Patent ID: 11907362
Assignee: MAFEE, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 11:
12. A user authentication system, comprising:
an attestation server, the attestation server including:
a processor; and
a memory storing executable instructions that when executed by the processor cause the processor to:
confirm that an un-trusted electronic device has an enclave or a trusted execution environment;
assign an authentication signing key to the electronic device;
receive authentication data that identifies an authorized user;
share the authentication data that identifies the authorized user and the assigned authentication signing key with the electronic device using a public-key infrastructure; and
share the authentication signing key with an authentication server; and

the authentication server, the authentication server including:
a processor; and
a memory storing executable instructions that when executed by the processor cause the processor to:
receive a signing key and assertion data from the electronic device, wherein the assertion data includes results of a comparison of acquired user identification data to the authentication data; and
determine if the assertion data is valid by:
comparing the received assertion data to a confidence level threshold; and
comparing the received signing key to the authentication signing key assigned to the electronic device.