Multifactor derived identification

A continuous multifactor authentication system comprising:

• a trusted execution environment having a processor and memory storing instructions, the instructions programmed to cooperate with the processor to cause the trusted execution environment to:
• detect a plurality of types of biometric data of a user;
• receive a randomly generated number;
• translate the randomly generated number into selections of fractional portions of the plurality of types of biometric data;
• generate an identification credential from the fractional portions of the plurality of types of biometric data;
• and
• during a first log-in with a service provider, storing in a storage information of the trusted execution environment information identifying the service provider and the randomly generated number used to create the identification credential, wherein during the first log-in the randomly generated number is generated by a hardware root of trust located in the trusted execution environment;
• receive the randomly generated number from the storage in the trusted execution environment during a log-in to the service provider that is subsequent to the first log-in.

A non-transitory computer readable medium comprising instructions stored thereon, the instructions are effective to cause at least one processor of a continuous multifactor authentication system to perform operations comprising:

• detect a plurality of types of biometric data of a user;
• receive a randomly generated number;
• translate the randomly generated number into selections of fractional portions of the plurality of types of biometric data;
• and
• generate an identification credential from the fractional portions of the plurality of types of biometric data;
• and
• during a first log-in with a service provider, store information in a storage of a trusted executed environment identifying the service provider and the randomly generated number used to create the identification credential, wherein during the first log-in the randomly generated number is generated by a hardware root of trust located in the trusted execution environment;
• wherein the trusted execution environment is configured to receive the randomly generated number from the storage in the trusted execution environment during a log-in to the service provider that is subsequent to the first log-in.