System and method for authentication via a proximate device
View Patent ↗Techniques are provided to authenticate components in a system. Users may enter credentials into an input device and the credentials may be authenticated and/or securely transmitted to the components. The components may then provide the credentials to a server in the system. Strong authentication may thus be provided to the effect that credentials associated with specific users have been received from specific components in the system. The server may then enable the components to access selected services.
1. An access device comprising:
a memory;
an access module having a hardware security boundary, the access module including:
a first interface within the hardware security boundary configured to receive a credential from an input device over a secure communications channel, and
a security module coupled to the first interface and within the hardware security boundary, the security module configured to cryptographically process the received credential; and
a second interface configured to transmit the cryptographically processed credential to an access server,
wherein the cryptographically processed credential is used to authenticate the access device.
2. The access device of claim 1 , wherein the first interface is an RF interface.
3. The access device of claim 1 , wherein the first interface is physically connected to an input device.
4. The access device of claim 1 , wherein the second interface is configured to receive a set of keys from the access server.
5. The access device of claim 4 , wherein the security module is further configured to encrypt the set of keys.
6. The access device of claim 5 , wherein the memory stores, the encrypted set of keys.
7. The access device of claim 4 , wherein the second interface is further configured to connect to a network using a key in the set of keys.
8. The access device of claim 1 , wherein the first interface is a Bluetooth wireless interface.
9. The access device of claim 1 , wherein the second interface is further configured to transmit the cryptographically processed credential to an access server via a wireless medium.
10. The access device of claim 1 , wherein the second interface is further configured to transmit the cryptographically processed credential to an access server via an electromagnetic medium.
11. The access device of claim 1 , wherein the second interface is further configured to send proximity data to the access server and wherein the proximity data is used by the access server to authenticate that the input device is proximate to the access device.
12. The access device of claim 1 , wherein the second credential is the same as the first credential.
13. An input device comprising:
a data input module within a hardware security boundary of the input device, the data input module configured to receive a first credential;
a security module within the hardware security boundary configured to cryptographically process the received first credential; and
an interface configured to transmit a second credential to a secure module in an access device over a secure communications channel.
14. The input device of claim 13 , wherein the data input module comprises a keypad to enable input of the first credential.
15. The input device of claim 13 , wherein the data input module comprises a biometric sensor.