the first network;
• generating, by the processor, a nonce in response to receiving the TPM public key of the second user computing device;
• sending, by the processor, the nonce for signature by a TPM private key of the second user computing device;
• receiving, by the processor, a signed nonce, wherein the signed nonce is signed by the TPM private key of the second computing device and automatically sent back to the computing system as a function of a signing of the signed nonce;
• decrypting, by the processor, the signed nonce using the TPM public key of the second user computing device;
• and
• determining, by the processor, that a value of the signed nonce matches a value of the nonce to authenticate the first user computing device and allowing access to the service.

A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, the computer readable program code comprising an algorithm that when executed by a computer processor of a computing system implements a method for automatic and secure verification of a user using encrypted phone verification, the method comprising:

• detecting, by a processor of a computing system, an attempt to access a service requiring multi-factor authentication from a first user computing device;
• requesting, by the processor, a trusted platform module (TPM) public key from a second user computing device by sending a request to the first user computing device over a first network, wherein, as a function of sending the request:
• the first user computing device requests the TPM public key from the second user computing device over a second network;
• the second user computing device sends the TPM public key to the first user computing device over the second network;
• and
• the first user computer device sends the TPM public key to the computing system over the first network;
• generating, by the processor, a nonce in response to receiving the TPM public key of the second user computing device;
• sending, by the processor, the nonce for signature by a TPM private key of the second user computing device;
• receiving, by the processor, a signed nonce, wherein the signed nonce is signed by the TPM private key of the second computing device and automatically sent back to the computing system as a function of a signing of the signed nonce;
• decrypting, by the processor, the signed nonce using the TPM public key of the second user computing device;
• and
• determining, by the processor, that a value of the signed nonce matches a value of the nonce to authenticate the first user computing device and allowing access to the service.