Patent ID: 7747024

Claim:
A computer-implemented method comprising: configuring at least one processor device to perform the functions of: receiving an encryption key request for an encryption key; receiving an environment identifier; determining whether the received environment identifier is associated with the requested encryption key, the determining resulting in an association determination, wherein prior to the associating, generating an unique environment number using a random number generator of a hardware-based trusted Platform Module (TPM), wherein the associating results in an association result; using the TPM to create a keyed-hash message authentication code; and encrypting the association result using a non-migratable key that is unique to the hardware-based Trusted Platform Module (TPM) along with the keyed-hash message authentication code, the encrypting resulting in a certifiably unique identifier that is used as the unique environment identifier; in response to the association determination being that the received environment identifier is associated with the requested encryption key: receiving one or more user-supplied environment authentication data items from a user; retrieving one or more stored environment authentication data items from a secure storage location, wherein the retrieved stored environment authentication data items correspond to the received environment identifier; authenticating the received environment authentication data items using the retrieved stored environment authentication data items; allowing use of the requested encryption key in response to the authenticating resulting in a successful authentication.