Apparatus and method for secure delivery of data utilizing encryption key management
AssigneeAT&T Intellectual Property I, L.P.
InventorsWalter Cooper Chastain, Stephen Emill Chin
Life of this patent
Estimating the term…
Abstract
A device that incorporates the subject disclosure may perform, for example, receiving a derived encryption key from a remote management server without receiving a master key from which the derived encryption key was generated, applying a one-way function to the derived encryption key and a nonce to generate a temporary encryption key, obtaining data for transmission to a recipient device, encrypting the data using the temporary encryption key to generate encrypted data, and providing the encrypted data over a network to the recipient device. Other embodiments are disclosed.
Claims20
A method comprising:
- obtaining, by a remote management server, a master key;
- obtaining, by the remote management server, derivation data associated with an end user device;
- applying, by the remote management server, a one-way function to the master key and the derivation data to generate a derived encryption key;
- and
- providing, by the remote management server over a network, the derived encryption key to a universal integrated circuit card of the end user device to enable the universal integrated circuit card to generate a temporary encryption key for encrypting data,
- wherein the master key is not provided by the remote management server to the end user device.
A communication device comprising:
- a secure element having a secure element memory that stores first executable instructions that, when executed by the secure element, facilitate performance of first operations, comprising:
- receiving a derived encryption key from a remote management server without receiving a master key from which the derived encryption key was generated;
- and
- applying a one-way function to the derived encryption key and a nonce to generate a temporary encryption key;
- a secure device processor having a secure device processor memory that stores second executable instructions that, when executed by the secure device processor, facilitate performance of second operations, comprising:
- receiving the temporary encryption key from the secure element without receiving the derived encryption key;
- obtaining data for transmission to a recipient device;
- encrypting the data using the temporary encryption key to generate encrypted data;
- and
- providing the encrypted data over a network to the recipient device,
- wherein the secure device processor is separate from the secure element and in communication with the secure element.
A method comprising:
- receiving, by a communication device comprising a processor, a derived encryption key from a remote management server without receiving a master key from which the derived encryption key was generated;
- applying, by the communication device, a one-way function to the derived encryption key and a nonce to generate a temporary encryption key;
- obtaining, by the communication device, data for transmission to a recipient device;
- encrypting, by the communication device, the data using the temporary encryption key to generate encrypted data;
- and
- providing, by the communication device, the encrypted data over a network to the recipient device.
Dependencies are inferred from the claim text.