Systems and methods for requiring cryptographic data protection as a precondition of system access

A system, comprising:

• a memory device;
• and
• an electronic computing device in communication with the memory device, the electronic computing device being configured to:
• requesting, via the electronic device, access to a third party system;
• receive, from the third party system, a request for a cryptographic assertion, wherein the cryptographic assertion verifies to the third party system that a data protection system is operational on the electronic computing device prior to accessing the third party system;
• extract a common name from a certificate associated with the third party system;
• generate a nonce corresponding to the request for the cryptographic assertion;
• generate an encrypted client data package comprising a device identifier for the electronic computing device and the nonce;
• send an encrypted package to the data protection system for verification that the data protection system is operational, wherein the encrypted package comprises the common name and the encrypted client data package;
• validate the request for the cryptographic assertion, wherein validating the request comprises:
• determining that the request is not a replay of a previous request based at least in part on the nonce;
• and
• comparing the device identifier to a known fingerprint hash for the electronic computing device;
• in response to validating the request, send the common name and the encrypted client data package to a key service;
• and
• receive a signed device assertion from the key service.

A non-transitory computer-readable medium embodying a program that, when executed by an electronic computing device, causes the electronic computing device to:

• requesting, via the electronic computing device, access to a third party system;
• receive, from the third party system, a request for a cryptographic assertion, wherein the cryptographic assertion verifies to the third party system that a data protection system is operational on the electronic computing device prior to accessing the third party system;
• extract a common name from a certificate associated with the third party system;
• generate a nonce corresponding to the request for the cryptographic assertion;
• generate an encrypted client data package comprising a device identifier for the electronic computing device and the nonce;
• send an encrypted package to the data protection system for verification that the data protection system is operational, wherein the encrypted package comprises the common name and the encrypted client data package;
• validate the request for the cryptographic assertion, wherein validating the request comprises:
• determining that the request is not a replay of a previous request based at least in part on the nonce;
• and
• comparing the device identifier to a known fingerprint hash for the electronic computing device;
• in response to validating the request, send the common name and the encrypted client data package to a key service;
• and
• receive a signed device assertion from the key service.