Patent ID: 8122245
Filing Date: 2012-02-21
Classification: G06Q,H04L

Abstract:
1. A method for enabling a trusted entity to identify a user computer with a security module within a system comprising further an attester computer and a verification computer, the method comprising at the user computer the steps of: receiving from the attester computer an attestation value, the attestation value being derived from a security module public key and an identifying value of the security module; deriving under use of the security module and using a hash function, a user attestation-signature value from the attestation value; computing an encryption by the user computer under use of a trusted-entity public key and a module-generated-identifier value, said module-generated-identifier value relating to the identifying value; and providing the user attestation-signature value and the encryption to the verification computer for verification, wherein the trusted entity having a trusted entity secret key is able to derive the module-generated-identifier value from the encryption, said module-generated-identifier value being usable to identify the user computer with the security module.