Facilitating provisioning of an out-of-band pseudonym over a secure communication channel
AssigneeAT&T Intellectual Property I, L.P.
InventorsPaul Hancock, Stuart Steele
Life of this patent
Estimating the term…
Abstract
Facilitation of out-of-band pseudonym provisioning for a subscriber of a device is provided herein. In one embodiment, a method comprises: receiving, by a device comprising a processor, one way authentication data from a secure server; transmitting, by the device, to the secure server, via a secure communication channel, an identifier for a subscriber of the device, wherein the transmitting is performed based on the receiving the one way authentication data from the secure server; and receiving, by the device from the secure server, a pseudonym, wherein the pseudonym enables access by the device to an authentication device at a first time.
Claims20
A server, comprising:
- a processor;
- and
- a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
- transmitting one-way authentication data to a user equipment, wherein the one-way authentication data comprises a certificate authenticating the server and a webpage;
- receiving, from the user equipment via a secure out-of-band communication channel that has been established with the user equipment, an identifier associated with the user equipment;
- based on the identifier, obtaining a pseudonym associated with the identifier, wherein obtaining the pseudonym comprises receiving the pseudonym from an authentication server via a secure communication channel that is different from the secure out-of-band communication channel;
- and
- transmitting the pseudonym to the user equipment via the secure out-of-band communication channel, wherein transmitting the pseudonym enables the user equipment to authenticate to use a service of network equipment via an in-band communication channel.
A non-transitory machine-readable medium, comprising executable instructions that, when executed by a processor of a server, facilitate performance of operations, comprising:
- transmitting one-way authentication data to a user equipment, wherein the one-way authentication data comprises a certificate authenticating the server and a webpage;
- receiving, from the user equipment via a secure out-of-band communication channel that has been established with the user equipment based on the one-way authentication data, an identifier associated with the user equipment;
- based on the identifier, obtaining a pseudonym from an authentication server, wherein the pseudonym is associated with the identifier, and wherein obtaining the pseudonym is via a secure communication channel established with the authentication server, wherein the secure communication channel and the secure out-of-band communication channel are different channels;
- and
- transmitting the pseudonym to the user equipment via the secure out-of-band communication channel, wherein transmitting the pseudonym enables the user equipment to authenticate, via an in-band-communication channel, to use a service of network equipment via a network.
A method, comprising:
- transmitting, by an authentication server comprising a processor, one-way authentication data to a user equipment, wherein the one-way authentication data comprises a certificate authenticating the authentication server and a webpage;
- receiving, from the authentication server, an identifier associated with the user equipment received via a server that has established a secure out-of-band communication channel with the user equipment;
- matching, by the authentication server, the identifier to a subscriber identity in a subscriber database;
- determining, by the authentication server, a pseudonym for the user equipment based on an authentication device communicably coupled to the user equipment;
- and
- facilitating, by the authentication server, transmitting the pseudonym to the server that has established the secure out-of-band communication channel with the user equipment, wherein facilitating the transmitting the pseudonym to the server is via a secure communication channel, and wherein the server provides the pseudonym to the user equipment via the secure out-of-band communication channel different from the secure communication channel.
Dependencies are inferred from the claim text.