Network-based key distribution system, method, and apparatus

A method implemented by at least one processor of an electronic device, the method comprising:

• executing, by the at least one processor, a mobile threat detection (MTD) function to determine whether the electronic device is corrupt;
• when determining that the electronic device is not corrupt, identifying, by the at least one processor, whether an encrypted user key (UKc-Enc) is stored in the electronic device;
• when the UKc-Enc is not stored in the electronic device, decrypting, by the at least one processor, an application key (AKc) and transmitting, by the at least one processor, the AKc and a unique universal identifier (UUID) that is associated with the application to a gateway for establishing a secure application specific communication channel between the electronic device and the gateway;
• and
• when the UKc-Enc is stored in the electronic device, decrypting, by the at least one processor, the UKc-Enc to form a user key (UKc), extracting, by the at least one processor, a UUID from the UKc, and transmitting, by the at least one processor, the UUID from the UKc to the gateway for establishing the secure application specific communication channel between the electronic device and the gateway.

A non-transitory, computer-readable storage medium of an electronic device storing one or more executable instructions that, when executed by at least one processor, cause the at least one processor to:

• execute a mobile threat detection (MTD) function to determine whether the electronic device is corrupt;
• when determining that the electronic device is not corrupt, identify whether an encrypted user key (UKc-Enc) is stored in the electronic device;
• when the UKc-Enc is not stored in the electronic device, decrypt an application key (AKc) and transmit the AKc and a unique universal identifier (UUID) that is associated with the application to a gateway for establishing a secure application specific communication channel between the electronic device and the gateway;
• and
• when the UKc-Enc is stored in the electronic device, decrypt the UKc-Enc to form a user key (UKc), extract a UUID from the UKc, and transmit the UUID from the UKc to the gateway for establishing the secure application specific communication channel between the electronic device and the gateway.