Patent ID: 11936775
Assignee: KEYLESS TECHNOLOGIES SRL
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 11:
12. The method of claim 11, further comprising, after the deleting the sensitive enrollment information and after each one of the following:
the obtaining, at the first subsystem, the authentication sample indicative of the authentication information provided by the entity;
the computing, at the first subsystem, the authentication codeword by decoding the decombination of the trusted user secret and the authentication sample; and
the running, at the first subsystem, the instance of the two-party protocol with the second subsystem using the authentication codeword and the server secret to generate the authentication key, generating, at the first subsystem, an authentication payload based on the authentication key, wherein the authentication payload comprises an authentication user keypair comprising an authentication user public key and an authentication user private key;
sending, from the first subsystem to the third subsystem, a challenge response comprising a challenge signed by the authentication user private key of the authentication payload; and
after the sending the challenge response, deleting sensitive authentication information from the first subsystem, wherein the sensitive authentication information comprises:
the obtained authentication sample;
the computed authentication codeword;
the generated authentication key; and
at least the authentication user private key of the authentication payload.