Patent ID: 7210169

Claim:
A method of establishing secure communication between a platform and a service, the method comprising: performing a registration process with the service, the registration process including: generating platform configuration register (PCR) values for the platform; obtaining a passphrase; transmitting a new user identifier, the passphrase, a unique platform identifier, and the PCR values to the service, wherein the PCR values have a 1:1 relationship with the platform; and storing the passphrase, the PCR values, the unique platform identifier and the new user identifier at the service; and performing a login process with the service, the login process including: requesting an authentication nonce from the service; generating the authentication nonce at the service; storing a copy of the authentication nonce at the service; returning the authentication nonce to the platform; generating an attestation at the platform, the attestation comprising a digital signature and the PCR values; acquiring a login passphrase from a user; combining the login passphrase with the attestation; verifying the login passphrase, the digital signature, and the PCR values; and providing a session token from the service to the platform.