Authentication Translation
Authentication translation is disclosed. A request to access a resource is received at an authentication translator, as is an authentication input. The authentication input corresponds to at least one stored record. The stored record is associated at least with the resource. In response to the receiving, a previously stored credential associated with the resource is accessed. The credential is provided to the resource.
1 . A device, comprising:
a sensor;
an interface;
at least one memory comprising:
a storage vault; and
a set of processor instructions; and
a plurality of processors, wherein:
a first processor of the plurality of processors is an application processor;
a second processor of the plurality of processors is a secure processor;
the first processor and the second processor are configured to communicate with each other via the interface;
the plurality of processors is configured execute the set of processor instructions to:
receive input information provided by a user, wherein the input information is associated with at least one of:
a biometric input from the user; or
a credential input from the user;
derive a decryption key from a protected key based on the input information;
perform a cryptographic operation comprising decrypting, using the decryption key, at least a portion of the storage vault;
receive biometric data from the sensor; and
when the biometric data matches a template associated with the storage vault:
establish a connection to a service provider external to the device; and
facilitate transmission to the service provider, via the connection, of a message based on a result of the cryptographic operation.
2 . The device of claim 1 , wherein the plurality of processors is further configured to:
convey the at least a portion of the storage vault to an external storage that is separate from the device; and
wipe the at least a portion of the storage vault from the device.
3 . The device of claim 2 , wherein:
conveyance to the external storage is based at least in part on providing of an additional credential input; and
the additional credential input comprises at least one of a password or an account number.
4 . The device of claim 1 , wherein:
the connection comprises a secure connection; and
the interface is a restricted interface.
5 . The device of claim 1 , wherein the storage vault comprises at least one of:
authenticated and encrypted data; or
information associated with at least one selected from a domain, a user identifier, an additional credential input, or a set of health care data.
6 . The device of claim 1 , wherein the device is associated with a plurality of users.
7 . The device of claim 1 , wherein facilitating the transmission of the message is based, at least in part, on a liveness determination associated with the biometric data.
8 . The device of claim 1 , wherein:
the plurality of processors is configured to provide a prompt prior to receiving the biometric data from the sensor; and
the biometric input is received at a distinct time from the biometric data.
9 . The device of claim 1 , wherein the user is permitted access to a resource associated with the service provider via backup authentication of the user.
10 . The device of claim 1 , wherein:
the biometric data is associated with the user; and
the template is included in a plurality of templates associated with the user associated with the biometric data.
11 . A method, the method comprising:
receiving input information provided by a user, using a plurality of processors of a device, wherein:
the input information is associated with at least one of:
a biometric input from the user; or
a credential input from the user;
a first processor of the plurality of processors is an application processor;
a second processor of the plurality of processors is a secure processor; and
the first processor and the second processor are configured to communicate with each other via an interface;
deriving, using the plurality of processors, a decryption key from a protected key based on the input information;
performing a cryptographic operation comprising decrypting, using the decryption key, at least a portion of a storage vault;
receiving biometric data from a sensor; and
when the biometric data matches a template associated with the storage vault:
establishing a connection to a service provider external to the device; and
facilitating transmission to the service provider, via the connection, of a message based on a result of the cryptographic operation.
12 . The method of claim 11 , further comprising:
conveying the at least a portion of the storage vault to an external storage that is separate from the device; and
wiping the at least a portion of the storage vault from the device.
13 . The method of claim 12 , wherein:
conveyance to the external storage is based at least in part on providing of an additional credential input; and
the additional credential input comprises at least one of a password or an account number.
14 . The method of claim 11 , wherein:
the connection comprises a secure connection; and
the interface is a restricted interface.
15 . The method of claim 11 , wherein the storage vault comprises at least one of:
authenticated and encrypted data; or
information associated with at least one selected from a domain, a user identifier, an additional credential input, or a set of health care data.
16 . The method of claim 11 , wherein the device is associated with a plurality of users.
17 . The method of claim 11 , wherein facilitating the transmission of the message is based, at least in part, on a liveness determination associated with the biometric data.
18 . The method of claim 11 , wherein:
the biometric data from the sensor is received in response to a prompt; and
the biometric input is received at a distinct time from the biometric data.
19 . The method of claim 11 , wherein the user is permitted access to a resource associated with the service provider via backup authentication of the user.
20 . The method of claim 11 , wherein:
the biometric data is associated with the user; and
the template is included in a plurality of templates associated with the user associated with the biometric data.