Systems and methods for trustworthy electronic authentication using a computing device

A method for registering a computing device with at least one remote authentication system comprising;

• generating an immutable device-unique identity token for a computing device, whereby a first identity factor in a multi-factor authentication method is created;
• generating a device-unique shared-secret encryption key-derivation key using cryptographic operations on the device-unique identity token, whereby the key is cryptographically bound to the computing device;
• storing the device-unique encryption key-derivation key on a machine-readable information storage medium associated with the computing device;
• obtaining a high-entropy one-time-pad shared-secret symmetric encryption key from a remote authentication system;
• entering said one-time-pad encryption key manually into a trusted input mechanism associated with the computing device;
• encrypting at least the device-unique shared-secret encryption key-derivation key on the computing device using said one-time pad encryption key;
• transmitting the device-unique identity token and the encrypted device-unique shared-secret encryption key-derivation key to the remote authentication system over a network communicatively coupled to the computing device;
• and
• storing the received device-unique identity token and the device-unique shared-secret key-derivation key in a device registration database associated with the remote authentication system containing a plurality of records associated with (i.e., keyed with) each device's unique identity token where the association between said computing device and its encryption key-derivation key is registered with at least one remote authentication system, whereby a shared-secret key-derivation key to generate encryption keys for future communication sessions is provided.