Pairing protocol for peripherals with a secure function

A computing device comprising:

• a wireless interface;
• a memory device;
• and
• a processor including a host-associated secure circuit, the processor coupled with the wireless interface and the memory device, the processor configured to execute instructions for performing operations of:
• establishing a first encrypted local wireless data connection with a peripheral device via the wireless interface, the first encrypted local wireless data connection established via first cryptographic material derived using a public key generated by a peripheral-associated secure circuit in the peripheral device;
• establishing, via the first encrypted local wireless data connection, a second encrypted local wireless data connection between the host-associated secure circuit and the peripheral-associated secure circuit using second cryptographic material, the second cryptographic material derived using at least one key from the host-associated secure circuit and at least one key from the peripheral-associated secure circuit;
• receiving, from the peripheral-associated secure circuit and using the host-associated secure circuit, biometric data, wherein the biometric data is received using the second encrypted local wireless data connection and the second cryptographic material so that the biometric data is unknown to an application processor of the computing device;
• and
• authenticating a user based on the biometric data.

A method comprising:

• establishing, by a computing device, a first encrypted local wireless data connection with a peripheral device via a wireless interface, the first encrypted local wireless data connection established via first cryptographic material derived using a public key generated by a peripheral-associated secure circuit in the peripheral device;
• establishing, via the first encrypted local wireless data connection, a second encrypted local wireless data connection between a host-associated secure circuit in the computing device and the peripheral-associated secure circuit using second cryptographic material, the second cryptographic material derived using at least one key from the host-associated secure circuit and at least one key from the peripheral-associated secure circuit;
• receiving, from the peripheral-associated secure circuit and using the host-associated secure circuit, biometric data, wherein the biometric data is received using the second encrypted local wireless data connection and the second cryptographic material so that the biometric data is unknown to an application processor of the computing device;
• and
• authenticating a user based on the biometric data.

A data storage device including instructions that, when executed by a processor of a computing device, cause the processor to:

• establish a first encrypted local wireless data connection with a peripheral device via a wireless interface, the first encrypted local wireless data connection established via first cryptographic material derived using a public key generated by a peripheral-associated secure circuit in the peripheral device;
• establish, via the first encrypted local wireless data connection, a second encrypted local wireless data connection between a host-associated secure circuit in the computing device and the peripheral-associated secure circuit using second cryptographic material, the second cryptographic material derived using at least one key from the host-associated secure circuit and at least one key from the peripheral-associated secure circuit;
• receive, from the peripheral-associated secure circuit and using the host-associated secure circuit, biometric data, wherein the biometric data is received using the second encrypted local wireless data connection and the second cryptographic material so that the biometric data is unknown to an application processor of the computing device;
• and
• authenticate a user based on the biometric data.