System and Method for Securing A Credential Vault On A Trusted Computing Base

A non-transitory computer-readable medium, part of a mobile computing device, having processor-executable instructions stored thereon for utilizing a secure credential vault, the processor-executable instructions, when executed by a processor, causing the following steps to be performed:

• prompting a user for a credential vault password and receiving the credential vault password from the user;
• prompting a user for a near-field communication (NFC) security token and receiving the NFC security token from a NFC-enabled device;
• verifying, by the mobile computing device, the credential vault password and the received NFC security token;
• and
• opening, by the mobile computing device, a secure session with the secure credential vault in response to successful verification.

A mobile computing device for providing a secure credential vault, the mobile computing device comprising:

• a memory, comprising a credential vault manager application stored thereon;
• a processor, configured to execute the credential vault manager application;
• a secure element connected to the processor via a secure element interface, the secure element comprising the secure credential vault and a card application;
• a near-field communication (NFC) reader, configured to communicate with a physical NFC-enabled device;
• and
• an input interface, configured to receive input from a user;
• wherein the device is configured to receive a credential vault password from the user via the input interface and to receive an NFC security token via the NFC reader;
• and
• wherein execution of the credential vault manager application includes verifying the received credential vault password and the received NFC security token, and opening a secure session with the credential vault of the secure element in response to successful verification.