Token provisioning
AssigneeVeriSign, Inc.
InventorNicolas Popp
Life of this patent
Estimating the term…
Abstract
A method for provisioning a device such as a token. The device issues a certificate request to a Certification Authority. The request includes a public cryptographic key uniquely associated with the device. The Certification Authority generates a symmetric cryptographic key for the device, encrypts it using the public key, and creates a digital certificate that contains the encrypted symmetric key as an attribute. The Certification Authority sends the digital certificate to the device, which decrypts the symmetric key using the device's private key, and stores the decrypted symmetric key.
Claims16
A method for reprovisioning a token having a first secret, comprising:
- sending a request for a certificate;
- receiving a certificate that contains a second secret encrypted with a public key of the token, the second secret distinct from the first secret;
- decrypting the second secret with a private key of the token;
- replacing the first secret with the second secret;
- and
- generating a one time password based on the second secret,
- wherein the second secret is a symmetric cryptographic key.
A token for generating one time passwords, comprising:
- a processor;
- and
- a memory coupled to the processor, the memory storing a first secret and token instructions adapted to be executed by the processor to send a message that includes a request for a certificate, receive a certificate that includes a second secret encrypted with a public key, decrypt the second secret with a private key of the token, replace the first secret with the second secret including storing the second secret in memory, and generate a one time password based on the second secret,
- wherein the second secret is a symmetric cryptographic key.
A token for generating one time passwords, comprising:
- a processor;
- and
- a memory coupled to the processor, the memory separately storing;
- a first secret for generating one time passwords;
- a private key;
- a public key;
- and
- token instructions adapted to be executed by the processor to send a message that includes a request for a certificate, receive a certificate that includes a second secret encrypted with a public key, decrypt the second secret with the private key of the token, replace the first secret with the second secret, and generate a one time password based on the second secret,
- wherein the second secret is a symmetric cryptographic key.
Dependencies are inferred from the claim text.