Secure software authenticator data transfer between processing devices

摘要

A method comprises establishing a network connection between the first processing device and the second processing device for transfer of data associated with a software authenticator from the first processing device to the second processing device, encrypting the software authenticator data with encryption that is separate from encryption used for the network connection, and transferring the encrypted software authenticator data from the first processing device to the second processing device. Another method comprises establishing the network connection between the first processing device and the second processing device for transfer of the software authenticator data, receiving encrypted data from the first processing device, wherein the encrypted data has encryption that is separate from encryption used for the network connection, decrypting the encrypted data to obtain data associated with a software authenticator and importing the software authenticator data into a software authenticator stored in a memory of the second processing device.

主权项

1. A method comprising:
establishing a network connection between a first processing device and a second processing device for transfer of software authenticator data from the first processing device to the second processing device, the software authenticator data comprising a seed value utilized by a first software authenticator provisioned on the first processing device to generate one or more passcodes; encrypting the software authenticator data; transferring the encrypted software authenticator data from the first processing device to the second processing device, the software authenticator data being configured to provision a second software authenticator on the second processing device; initiating re-seeding of the second software authenticator responsive to a successful provisioning of the second software authenticator on the second processing device; receiving, at the first processing device from the second processing device, a confirmation indicating a successful transfer of the software authenticator data; and removing the first software authenticator from the first processing device responsive to receipt of the confirmation; wherein initiating re-seeding of the second software authenticator comprises registering the second processing device with a software authenticator management server; wherein registering the second processing device causes the software authenticator management server to generate a code which is sent to the second processing device; and wherein the code is configured to enable re-seeding of the second software authenticator.