System and method for permitting a request after verifying knowledge of first and second secrets

A non-transitory, computer-readable:

• storage medium having stored thereon instructions, which, when executed by a processor of a server, cause the server to perform actions comprising:
• receiving, by a security component running on the server, a request for the performance of an action on the computing device, the computing device requiring proof of knowledge of a first secret and proof of knowledge of a second secret to permit the request, the first secret provisioned on the computing device and known to a first party but not a second party, the second secret provisioned on the computing device and known to the second party but not the first party;
• determining, by the security component without receiving the first secret with the request, that the request is from the first party having knowledge of the first secret;
• initiating the transmitting of first information to the computing device, by the security component running on the server, the first information indicating knowledge of the first secret;
• and
• initiating the transmitting of second information to the computing device, by the security component running on the server;
• the second information indicating knowledge of the second secret, the computing device permitting the requested action upon the computing device verifying the first information and the second information.

A system, comprising a server including at least one processor and memory with instructions that when executed by the at least one processor;

• cause the server to perform actions comprising:
• receiving, by a security component running on the server, a request for the performance of an action on the computing device, the computing device requiring proof of knowledge of a first secret and proof of knowledge of a second secret to permit the request, the first secret provisioned on the computing device and known to a first party but not a second party, the second secret provisioned on the computing device and known to the second party but not the first party;
• determining, by the security component without receiving the first secret with the request, that the request is from the first party having knowledge of the first secret;
• initiating the transmitting of first information to the computing device, by the security component running on the server, the first information indicating knowledge of the first secret;
• and
• initiating the transmitting of second information to the computing device, by the security component running on the server, the second information indicating knowledge of the second secret, the computing device permitting the requested action upon the computing device verifying the first information and the second information.