Patent ID: 7373509

Claim:
A method comprising: performing an authentication of a computing device and equipment of an operator of services for the computing device for a session of communication between the computing device and the equipment, the performing comprising: generating, in the computing device, a random number; generating a one-time-pad key based on a hash operation of a value selected from the group consisting of an identification of the computing device, an identification of the equipment, a platform configuration measurement of the computing device stored in a protected storage within the computing device and an identification of the session of communication stored in the protected storage within the computing device; encrypting the random number based on the one-time-pad key; transmitting the encrypted random number to the equipment; receiving, from the equipment, an encrypted value in response to the encrypted random number, wherein the encrypted value includes a challenge of a challenge-response; verifying the encrypted value; encrypting a response to the challenge of the challenge-response; transmitting the response to the equipment; and receiving, from the equipment, an authentication verification; and auditing the authentication, wherein auditing comprises: storing at least one attribute of the authentication into an audit log within a memory of the computing device; encrypting the audit log based on an encryption key that is generated and stored within the computing device; generating an integrity metric of the audit log; and generating a signature of the integrity metric with a signature key that is generated and stored within the computing device.