# US 12,604,291 B2 · Secure process for device registration with a service > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,604,291 B2 - Document ID: US12604291B2 - Status: Granted - Kind: B2 - Application number: 18/180,579 - Filed: 2023-03-08 - Published: 2024-09-12 - Granted: 2026-04-14 - Earliest claimed: 2023-03-08 - Assignees: T-Mobile Innovations LLC - Applicants: T-Mobile Innovations LLC - Inventors: Cheng Chang Liu; Jason Bart Marshall; WeiQun Yan; Hongkun Jin; Abdul Khaliq Shaik - Web page: https://patentgrep.com/patent/US12604291B2 ## CPC - H04W 60/04: using triggered events - H04W 12/041: Key generation or derivation - H04W 12/0431: Key distribution or pre-distribution; Key agreement - H04W 12/06: Authentication - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Technology is disclosed herein for registering a user device with a service. In an implementation, a service receives a request from a user device to begin a registration process. The request includes registration data and the public key of an asymmetric key pair. The service stores the public key in association with a session identifier and sends the session identifier to the user device. The service receives a later request from the user device to continue the registration process. The later request includes the session identifier and a digital signature created using the private key of the key pair. The service authenticates the digital signature based on the public key which is retrieved based on the session identifier. In response to authenticating the digital signature, the service sends the registration data associated with the request to the user device and registers the user device based on the registration data. ## Claims ### Claim 1 A method of registering a user device with a service, the method comprising: receiving, by the service, a request from the user device to begin a registration process to register the user device with the service, wherein the request includes registration data and a public key of an asymmetric key pair; storing, by the service, the public key in association with a session identifier; sending, by the service, the session identifier to the user device; receiving, by the service, a later request from the user device to continue the registration process, wherein the later request includes the session identifier and a digital signature created using a private key of the asymmetric key pair; authenticating, by the service, the digital signature of the later request based on the public key, wherein the public key is retrieved based on the session identifier; responsive to authenticating the digital signature, sending, by the service, the registration data associated with the later request to the user device; and registering, by the service, the user device with the service based on the registration data. ### Claim 2 (depends on 1) The method of claim 1, wherein the service comprises an authentication service. ### Claim 3 (depends on 2) The method of claim 2, wherein: receiving, by the service, the later request comprises receiving, by the authentication service, the later request; and authenticating, by the service, the digital signature of the later request comprises sending, by the service, the public key to the authentication service and receiving, by the service, an indication of authentication from the authentication service, wherein the authentication service authenticates the digital signature of the later request based on the public key. ### Claim 4 (depends on 3) The method of claim 3, wherein the request to begin the registration process and the later request to continue the registration process are received from a client application executing on the user device. ### Claim 5 (depends on 4) The method of claim 4, wherein receiving the later request comprises receiving the later request more than twenty-four hours after the request. ### Claim 6 (depends on 1) The method of claim 1, further comprising directing, by the service, the user device to generate the asymmetric key pair in association with the service. ### Claim 7 (depends on 1) The method of claim 1, wherein registering, by the service, the user device with the service comprises authorizing, by the service, the user device to access the service. ### Claim 8 (depends on 1) The method of claim 1, wherein the service comprises a 5G network service. ### Claim 9 A computing apparatus comprising: one or more computer-readable storage media; one or more processors operatively coupled with the one or more computer-readable storage media; and program instructions stored on the one or more computer-readable storage media that, when executed by the one or more processors, direct the computing apparatus to: receive, from a user device, a request to begin a registration process to register the user device with a service, wherein the request includes registration data and a public key of an asymmetric key pair; store the public key in association with a session identifier; send the session identifier to the user device; receive, from the user device, a later request to continue the registration process, wherein the later request includes the session identifier and a digital signature created using a private key of the asymmetric key pair; authenticate the digital signature of the later request based on the public key, wherein the public key is retrieved based on the session identifier; send the registration data associated with the later request to the user device; and register the user device with the service based on the registration data. ### Claim 10 (depends on 9) The computing apparatus of claim 9, wherein to authenticate the digital signature, the program instructions direct the computing apparatus to: send the public key to an authentication service of the service; and receive an indication of authentication from the authentication service, wherein the authentication service authenticates the digital signature of the later request based on the public key. ### Claim 11 (depends on 10) The computing apparatus of claim 10, wherein the request and the later request are received from a client application executing on the user device. ### Claim 12 (depends on 11) The computing apparatus of claim 11, wherein receiving the later request to continue the registration process comprises receiving the later request more than twenty-four hours after the request to begin a registration process. ### Claim 13 (depends on 9) The computing apparatus of claim 9, wherein the program instructions further direct the computing apparatus to direct the user device to generate the asymmetric key pair in association with the service. ### Claim 14 (depends on 9) The computing apparatus of claim 9, wherein to register the user device with the service, the program instructions direct the computing apparatus to authorize the user device to access the service. ### Claim 15 A method of registering a user device with a service, the method comprising: sending, by the user device, a request to the service to begin a registration process to register the user device with the service, wherein the request includes registration data and a public key of an asymmetric key pair; receiving, by the user device, a session identifier from the service; sending, by the user device, a later request to the service to continue the registration process, wherein the later request includes the session identifier and a digital signature created using a private key of the asymmetric key pair; and receiving, by the user device, registration data associated with the later request from the service. ### Claim 16 (depends on 15) The method of claim 15, further comprising: executing, by the user device, a client application on the user device; and receiving, by the user device, user input indicative of the request to begin the registration process and the later request to continue the registration process. ### Claim 17 (depends on 16) The method of claim 16, further comprising generating, by the user device, the asymmetric key pair in association with the service. ### Claim 18 (depends on 17) The method of claim 17, wherein sending, by the user device, the later request to continue the registration process comprises sending, by the user device, the later request more than twenty-four hours after sending the request to begin the registration process. ### Claim 19 (depends on 15) The method of claim 15, wherein the registration data includes user data and device data. ### Claim 20 (depends on 15) The method of claim 15, wherein the service comprises a 5G network service.