Universal authentication token
AssigneeBroadcom Corporation
InventorMark Buer
Life of this patent
Estimating the term…
Abstract
A universal authentication token is configured to securely acquire security credentials from other authentication tokens and/or devices. In this manner, a single universal authentication token can store the authentication credentials required to access a variety of resources, services and applications for a user. The universal authentication token includes a user interface, memory for storing a plurality of authentication records for a user, and a secure processor. The secure processor provides the required cryptographic operations to encrypt, decrypt, and/or authenticate data that is sent or received by universal token. For example, secure processor may be used to generate authentication data from seed information stored in memory.
Claims20
A wireless device with an embedded universal authentication token, comprising:
- a secure processor configured to cryptographically authenticate the universal authentication token, using a certificate or a key, and a user of the universal authentication token to an authentication information storage device;
- a wireless communications interface configured to receive authentication data from the authentication information storage device if the universal authentication token and the user of the universal authentication token are successfully authenticated to the authentication information storage device, wherein the authentication data includes a key;
- a memory configured to store in a security boundary established by the secure processor a resource authentication record that includes the received authentication data;
- and
- a near field communication interface configured to transmit the authentication data included in the resource authentication record or data generated based on the authentication data included in the resource authentication record to an access device to access a resource.
A method for provisioning and using a universal authentication token embedded in a wireless device, the method comprising:
- cryptographically authenticating the universal authentication token, using a certificate or a key, and a user of the universal authentication token to an authentication information storage device;
- wirelessly receiving authentication data from the authentication information storage device if the universal authentication token and the user of the universal authentication token are successfully authenticated to the authentication information storage device, wherein the authentication data includes a key;
- storing in a security boundary established by the secure processor a resource authentication record that includes the received authentication data;
- and
- transmitting the authentication data included in the resource authentication record or data generated based on the authentication data included in the resource authentication record to an access device to access a resource.
Dependencies are inferred from the claim text.