Trusted execution of an executable object on a local device

A system including an attestation server and an authentication server, wherein the attestation server includes non-transitory computer readable medium having instructions stored thereon, the instructions, when executed by a processor, cause the processor to:

• confirm that an un-trusted electronic device has an enclave or a trusted execution environment;
• assign an authentication signing key to the electronic device;
• receive authentication data that identifies an authorized user;
• share the authentication data that identifies the authorized user and the assigned authentication signing key with the electronic device;
• and
• share the authentication signing key with the authentication server;
• and
• wherein the authentication server is configured to
• receive a signing key and assertion data from the electronic device, wherein the assertion data includes results of a comparison of acquired user identification data to the authentication data;
• and
• determine if the assertion data is valid by:
• comparing the received assertion data to a confidence level threshold;
• and
• comparing the received signing key to the authentication signing key assigned to the electronic device.

A user authentication system, comprising:

• an attestation server, the attestation server including:
• a processor;
• and
• a memory storing executable instructions that when executed by the processor cause the processor to:
• confirm that an un-trusted electronic device has an enclave or a trusted execution environment;
• assign an authentication signing key to the electronic device;
• receive authentication data that identifies an authorized user;
• share the authentication data that identifies the authorized user and the assigned authentication signing key with the electronic device using a public-key infrastructure;
• and
• share the authentication signing key with an authentication server;
• and
• the authentication server, the authentication server including:
• a processor;
• and
• a memory storing executable instructions that when executed by the processor cause the processor to:
• receive a signing key and assertion data from the electronic device, wherein the assertion data includes results of a comparison of acquired user identification data to the authentication data;
• and
• determine if the assertion data is valid by:
• comparing the received assertion data to a confidence level threshold;
• and
• comparing the received signing key to the authentication signing key assigned to the electronic device.