ENCRYPTION KEY RETRIEVAL

• US 20160191481A1
• Filed: 12/26/2014
• Published: 06/30/2016
• Est. Priority Date: 12/26/2014
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Atreya, Mohan, Zimmer, Vincent J., Muttik, Igor, Poornachandran, Rajesh, Yao, Jiewen Jacques, Selvaraje, Gopinatth
• Granted Patent: US 9,525,675 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

Particular embodiments described herein provide for an electronic device that can be configured to include an authentication module. The authentication module can be configured to receiving a request to access an electronic device, where the electronic device is separate from the authentication module, collect authentication data, communicate the authentication data to a network element, receive an authentication key, and communicate the authentication key to the electronic device.

Claims

1. At least one computer-readable medium comprising one or more instructions that when executed by at least one processor, cause the processor to:

receive a request to access an electronic device;

collect authentication data at a secondary electronic device, wherein the secondary electronic device is separate from the electronic device;

verify the authentication data;

receive an authentication key from a network element; and

communicate the authentication key to the electronic device.

2. The at least one computer-readable medium of claim 1, wherein the authentication data is verified by the secondary electronic device.

3. The at least one computer-readable medium of claim 1, wherein the authentication data includes authentication information about a user of the electronic device and about the secondary electronic device.

4. The at least one computer-readable medium of claim 3, wherein the authentication data is verified by the network element.

5. The at least one computer-readable medium of claim 1, wherein a primary function of the secondary electronic devices does not include receiving the authentication key.

6. The at least one computer-readable medium of claim 1, wherein the authentication key expires after a predetermined amount of time or a predetermined number of uses.

7. The at least one computer-readable medium of claim 1, wherein the authentication key is used to access protected data on the electronic device.

8. The at least one computer-readable medium of claim 1, wherein the authentication key is used to access pre-operating system protected data on the electronic device.

9. An electronic device comprising:

a verification module configured to;

request an authentication key from a secondary electronic device;

receive the authentication key from the secondary electronic device; and

verify the authentication key and the secondary electronic device.

10. The apparatus of claim 9, wherein the verification module accesses a whitelist and a blacklist to verify the secondary electronic device.

11. The apparatus of claim 9, wherein the secondary electronic device is physically separate from the electronic device.

12. The apparatus of claim 9, wherein the authentication key is used to access protected data on the electronic device.

13. The apparatus of claim 9, wherein the authentication key is used to access pre-operating system protected data on the electronic device.

14. The apparatus of claim 9, wherein the authentication key expires after a predetermined amount of time.

15. The apparatus of claim 9, wherein the secondary electronic device receives the authentication key from a network element.

16. The apparatus of claim 9, wherein the authentication key is required for pre-boot authorization.

17. A method comprising:

receiving a request to access an electronic device that is separate from a secondary electronic device;

collecting authentication data at the secondary electronic device;

verifying the authentication data;

receiving an authentication key from a network element; and

communicating the authentication key to the electronic device.

18. The method of claim 17, wherein the authentication data includes authentication information about a user of the electronic device and about the secondary electronic device.

19. The method of claim 17, wherein the authentication data is verified by the network element.

20. The method of claim 17, wherein verifying the authentication data includes comparing the authentication data to a whitelist and a black list.

21. The method of claim 17, wherein the authentication key is used to access protected data on the electronic device.

22. The method of claim 17, wherein the authentication key is used to access pre-operating system protected data on the electronic device.

23. The method of claim 17, wherein the authentication key is required for pre-boot authorization.

24. A system for receiving an authentication key, the system comprising:

an authentication module configured for;

receiving a request to access an electronic device, wherein the electronic device is separate from the authentication module;

collecting authentication data;

communicating the authentication data to a network element;

receiving an authentication key; and

communicating the authentication key to the electronic device.

25. The system of claim 24, wherein the authentication data includes authentication information about a user of the electronic device and about a secondary electronic device that includes the authentication module.