Automating verification using secure encrypted phone verification

1. A method for automatic and secure verification of a user using encrypted phone verification, the method comprising:

detecting, by a processor of a computing system, an attempt to access a service requiring multi-factor authentication from a first user computing device;

requesting, by the processor, a trusted platform module (TPM) public key from a second user computing device by sending a request to the first user computing device over a first network, wherein, as a function of sending the request:

the first user computing device requests the TPM public key from the second user computing device over a second network;

the second user computing device sends the TPM public key to the first user computing device over the second network; and

the first user computer device sends the TPM public key to the computing system over the first network;

generating, by the processor, a nonce in response to receiving the TPM public key of the second user computing device;

sending, by the processor, the nonce for signature by a TPM private key of the second user computing device;

receiving, by the processor, a signed nonce, wherein the signed nonce is signed by the TPM private key of the second computing device and automatically sent back to the computing system as a function of a signing of the signed nonce;

decrypting, by the processor, the signed nonce using the TPM public key of the second user computing device; and

determining, by the processor, that a value of the signed nonce matches a value of the nonce to authenticate the first user computing device and allowing access to the service.

2. The method of claim 1 , wherein the second user computing device is a mobile phone having a trusted platform module (TPM) in a hardware abstract layer (HAL), and the nonce is signed by the TPM private key of the TPM in the HAL of the mobile phone.

3. The method of claim 2 , wherein the nonce is signed by the TPM private key in the HAL, such that the TPM private key is never exposed.

4. The method of claim 1 , wherein sending the nonce for signature includes sending the nonce to the first user computing device over the first network, wherein, as a function sending the nonce to the first user computer device:

the first user computing device sends the nonce to the second user computing device over the second network;

the second user computing device returns the signed nonce to the first user computing device over the second network; and

the first user computing device sends the signed nonce to the computing system over the first network.

5. The method of claim 1 , further comprising: registering, by the processor, the TPM public key of the second user computing device with the service for binding the TPM public key to a user account associated with the service.

6. The method of claim 1 , wherein the first user computing device and the second user computing device are coupled over the second network, the second network being a short range wireless network.

7. A computer system, comprising:

a processor;

a memory device coupled to the processor; and

a computer readable storage device coupled to the processor, wherein the storage device contains program code executable by the processor via the memory device to implement a method for automatic and secure verification of a user using encrypted phone verification, the method comprising:

detecting, by a processor of a computing system, an attempt to access a service requiring multi-factor authentication from a first user computing device;

requesting, by the processor, a trusted platform module (TPM) public key from a second user computing device by sending a request to the first user computing device over a first network, wherein, as a function of sending the request:

the first user computing device requests the TPM public key from the second user computing device over a second network;

the second user computing device sends the TPM public key to the first user computing device over the second network; and

the first user computer device sends the TPM public key to the computing system over the first network;

generating, by the processor, a nonce in response to receiving the TPM public key of the second user computing device;

sending, by the processor, the nonce for signature by a TPM private key of the second user computing device;

receiving, by the processor, a signed nonce, wherein the signed nonce is signed by the TPM private key of the second computing device and automatically sent back to the computing system as a function of a signing of the signed nonce;

decrypting, by the processor, the signed nonce using the TPM public key of the second user computing device; and

determining, by the processor, that a value of the signed nonce matches a value of the nonce to authenticate the first user computing device and allowing access to the service.

8. The computer system of claim 7 , wherein the second user computing device is a mobile phone having a trusted platform module (TPM) in a hardware abstract layer (HAL), and the nonce is signed by the TPM private key of the TPM in the HAL of the mobile phone.

9. The computer system of claim 8 , wherein the nonce is signed by the TPM private key in the HAL, such that the TPM private key is never exposed.

10. The computer system of claim 7 , wherein sending the nonce for signature includes sending the nonce to the first user computing device over the first network, wherein, as a function sending the nonce to the first user computer device:

the first user computing device sends the nonce to the second user computing device over the second network;

the second user computing device returns the signed nonce to the first user computing device over the second network; and

the first user computing device sends the signed nonce to the computing system over the first network.

11. The computer system of claim 7 , further comprising: registering, by the processor, the TPM public key of the second user computing device with the service for binding the TPM public key to a user account associated with the service.

12. The computer system of claim 7 , wherein the first user computing device and the second user computing device are coupled over the second network, the second network being a short range wireless network.

13. A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, the computer readable program code comprising an algorithm that when executed by a computer processor of a computing system implements a method for automatic and secure verification of a user using encrypted phone verification, the method comprising:

detecting, by a processor of a computing system, an attempt to access a service requiring multi-factor authentication from a first user computing device;

requesting, by the processor, a trusted platform module (TPM) public key from a second user computing device by sending a request to the first user computing device over a first network, wherein, as a function of sending the request:

the first user computing device requests the TPM public key from the second user computing device over a second network;

the second user computing device sends the TPM public key to the first user computing device over the second network; and

the first user computer device sends the TPM public key to the computing system over the first network;

generating, by the processor, a nonce in response to receiving the TPM public key of the second user computing device;

sending, by the processor, the nonce for signature by a TPM private key of the second user computing device;

receiving, by the processor, a signed nonce, wherein the signed nonce is signed by the TPM private key of the second computing device and automatically sent back to the computing system as a function of a signing of the signed nonce;

decrypting, by the processor, the signed nonce using the TPM public key of the second user computing device; and

determining, by the processor, that a value of the signed nonce matches a value of the nonce to authenticate the first user computing device and allowing access to the service.

14. The computer program product of claim 13 , wherein the second user computing device is a mobile phone having a trusted platform module (TPM) in a hardware abstract layer (HAL), and the nonce is signed by the TPM private key of the TPM in the HAL of the mobile phone.

15. The computer program product of claim 1 , wherein the nonce is signed by the TPM private key in the HAL, such that the TPM private key is never exposed.

16. The computer program product of claim 13 , wherein sending the nonce for signature includes sending the nonce to the first user computing device over the first network, wherein, as a function sending the nonce to the first user computer device:

the first user computing device sends the nonce to the second user computing device over the second network;

the second user computing device returns the signed nonce to the first user computing device over the second network; and

the first user computing device sends the signed nonce to the computing system over the first network.

17. The computer program product of claim 13 , further comprising: registering, by the processor, the TPM public key of the second user computing device with the service for binding the TPM public key to a user account associated with the service.