Patent ID: 9064109
Filing Date: 2015-06-23
Classification: G06F,H04L

Abstract:
1. A system comprising: a security engine including an identity provider logic to generate a first key pair of a key pairing associating a user of the system and a service provider that provides a web service and having a second system coupled to the system via a network, to perform a secure communication with the second system to enable the second system to verify that the identity provider logic is executing in a trusted execution environment of the system, and responsive to the verification, to send a first key of the first key pair to the second system, the first key of the first key pair to enable the second system to verify an assertion communicated by the identity provider logic that the user has been authenticated to the system according to a multi-factor authentication, the key pairing further including a second key pair, wherein the service provider is to generate the second key pair; and at least one sensor to provide sensed information regarding the user to the security engine, wherein the security engine is to authenticate the user using the sensed information.