Patent ID: 11895225
Assignee: nan
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method for registering a computing device with at least one remote authentication system comprising;
generating an immutable device-unique identity token for a computing device, whereby a first identity factor in a multi-factor authentication method is created;
generating a device-unique shared-secret encryption key-derivation key using cryptographic operations on the device-unique identity token, whereby the key is cryptographically bound to the computing device;
storing the device-unique encryption key-derivation key on a machine-readable information storage medium associated with the computing device;
obtaining a high-entropy one-time-pad shared-secret symmetric encryption key from a remote authentication system;
entering said one-time-pad encryption key manually into a trusted input mechanism associated with the computing device;
encrypting at least the device-unique shared-secret encryption key-derivation key on the computing device using said one-time pad encryption key;
transmitting the device-unique identity token and the encrypted device-unique shared-secret encryption key-derivation key to the remote authentication system over a network communicatively coupled to the computing device; and
storing the received device-unique identity token and the device-unique shared-secret key-derivation key in a device registration database associated with the remote authentication system containing a plurality of records associated with (i.e., keyed with) each device's unique identity token where the association between said computing device and its encryption key-derivation key is registered with at least one remote authentication system, whereby a shared-secret key-derivation key to generate encryption keys for future communication sessions is provided.