US 10,122,534 B2Granted

Apparatus and method for managing use of secure tokens

AssigneesAT&T Intellectual Property I, L.P., AT&T Mobility II LLC

InventorsWalter Cooper Chastain, Stephen Emille Chin, Samuel King, Michael Suozzo, Nicholas Vondrak, Ismaila Wane

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system that incorporates the subject disclosure may perform, for example, operations including receiving an encrypted secure token from a secure token application function that is remote from the communication device, storing the encrypted secure token in a secure element memory of the secure element, accessing user input requesting the encrypted secure token where the secure device processor is separate from the secure element and is in communication with the secure element, generating a modified secure token by adding identification information to the encrypted secure token and by performing a second encryption of the encrypted secure token with the identification information, receiving the modified secure token from the secure element, and providing the modified secure token to a receiving device. Other embodiments are disclosed.

Claims20

Dependent claims

A communication device comprising:

a secure element having a secure element memory with first executable instructions, wherein the secure element, responsive to executing the first executable instructions, facilitates performance of first operations, the first operations comprising:
storing a secure token in the secure element memory;
modifying the secure token utilizing identification information resulting in a modified secure token;
and
receiving token adjustment instructions over a network from a secure token application function of a server, wherein the token adjustment instructions are received via a remote management server;
a secure device processing system including a processor and having a secure device processing system memory with second executable instructions, wherein the secure device processing system is in communication with the secure element, wherein the secure device processing system, responsive to executing the second executable instructions, facilitates performance of second operations, the second operations comprising:
receiving the modified secure token from the secure element, wherein the secure device processing system does not have access to the secure token stored in the secure element memory;
and
providing the modified secure token over the network to a receiving device to enable the receiving device to provide the modified secure token to the secure token application function of the server for decrypting the modified secure token to analyze the identification information and to obtain token information for use by the receiving device, wherein the server, the communication device and the receiving device are remote from each other;
and
a device processing system including processor that is separate from the secure device processing system and in communication with the secure device processing system, wherein the device processing system facilitates wireless communications between the communication device and the receiving device, and wherein the secure device processing system is separate from the secure element.

8 more elements

A non-transitory, machine-readable storage medium, comprising executable instructions that, when executed by a processing system including a processor executing a secure token application function, facilitate performance of operations, comprising:

receiving over a network a modified secure token from a receiving device that obtained the modified secure token over the network from a communication device according to user input associated with a token descriptor, wherein the processing system, the receiving device and the communication device are remote from each other;
decrypting the modified secure token to obtain an encrypted secure token and to obtain identification information;
verifying the identification information;
decrypting the encrypted secure token to obtain a secure token;
analyzing the secure token to obtain token information;
providing a notification over the network to the receiving device indicating a result of the analyzing of the token information;
and
providing token adjustment instructions over the network to the communication device, wherein the token adjustment instructions are provided via a remote management server,
wherein the encrypted secure token is provided over the network to the communication device via the remote management server.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/206,975Filed 11 Jul 2016 · continuation
Priority: 4 Oct 2013
Published: US 2016/0323111 A13 Nov 2016
Granted: 6 Nov 2018
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

H04L 63/062
For supporting key management in a packet data network: for key distribution, e.g. centrally by trusted party
H04L 9/3236
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…: using…
H04L 9/3247
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…
H04L 63/0428
For providing a confidential data exchange among entities communicating through data packet networks: wherein the data content is protected, e.g.…

Family

Application14/046,138Parent of this continuation · filed 4 Oct 2013
Application14/807,384Parent of this continuation · filed 23 Jul 2015
US 2016/0323111 A1Pre-grant publication · published 3 Nov 2016
US 9,419,961 B2Parent of this continuation
US 9,124,573 B2Parent of this continuation
US 2015/0100788 A1Published application
US 2015/0334107 A1Published application
US 10,122,534 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key