Secure element authentication
AssigneeMicrosoft Technology Licensing, LLC
InventorsAnoop Anantha, Murali R. Krishnan, Alan L. Marshall, Kamran Rajabi Zargahi, Miller Thomas Abel
Life of this patent
Estimating the term…
Abstract
Secure element authentication techniques are described. In implementations, a confirmation is received that an identity of a user has been physically verified using one or more physical documents. One or more credentials that are usable to authenticate the user are caused to be stored in a secure element of a mobile communication device of the user, the secure element implemented using tamper-resistant hardware.
Claims20
A method comprising:
- receiving, from an application executing on a mobile communication device, a request for a secure element to provision credentials for the application;
- based at least on receiving the provisioning request, storing the credentials in the secure element;
- receiving, by the application, a request for a signature of data using the credentials;
- and
- based at least on receiving the request for the signature, returning the signature stored in the secure element without exposing the credentials outside of the secure element.
A mobile computing device comprising a secure element implemented in tamper-resistant hardware that is configured to:
- receive, from an application executing on the mobile communication device, a request for the secure element to provision credentials for the application;
- based at least on receiving the provisioning request, store the credentials in the secure element;
- receive a request by the application for a signature of data using the credentials;
- and
- based at least on receiving the request for the signature, return the signature stored in the secure element without exposing the credentials outside of the secure element.
One or more computer storage media storing computer readable instructions that, when executed by at least a processor, cause the at least one processor to perform operations comprising:
- receiving, from an application executing on a mobile communication device, a request for a secure element to provision credentials for the application;
- in response to the provisioning request, storing the credentials in the secure element;
- receiving, by the application, a request for a signature of data using the credentials;
- and
- in response to the request for the signature, returning the signature stored in the secure element without exposing the credentials outside of the secure element.
Dependencies are inferred from the claim text.