Generating an authentication result by using a secure base key
AssigneeCryptography Research, Inc.
InventorsPhilippe Alain Martineau, Helena Handschuh
Life of this patent
Estimating the term…
Abstract
An encrypted sequence that includes an authentication key may be received. A base key stored at a device may be identified and the encrypted sequence may be decrypted with the base key to obtain the authentication key. A challenge value may be received and the authentication key may be combined with the challenge value to generate a device ephemeral key. An authentication result may be generated for the device based on a combination of the device ephemeral key and the challenge value. Furthermore, the authentication result may be transmitted to a mobile network to authenticate the device.
Claims20
A method comprising:
- receiving an encrypted sequence comprising an authentication key, wherein the encrypted sequence further comprises one or more instructions, the one or more instructions to be performed by a secure hardware component in a secure area of a device;
- identifying a base key stored in the secure area of the device before the encrypted sequence is received;
- decrypting the encrypted sequence with the base key to obtain the authentication key;
- receiving a challenge value;
- combining the authentication key with the challenge value to generate a device ephemeral key;
- generating, by a processing device, an authentication result for the device based on a combination of the device ephemeral key and the challenge value;
- and
- transmitting the authentication result to a mobile network to authenticate the device.
A system comprising:
- a memory storing instructions;
- a secure hardware component in a secure area of a device;
- and
- a processing device, operatively coupled with the memory and configured to execute the instructions, to:
- receive an encrypted sequence comprising an authentication key, wherein the encrypted sequence further comprises one or more instructions, the one or more instructions to be performed by the secure hardware component;
- identify a base key stored in the secure area of the device before the encrypted sequence is received;
- decrypt the encrypted sequence with the base key to obtain the authentication key;
- receive a challenge value;
- combine the authentication key with the challenge value to generate a device ephemeral key;
- generate an authentication result for the device based on a combination of the device ephemeral key and the challenge value;
- and
- transmit the authentication result to a mobile network to authenticate the device.
A non-transitory computer readable medium storing instructions that, when executed by a processing device, cause the processing device to perform operations comprising:
- receiving an encrypted sequence comprising an authentication key, wherein the encrypted sequence further comprises one or more instructions, the one or more instructions to be performed by a secure hardware component in a secure area of a device;
- identifying a base key stored in the secure area of the device before the encrypted sequence is received;
- decrypting the encrypted sequence with the base key to obtain the authentication key;
- receiving a challenge value;
- combining the authentication key with the challenge value to generate a device ephemeral key;
- generating an authentication result for the device based on a combination of the device ephemeral key and the challenge value;
- and
- transmitting the authentication result to a mobile network to authenticate the device.
Dependencies are inferred from the claim text.