Device provisioning of authentication capability
AssigneeAssa Abloy AB
InventorKrzysztof Grzegorz Fabjanski
Life of this patent
Estimating the term…
Abstract
A method of provisioning an authentication device of an authentication system comprises sending an authentication application from an authentication system backend server to a backend network of a cellular network operator; verifying, by the backend network of the cellular operator, the authentication application and including the authentication application in an operator profile; sending the authentication application with the operator profile from the backend network of the cellular network operator to a local profile assistant (LPA) of the authentication device; and installing the authentication application in a secure zone of the authentication device using the LPA.
Claims14
A method of provisioning an authentication device of an authentication system, the method comprising:
- sending an authentication application from an authentication system backend server to a backend network of a cellular network operator;
- verifying, by the backend network of the cellular operator, the authentication application and including the authentication application in an operator profile;
- sending the authentication application with the operator profile from the backend network of the cellular network operator to a local profile assistant (LPA) of the authentication device;
- and
- installing the authentication application in a secure zone of the authentication device using the LPA after device authentication by a subscription manager secure routing (SM-SR) server of the backend network of the cellular operator, wherein the authentication application includes instructions that when performed by processing circuitry of the authentication device, causes the authentication device to function as a verifier device to authenticate identity of another device.
An Internet of Things (IoT) device of an authentication system, the IoT device comprising:
- physical layer circuitry;
- and
- processing circuitry coupled to the physical layer circuitry, wherein the processing circuitry includes a local profile assistant (LPA) application configured to:
- authenticate subscription manager secure routing (SM-SR) server of a backend network of a cellular operator;
- receive an authentication application from the SM-SR server in response to the authentication;
- and
- install the authentication application in a trusted execution environment (TEE) of the IoT device after device authentication by the SM-SR, wherein the authentication application includes instructions that when performed by processing circuitry of the IoT device, causes the IoT device to function as a verifier device to authenticate identity of another device.
A mobile computing device of an authentication system, the mobile computing device comprising:
- physical layer circuitry;
- and
- processing circuitry coupled to the physical layer circuitry, wherein the processing circuitry includes a local profile assistant (LPA) application configured to:
- authenticate subscription manager secure routing (SM-SR) server of a backend network of a cellular operator;
- receive an authentication application from the SM-SR server in response to the authentication;
- and
- install the authentication application in a secure zone of the mobile computing device, wherein the authentication application includes instructions that when performed by processing circuitry of the mobile computing device, causes the mobile computing device to function as a verifier device to authenticate identity of another device.
Dependencies are inferred from the claim text.