System and method for authentication via a proximate device
Techniques are provided to authenticate components in a system. Users may enter credentials into an input device and the credentials may be authenticated and/or securely transmitted to the components. The components may then provide the credentials to a server in the system. Strong authentication may thus be provided to the effect that credentials associated with specific users have been received from specific components in the system. The server may then enable the components to access selected services.
1 . An authentication method comprising:
receiving authentication data at an input device;
cryptographically processing the authentication data at the input device;
transmitting the cryptographically processed authentication data to an access device;
processing the transmitted authentication data at the access device;
transmitting the processed authentication data to a service provider.
2 . The method of claim 1 wherein cryptographically processing includes at least one of authenticating and encrypting.
3 . The method of claim 1 wherein cryptographically processing comprises using a symmetric key provided by the access device.
4 . The method of claim 1 wherein cryptographically processing comprises using a symmetric key injected into the input device during manufacture of the input device.
5 . The method of claim 1 comprising establishing cryptographic link between the input device and the access device.
6 . The method of claim 1 comprising performing asymmetric key operations between the input device and the access device.
7 . The method of claim 1 comprising generating an asymmetric key pair within the input device.
8 . The method of claim 1 comprising generating an asymmetric key pair within a security boundary of the input device.
9 . The method of claim 1 wherein the authentication data is received within a security boundary of the input device.
10 . The method of claim 1 wherein the input device comprises a sensor.
11 . The method of claim 1 wherein the input device comprises a proximity authentication system.
12 . The method of claim 1 wherein processing the transmitted authentication data comprising authenticating the transmitted authentication data.
13 . The method of claim 1 wherein the service provider grants access to at least one service in response to the transmitted processed authentication data.
14 . The method of claim 1 wherein the service provider enables access to a network in response to the transmitted processed authentication data.
15 . A secure data processing system comprising:
an input device adapted to receive authentication data, cryptographically process the authentication data and transmit the cryptographically processed authentication data over a medium; and
an access device adapted to receive the transmitted authentication data, process the received authentication data and transmit the processed authentication data to a service provider.
16 . The system of claim 15 wherein cryptographically process includes at least one of authenticating and encrypting.
17 . The system of claim 15 wherein cryptographically process comprises using a symmetric key provided by the access device.
18 . The system of claim 15 wherein cryptographically process comprises using a symmetric key injected into the input device during manufacture of the input device.
19 . The system of claim 15 wherein the input device and the access device are adapted to establish a cryptographic link between the input device and the access device.
20 . The system of claim 15 wherein the input device and the access device are adapted to perform asymmetric key operations between the input device and the access device.
21 . The system of claim 15 wherein the input device is adapted to generate an asymmetric key pair.
22 . The system of claim 15 wherein the input device is adapted to generate an asymmetric key pair within a security boundary of the input device.
23 . The system of claim 15 wherein the authentication data is received within a security boundary of the input device.
24 . The system of claim 15 wherein the input device comprises a sensor.
25 . The system of claim 15 wherein the input device comprises a proximity authentication system.
26 . The system of claim 15 wherein processing the transmitted authentication data comprising authenticating the transmitted authentication data.
27 . The system of claim 15 wherein the service provider grants access to at least one service in response to the transmitted processed authentication data.
28 . The system of claim 15 wherein the service provider enables access to a network in response to the transmitted processed authentication data.