Attestation process and system for wireless security

A computer system configured to provide a secured challenge and response for wireless network security, comprising:

• a mobile equipment comprising one or more processors, the mobile equipment comprising one or more computer-readable storage mediums storing one or more sequences of instructions, which when executed, cause:
• a mobile equipment to provision the mobile equipment with an operator, the provisioning comprising:
• requesting, with a subscriber identity module associated with the mobile equipment, a shared secret operator assigned symmetric equipment key;
• and
• providing, from the operator, the shared secret operator assigned symmetric equipment key, and storing the shared secret operator assigned symmetric equipment key within the subscriber identity module;
• the subscriber identity module to challenge the mobile equipment, the challenging comprising:
• generating an asymmetric key pair, the asymmetric key pair including an asymmetric encryption key and an asymmetric decryption key;
• providing the shared secret operator assigned symmetric equipment key and the asymmetric encryption key to a secure enclave;
• sealing the shared secret operator assigned symmetric equipment key and the asymmetric encryption key into the secure enclave;
• generating a nonce with the subscriber identity module and transmitting the nonce to the secure enclave;
• encrypting the shared secret operator assigned symmetric equipment key and the nonce with the asymmetric encryption key in the secure enclave to form a verification encryption package;
• transmitting the verification encryption package to the subscriber identity module;
• decrypting the verification encryption package with the asymmetric decryption key to release the shared secret operator assigned symmetric equipment key;
• storing the shared secret operator assigned symmetric equipment key in the subscriber identity module;
• generating, with the subscriber identity module, a cipher key and an integrity key from the shared secret operator assigned symmetric equipment key;
• and
• storing the cipher key and an integrity key in the subscriber identity module.

A method for providing a secured challenge and response for wireless/mobile/IOT network security, comprising:

• provisioning a mobile equipment with an operator, the provisioning comprising:
• requesting, with a subscriber identity module associated with the mobile equipment, a shared secret operator assigned symmetric equipment key;
• and
• providing, from the operator, the shared secret operator assigned symmetric equipment key, and storing the shared secret operator assigned symmetric equipment key within the subscriber identity module;
• challenging the mobile equipment with the subscriber identity module, the challenging comprising:
• generating an asymmetric key pair, the asymmetric key pair including an asymmetric encryption key and an asymmetric decryption key;
• providing the shared secret operator assigned symmetric equipment key and the asymmetric encryption key to a secure enclave;
• sealing the shared secret operator assigned symmetric equipment key and the asymmetric encryption key into the secure enclave;
• generating a nonce with the subscriber identity module and transmitting the nonce to the secure enclave;
• encrypting the shared secret operator assigned symmetric equipment key and the nonce with the asymmetric encryption key in the secure enclave to form a verification encryption package;
• transmitting the verification encryption package to the subscriber identity module;
• decrypting the verification encryption package with the asymmetric decryption key to release the shared secret operator assigned symmetric equipment key;
• storing the shared secret operator assigned symmetric equipment key in the subscriber identity module;
• generating, with the subscriber identity module, a cipher key and an integrity key from the shared secret operator assigned symmetric equipment key;
• and
• storing the cipher key and an integrity key in the subscriber identity module.