Secure virtualization authentication
OwnerAdiseshu Hariinventor
Life of this patent
Estimating the term…
Abstract
A method for validating a bio-locked identity of a user in secure virtualization authentication (SVA) System, including: sending by the user a first bio-locked identity validation request toward a first validator; receiving a first out-of-band communication from the first validator; responding by the user to the first out-of-band communication from the first validator using deep biometric authentication; and receiving an authentication state of the user from a SVA platform.
Claims36
A method for detecting by a user device a cybersecurity threat in a secure virtualization authentication (SVA) System, comprising:
- obtaining application side TLS parameters from a client application;
- obtaining application server side TLS parameters using a bio-locked channel;
- comparing the application side TLS parameters with the application server side TLS parameters;
- and
- determining that a cybersecurity threat exists if the application side TLS parameters do not match the application server side TLS parameters.
A method of mitigating a cybersecurity threat in a secure virtualization authentication (SVA) System, comprising:
- generating session TLS parameters TLS1 by an application server;
- transmitting TLS parameters TLS1 using a bio-locked channel to an SVA platform;
- transmitting, by the SVA platform, the TLS parameters TLS1 to an SVA client on a user device;
- forwarding, by the SVA Client, TLS parameters TLS1 to an application on the user device;
- and
- initiating, by the application, a TLS session with the application server using TLS parameters TLS1 without parameter legitimation over the Internet.
A method of bio-locking entities in a secure virtualization authentication (SVA) System using enrolled identities, comprising:
- maintaining by an SVA platform a registry of users;
- associating with each user in the registry, one or more enrolled identities;
- and
- associating with each enrolled identity, a key pair to be used to for bio-locked communications.
A method of performing a multi-signature transaction in a secure virtualization authentication (SVA) System using enrolled identities, comprising:
- initiating a multi-signature transaction by a first user device toward a second user device using an SVA client on the first user device by sending the transaction request to the SVA Platform;
- verifying, by an SVA platform, that the identity of the first user device is validated and, if validated;
- adding signature to the transaction request and forwarding the signed transaction request to the second user device.
A method of communicating using a bio-locked token (BLT) in a secure virtualization authentication (SVA) System using enrolled identities, wherein an SVA platform within the SVA System maintains a registry of users, each user in the registry having associated therewith one or more enrolled identities, and each enrolled identity having associated therewith, two public-private key pairs to be used to for bio-locked communications, a first public-private key pair to be used by an SVA client associated with the corresponding enrolled identify and a second public-private key part to be used by the SVA platform, said method comprising:
- generating a message from a first enrolled identity to a second enrolled identity;
- signing the message with a first key pair associated with the first enrolled identity by an SVA client of the first enrolled identity;
- signing the message with a second key pair associated with the first enrolled identity by the SVA platform;
- encrypting the signed massage with the public key of the SVA platform and a public key associated with the second enrolled identity;
- and
- transmitting the encrypted message to the second enrolled identity.
Dependencies are inferred from the claim text.