Patent ID: 9648013
Date: 2017-05-09
CPC Classifications: G06F,H04L

Claim:
1. A method of performing passcode authentication, the method being conducted at a mobile device and comprising the steps of: receiving, by the mobile device, an authentication request from a security gateway; receiving, by the mobile device, a passcode entered by a user of the mobile device; comparing the entered passcode to a passcode offset securely stored in a hardware security module (HSM) within or attached to the mobile device, the HSM comprising a processor having a cryptographic arithmetic logic unit that is optimized for performing cryptographic functions and a secure storage for passcode offsets; if the entered passcode corresponds with the passcode offset, generating, by the HSM, a secure authentication confirmation message and transmitting the confirmation message to the security gateway; and, if the entered passcode does not correspond with the passcode offset, generating, by the HSM, a secure authentication denial message and transmitting the authentication denial message to the security gateway, wherein the steps of generating a secure authentication confirmation message or a secure authentication denial message include digitally signing the secure authentication confirmation message or secure authentication denial message, wherein the method includes a step of establishing encrypted communication between the mobile device and the security gateway to transmit the secure authentication confirmation message or secure authentication denial message.