Patent ID: 9559851
Date: 2017-01-31
CPC Classifications: H04L

Claim:
1. A first computing device for securely pairing with a second computing device, the first computing device comprising: a trusted execution environment module to generate a session message key based on a key exchange with the second computing device; and a communication module to receive a hardware group identification of the second computing device and a message that includes a hardware key certificate, a cryptographically-signed communication, and a message authentication code from the second computing device, the cryptographically-signed communication signed with a private hardware key of the second computing device, wherein the trusted execution environment module is further to: validate the message authentication code based on the message and the session message key; verify that the hardware group identification is not within a revocation list that is indicative of revoked hardware group identifications; validate the certificate and the signature received from the second computing device; and identify a user of the second computing device based on user-identifying data received from the second computing device in response to validation of the message authentication code, the certificate, and the signature.