Secure archival and recovery of multifactor authentication templates
AssigneeIntel Corporation
InventorsMichael Raziel, Abhilasha Bhargav-Spantzel, Hormuzd M. Khosravi, Ned M. Smith
Life of this patent
Estimating the term…
Abstract
Systems, apparatuses and methods may provide for generating, at a computing device, a challenge message in response to a recovery request and conducting a verification of one or more responses to the challenge message based on an encryption key stored in a hardware-based trusted execution environment (TEE) of the computing device. Additionally, an authentication template associated with a multifactor authentication service may be unlocked if the verification is successful.
Claims24
A computing device comprising:
- a battery port;
- a hardware-based trusted execution environment (TEE) to store an encryption key;
- and
- an archival recovery apparatus including,
- an authentication manager to generate, at the computing device, a challenge message in response to a recovery request, and
- a dynamic application loader communicatively coupled to the authentication manager, the dynamic application loader to conduct a verification of one or more responses to the challenge message based on the encryption key and unlock an authentication template associated with a multifactor authentication service if the verification is successful.
An apparatus comprising:
- an authentication manager to generate, at a computing device, a challenge message in response to a recovery request;
- and
- a dynamic application loader communicatively coupled to the authentication manager, the dynamic application loader to conduct a verification of one or more responses to the challenge message based on an encryption key stored in a hardware-based trusted execution environment (TEE) of the computing device and unlock an authentication template associated with a multifactor authentication service if the verification is successful.
A method comprising:
- generating, at a computing device, a challenge message in response to a recovery request;
- conducting a verification of one or more responses to the challenge message based on an encryption key stored in a hardware-based trusted execution environment (TEE) of the computing device;
- and
- unlocking an authentication template associated with a multifactor authentication service if the verification is successful.
At least one computer readable storage medium comprising a set of instructions, which when executed by a computing device, cause the computing device to:
- generate, at the computing device, a challenge message in response to a recovery request;
- conduct a verification of one or more responses to the challenge message based on an encryption key stored in a hardware-based trusted execution environment (TEE) of the computing device;
- and
- unlocking an authentication template associated with a multifactor authentication service if the verification is successful.
Dependencies are inferred from the claim text.