# US 10,374,799 B2 · Method and apparatus for identity based ticketing > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,374,799 B2 - Document ID: US10374799B2 - Status: Granted - Kind: B2 - Application number: 14/111,007 - Filed: 2011-04-13 - Published: 2014-10-02 - Granted: 2019-08-06 - Earliest claimed: 2011-04-13 - Assignees: Nokia Technologies Oy - Applicants: Sandeep Tamrakar; Jan-Erik Ekberg; Jukka Virtanen; Nadarajah Asokan - Inventors: Sandeep Tamrakar; Jan-Erik Ekberg; Jukka Virtanen; Nadarajah Asokan - Web page: https://patentgrep.com/patent/US10374799B2 ## CPC - H04L 9/14: using a plurality of keys or algorithms - G06F 21/335: {for accessing specific resources, e.g. using Kerberos tickets} - G06Q 20/0457: {the tickets being sent electronically} - G06Q 20/3278: {RFID or NFC payments by means of M-devices} - G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights} - G06Q 20/40975: {using encryption therefor} - G07B 15/02: taking into account a variable factor such as distance or time, e.g. for passenger transport, parking systems or car rental systems (G07B15/06 takes precedence; taximeters G07B13/00; parking meters per se G07F17/24) - H04L 9/30: Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy - H04L 2209/24: Key scheduling, i.e. generating round keys or sub-keys for block encryption - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G07B: TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS ## Abstract A method, apparatus, system and computer program where an apparatus stores user specific credentials, receives a certificate via the communication interface from a certificate authority and stores the certificate in the memory. The apparatus further stores a private key and a public key in the memory and attempts authenticating of the apparatus to a ticket reader for accessing a service, by transmission of one or more messages, wherein the messages contain an authenticator that has at least one of the following: the certificate or its cryptographic derivative; one or more data items contained by the certificate or a cryptographic derivative thereof. The messages are prepared such that the public key is not recoverable from outside of the authenticator. ## Claims ### Claim 1 An apparatus, comprising: a communication interface; memory configured to store user specific credentials; and a cryptographic processing circuitry; wherein the cryptographic processing circuitry is configured to: receive a certificate via the communication interface from a certificate authority; cause storing of the certificate in the memory; cause storing of a private key and a public key in the memory; and cause attempting of authenticating of the apparatus to a ticket reader for accessing a service, by transmission of one or more messages, wherein each of the one or more messages contains a transaction record signature, an authenticator that comprises an i times hashed seed number in which i represents a number of times that a hash function was applied to a random secret seed having a predetermined validity duration, and a distance in a hash chain of the i times hashed seed number, the distance indicative of the number of times the certificate has been used to attempt authenticating of the apparatus, the hash chain constructed by choosing the random secret seed and repeatedly applying the cryptographic hash function i times, in order to limit a number of times the certificate can be used for the authenticating of the apparatus. ### Claim 2 (depends on 1) The apparatus of claim 1, further comprising a general processor configured to control basic operations of the apparatus and wherein the cryptographic processing circuitry is further configured to function as a trusted execution environment that is operationally separated from the general processor. ### Claim 3 (depends on 2) The apparatus of claim 2, wherein the apparatus further comprises a user interface that is controlled by the general processor. ### Claim 4 (depends on 1) The apparatus of claim 1, wherein the cryptographic processing circuitry is further configured to receive a challenge from the ticket reader and to responsively compute a signed response. ### Claim 5 (depends on 4) The apparatus of claim 4, wherein the cryptographic processing circuitry is further configured to cause, responsive to receiving of the challenge, sending a previously computed signed response that was computed based on a previously received challenge. ### Claim 6 (depends on 1) The apparatus of claim 1, wherein the certificate has been generated in a process comprising computing a cryptographic hash from source data comprising at least: an indication of the identity of the user; an expiry field; and the public key. ### Claim 7 (depends on 6) The apparatus of claim 6, the process further comprising shrinking of the cryptographic hash. ### Claim 8 (depends on 1) The apparatus of claim 1, wherein: the cryptographic processing circuitry is further configured to generate the authenticator using: a public key of the certificate authority and the private key of the apparatus. ### Claim 9 (depends on 8) The apparatus of claim 8, wherein: the cryptographic processing circuitry is further configured to use, for generation of the authenticator, at least one of the following: the identity of the apparatus; the time when the certificate authority has generated the certificate for the apparatus; and a challenge that has been previously received from a ticket reader. ### Claim 10 (depends on 1) The apparatus of claim 1, wherein the authenticator is a message authentication code generated by the cryptographic processing circuitry. ### Claim 11 An apparatus, comprising: memory configured to store a public key of a certificate authority; a communication interface configured to exchange messages with a user device; and a processor configured to: cause an authenticating session with the user device for authenticating using of a service by the user device; and receive from the user device one or more messages using the communication interface, wherein each of the one or more messages contains a transaction record signature, an authenticator that comprises an i times hashed seed number in which i represents a number of times that a hash function was applied to a random secret seed having a predetermined validity duration, and a distance in a hash chain of the i times hashed seed number, the distance indicative of the number of times the certificate has been used to attempt authenticating of the apparatus, the hash chain constructed by choosing the random secret seed and repeatedly applying the cryptographic hash function i times, in order to limit a number of times the certificate can be used for the authenticating of the apparatus. ### Claim 12 (depends on 11) The apparatus of claim 11, wherein the processor is further configured to: maintain in the memory a blacklist of user identities; compare a user identity with the blacklist; and reject access of the user device to the service if the user identity belongs to the blacklist. ### Claim 13 A method in an apparatus, comprising: storing user specific credentials; receiving a certificate from a certificate authority; storing the certificate; storing a private key and a public key in the memory; and attempting authenticating of the apparatus to a ticket reader for accessing a service, by transmission of one or more messages, wherein each of the one or more messages contain a transaction record signature, an authenticator that comprises an i times hashed seed number in which i represents a number of times that a hash function was applied to a random secret seed having a predetermined validity duration, and a distance in a hash chain of the i times hashed seed number, the distance indicative of the number of times the certificate has been used to attempt authenticating of the apparatus, the hash chain constructed by choosing the random secret seed and repeatedly applying the cryptographic hash function i times, in order to limit a number of times the certificate can be used for the authenticating of the apparatus.