Patent ID: 8296841

Claim:
A computer-readable storage medium not consisting of a signal, the computer-readable storage medium having computer-executable instructions for utilizing a Trusted Platform Module (TPM) to implement a One-Time Password (OTP) mechanism, the computer-executable instructions performing steps comprising: receiving a request from an entity to access a protected secret, the protected secret comprising at least one reference to one or more entries of a delegation table of the TPM; obtaining, from the one or more entries of the TPM delegation table, one or more version numbers; providing the one or more version numbers to the entity requesting access to the protected secret; receiving, in response to the providing the one or more version numbers, one or more delegation authentication values; selecting one or more delegation blobs associated with the received one or more delegation authentication values; utilizing the protected secret, the selected one or more delegation blobs and the received one or more delegation authentication values to request that the TPM provide access to the protected secret; receiving, from the TPM, an authentication value that was protected together with the secret, the received authentication value being for a key blob associated with the selected one or more delegation blobs; utilizing the received authentication value and the key blob to request that the TPM increment one or more version numbers of one or more delegation blobs associated with the key blob; and replacing one or more delegation blobs with new delegation blobs generated by the TPM as part of the requested incrementing of the one or more version numbers.