Patent ID: 8892904

Claim:
A device, comprising: a processor; a low privilege environment hosting a login agent module and an operating system login authentication module, the login agent module to cause a prompt to be presented by a user interface in the device, the prompt requesting login information to be entered into the device; a trusted execution environment hosting a secure user authentication module, the secure user authentication module to transmit an encrypted authorization message based on receipt of a signed login success message; a secure policy login module to at least determine a context for the device and to set a login policy for at least one of the login agent or the operating system login authentication module based on the context; and an authentication recovery module to reconfigure user-related security in the device by communicating with a remote resource; wherein the operating system login authentication module is to receive the login information from the login agent module and to transmit the signed login success message to the secure user authentication module based on the login information.