| CPC H04L 63/166 (2013.01) [H04L 9/083 (2013.01); H04L 9/085 (2013.01); H04L 9/0861 (2013.01); H04L 9/0894 (2013.01); H04L 9/3236 (2013.01); H04L 63/0823 (2013.01)] | 18 Claims |

|
1. A computer-implemented method when executed by data processing hardware of a first computing device causes the data processing hardware to perform operations comprising:
establishing, using a cryptographic protocol, a communication session between the first computing device and a second computing device, the communication session comprising communications encrypted by an ephemeral session key;
receiving, via the communication session, from the second computing device, an attestation request requesting the first computing device provide an attestation report;
generating the attestation report based on the ephemeral session key;
sending, using the communication session, the attestation report to the second computing device;
sending, via the communication session, to the second computing device, a second attestation request requesting the second computing device to provide a second attestation report;
receiving, via the communication session, the second attestation report from the second computing device; and
authenticating the second attestation report using the ephemeral session key.
|