Secured data derivation for user devices
AssigneeComcast Cable Communications, LLC
InventorsBradley Hess, Nikola Kolev, Kyong Park
Life of this patent
Estimating the term…
Abstract
Methods, apparatuses, and systems are described for deriving secured keys and authenticating based on the derived keys. An entity may receive one or more derived keys and one or more key derivation algorithms associated with the one or more derived keys. A user device may derive, based on a key associated with the user device and unknown to the entity, a user key. The entity may derive, based on a first derived key and one of the key derivation algorithms, a second derived key, and may verify, based on the second derived key, the user key.
Claims20
A method comprising:
- receiving, by a second computing device from a user device, a message based on a first key that was derived by the user device based on application of a key derivation algorithm to a master key;
- receiving, by the second computing device from a first computing device different from the user device, a second key, wherein the second key is different from the first key and the master key and wherein the second key was derived by the first computing device based on application of the key derivation algorithm to the master key;
- and
- authenticating, by the second computing device, the user device based on the first key and the second key.
A method comprising:
- sending, by a first computing device to a user device, a master key;
- receiving, by the first computing device from a second computing device, a request for a key associated with communications with the user device;
- deriving, based on the request and based on application of a first key derivation algorithm of one or more key derivation algorithms associated with the user device to the master key, a second key;
- and
- sending, to the second computing device, the second key and information configured to cause the second computing device to derive, based on application of a second key derivation algorithm of the one or more key derivation algorithms to the second key, a derived key.
A system comprising:
- a first computing device;
- and
- a second computing device,
- wherein the first computing device comprises:
- one or more first processors;
- and
- memory storing first instructions that, when executed by the one or more first processors, configure the first computing device to:
- send, to a user device, a master key;
- receive, from the second computing device, a request for a key associated with communications with the user device;
- derive, based on the request and based on application of a first key derivation algorithm of one or more key derivation algorithms associated with the user device to the master key, a second key;
- and
- send, to the second computing device, the second key and information configured to cause the second computing device to derive, based on application of a second key derivation algorithm to the second key, a derived key;
- wherein the second computing device comprises:
- one or more second processors;
- and
- memory storing second instructions that, when executed by the one or more second processors, configure the second computing device to:
- receive, from the first computing device, the second key and the information.
Dependencies are inferred from the claim text.