An authentication protocol for establishing a momentary trust zone during a login and operation procedure

A computer implementable protocol for establishing a momentary trust zone as part of a login and operation procedure which includes a user onboarding process, a user login process, and an operation process, the protocol, during a user login process, comprising the steps of:

• receiving, by a user interface login credential of a user to initiate the login process;
• instructing, by the user interface the user to activate a personal cryptographic key generator;
• performing, by the personal cryptographic key generator, an ephemeral key generation and/or credentials signing upon activation by the user;
• transmitting, by the personal cryptographic key generator the newly generated ephemeral keys and/or signed credentials to a cryptographic processor which is embedded within the user interface
• processing, by the cryptographic processor, data received from the user interface and the personal cryptographic key generator;
• and
• transmitting, by the cryptographic processor, the processed data to a verification processor which is embedded within the service provider servers;
• whereby the momentary trust zone is established when the processed data is authenticated and verified by the verification processor
• wherein the personal cryptographic key generator is configured to:
• (a) operate entirely in an offline mode with the exception of a single instance where the personal cryptographic key generator is switched to an online mode to transmit the generated ephemeral keys and/or the signed credentials, and after which it switches back to the offline mode;
• and (b) operate in an unbalance communication mode where the personal cryptographic key generator exclusively initiates and/or disconnects a data transfer link to a device which the user interface is operated thereon;
• and
• wherein the cryptographic processor is configured to (a) perform an encryption and/or decryption on the received data to ensure data confidentiality, (b) perform a data integrity checking algorithm on the received data, and (c) perform signatures signing on the user interface credential to authenticate and verify the user interface