topic Re: Identity Protection Technology - technical specification? in Intel vPro® Platform

Identity Protection Technology - technical specification?

idata — Mon, 14 Mar 2011 14:41:12 GMT

Hi,

I have read this interesting blog post by Bruno

/community/openportit/vproexpert/blog/2011/03/08/identity-protection-built-into-the-chip http://communities.intel.com/community/openportit/vproexpert/blog/2011/03/08/identity-protection-built-into-the-chip and several announcements from the INTEL newsroom about the Identity Protection Technology coming out now with the second generation of core i3/5/7 chips.

Until now I haven't found any exact technical specifications. It is said that IPT uses the same algorithms as for hardware tokens and also supports challenge response protocols.

My major question is however how does a website like ebay or paypal knows the secret with which this "hardware-token-on-a-chip" is initialized with. Is there some kind of central service providing this information for website owners?

Could someone please give a little more insight about that topic?

I appreciate any comments and information related to that topic.

Thanks for your help.

Regards,

Simon

Re: Identity Protection Technology - technical specification?

idata — Mon, 21 Mar 2011 09:00:39 GMT

What happens if users share a PC? Is this possible or would they authenticate based on the same token seed?

Re: Identity Protection Technology - technical specification?

Bruno_Domignues — Fri, 15 Apr 2011 16:04:52 GMT

Hi,

Basically, the provisioning process is composed of 4 steps;

1. Client initialize the provisioning process using the selected ISV (i.e. actually, Symantec or VASCO);

2. Server receive the request and randomly generate OTP seed, encrypted with a pre-shared key (ISV server must contact an Intel Server to do it);

3. Client receive and ACK the OTP seed;

4. Server confirm the provisioning;

We can have variations of this model, but basically is the overall process of provisioning.

Best Regards!

-- Bruno

Re: Identity Protection Technology - technical specification?

Bruno_Domignues — Fri, 15 Apr 2011 16:24:01 GMT

Hi,

Yes, you can share the PC, IPT was design to support multiples seeds, thus you use it with different provides and also with different users.

Best Regards!

--Bruno Domingues

Re: Identity Protection Technology - technical specification?

idata — Mon, 25 Apr 2011 08:51:30 GMT

what kind of hardware, motherboard, cpu and setting needed in order Intel IPT to be function?

thanks,.

Re: Identity Protection Technology - technical specification?

Bruno_Domignues — Mon, 25 Apr 2011 14:29:11 GMT

I would recommend you read my blog post about this subject "/community/openportit/vproexpert/blog/2011/04/21/build-your-own-pc-with-identity-protection-technology-ipt-capable Build your own PC with Identity Protection Technology (IPT) capable"

Best Regards!

-- Bruno Domingues

Re: Identity Protection Technology - technical specification?

idata — Tue, 26 Apr 2011 03:37:48 GMT

hardware..dq67ep and intel core i5 2400..

can successfully log into paypal account, after that click on VIP Access's 'I've Signed In"..error message showed that 'the security key is not available'

Re: Identity Protection Technology - technical specification?

idata — Tue, 26 Apr 2011 08:49:49 GMT

i've DQ67EP and i5 2400 3.1Ghz

installed VIP Access and Intel IPT.

login into paypal account and after clicked on VIP Access's "I've Signed In" , showed "the security key currently not available".

any thing i did wrong?