Device and method for authenticating transport layer security communications

A method comprising:

• receiving, at a secure element of a mobile device, a first authentication token;
• determining, at the secure element, whether the first authentication token is valid based on a sequence number included in an encrypted portion of the first authentication token;
• responsive to determining that the first authentication token is valid:
• generating, at the secure element, a second authentication token, wherein the second authentication token includes the sequence number from the first authentication token and indicates a result of an authentication operation performed by the secure element,
• sending the second authentication token to a network gateway device, and
• deriving, at the secure element, a pre-shared key using a key derivation function, wherein the pre-shared key is usable to establish a secure communication channel with the network gateway device,
• wherein the first authentication token includes the encrypted portion and a non-encrypted portion,
• wherein the encrypted portion of the first authentication token includes a first text field, and
• wherein the first text field in the encrypted portion of the first authentication token includes (i) an identity of the network gateway device, (ii) the sequence number, and (iii) a secret value.

A non-transitory, computer-readable medium or media storing computer-readable instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• receiving a first authentication token;
• determining whether the first authentication token is valid based on a sequence number included in an encrypted portion of the first authentication token;
• responsive to determining that the first authentication token is valid:
• generating a second authentication token, wherein the second authentication token includes the sequence number from the first authentication token and indicates a result of an authentication operation performed by the one or more processors,
• sending the second authentication token to a network gateway device, and
• deriving a pre-shared key using a key derivation function, wherein the pre-shared key is usable to establish a secure communication channel with the network gateway device,
• wherein the first authentication token includes the encrypted portion and a non-encrypted portion,
• wherein the encrypted portion of the first authentication token includes a first text field, and
• wherein the first text field in the encrypted portion of the first authentication token includes (i) an identity of the network gateway device, (ii) the sequence number, and (iii) a secret value.