Patent ID: 9565169
Date: 2017-02-07
CPC Classifications: G06F,H04L,H04W

Claim:
1. A method implemented in a computing device, the method comprising: determining that theft protection is to be enabled on the computing device; sending, to an identity service over a network, user credentials of a user of the computing device; receiving, from the identity service, a ticket indicating that the user credentials have been verified by the identity service; sending, to a key service over the network, the ticket; receiving, from the key service, a data value having been generated by the key service by applying a cryptographic hash function to a combination of a recovery key for the computing device and a device identifier that identifies the computing device; saving the data value as an authenticated variable on the computing device by writing the data value to an authenticated variable storage system of the computing device; receiving user input that is the recovery key of the computing device; writing the recovery key to the authenticated variable storage system as an unauthenticated variable; generating an additional data value based on the user input as well as the device identifier that identifies the computing device; determining whether the data value and the additional data value are the same value; and changing the computing device to an unprotected state in response to the data value and the additional data value being the same value.