Device authentication, common method

Question

What are some standard device authentication methods, in a scenario when:

The desktop computer is being authenticated on web service
I provide the .exe on the desktop
I control the web service
The desktop has a TPM chip installed

Should I get the device ID from the desktop, then somehow sign it with TPM and send it to web service? What is the standard method?

guest · Answer

Trying to answer my question, reviews are welcome.

On https connection :

Alice requests random number from Bob in publicly accessible web service
Alice signs random number with her private key within TPM 2.0
Alice sends signed random number to Bob
Bob verifies that Alice signed random number

Device authentication, common method

One Answer

Add your own answers!

Ask a Question