Platform and method for securely transmitting an authorization secret

1. A method comprising

receiving an ephemeral asymmetric public key and an ephemeral credential, the ephemeral credential includes at least a duplicate copy of the ephemeral asymmetric public key digitally signed with an identity private key;

verifying that the ephemeral asymmetric public key is valid using data recovered from the ephemeral credential, includes

recovering the duplicate copy of the ephemeral asymmetric public key from the ephemeral credential, and

comparing the duplicate copy of the ephemeral asymmetric public key with the ephemeral asymmetric public key;

encrypting authorization secret using the ephemeral asymmetric public key if the ephemeral asymmetric public key is determined to be valid; and

transmitting the encrypted authorization secret over a link.

2. The method of claim 1 , wherein prior to verifying that the ephemeral asymmetric public key is valid, the method further comprises receiving of an identity public key and an identity credential.

3. The method of claim 2 , wherein the ephemeral credential further includes a predetermined sequence of alphanumeric characters.

4. The method of claim 2 , wherein the link routes the encrypted authorization secret to a trusted platform module including an input/output interface, a processor, an internal memory and an asymmetric key generation unit.

5. The method of claim 4 , further comprising:

recovering the authorization secret by decrypting the encrypted authorization secret using an ephemeral asymmetric private key corresponding to the ephemeral asymmetric public key, both the ephemeral asymmetric private key and the ephemeral asymmetric public key are temporarily used for a single communication session.

6. A method of claim 5 , wherein prior to receiving the ephemeral asymmetric public key and the ephemeral credential, both the ephemeral asymmetric public key and the ephemeral asymmetric private key are created by the asymmetric key generation unit within the trusted platform module.

7. The method of claim 1 , wherein the recovering of the duplicate copy of the ephemeral asymmetric public key includes decrypting the ephemeral credential with an identity public key.

8. A method comprising:

creating an ephemeral asymmetric public key and a corresponding ephemeral asymmetric private key internally within an integrated circuit device;

certifying the ephemeral asymmetric public key;

transmitting the ephemeral asymmetric public key and an ephemeral credential to an requester in order to determine whether the ephemeral asymmetric public key is valid; and

using the ephemeral asymmetric public key for protecting confidentiality of an authorization secret provided by the requester during a communication session, the authorization secret is any type of information that enables access to stored content within the integrated circuit device.

9. A method

creating an ephemeral asymmetric public key and a corresponding ephemeral asymmetric private key internally within an integrated circuit device;

certifying the ephemeral asymmetric public key;

transmitting the ephemeral asymmetric public key and anephemeral credential to an requester in order to determine whether the ephemeral asymmetric public key is valid; and

using the ephemeral asymmetric public key for protecting confidentiality of an authorization secret provided by the requester during a communication session, the authorization secret is any type of information that enables selected functionality for a platform including the integrated circuit device.

10. The method of claim 9 , wherein protecting of the confidentiality of the authorization data includes encrypting the authorization secret using the ephemeral asymmetric public key.