Electronic access control multi-factor authentication using centralized hardware secured credential system and methods of use thereof

Abstract

Aspects of the present disclosure include a tokenless, network-attached, multi-factor authentication software based electronic access control logon system and methods of use thereof, and may provide equivalent in security to a Public Key Infrastructure smart card system. The logon system may allow tokenless, but authorized, entities to access secure systems, with the secure logon system not requiring placement of individual or organization identifying information on a physical object that may be removed from a restricted location. Aspects of the present disclosure may include maintaining user credentials within individually encrypted credential bins within a Credential Hardware Security Module (HSM) that is securely accessible by authorized endpoints in a distributed network. A successful logon may occur when an authorized user accesses the user's corresponding credential bin within the Credential HSM via an additionally authorized corresponding device, such that the device and user authentication may combine to provide multi-factor authentication.