Back to results
US 8,788,825 B1Granted
Method and apparatus for key management for various device-server configurations
AssigneeDigi International Inc.
InventorsAn Van Le, Andrea Maria Mazzario, Elliot Schwartz
Life of this patent
Estimating the term…
Abstract
A first entity initiates a first connection to a second entity which then receives from the second entity initial information which the first entity uses to derive a key for the first entity (first entity key). The first entity key is then used to authenticate the second entity and if the second entity is authenticated then the first entity derives a second key which is used for communication between the first entity and the second entity.
Claims5
A method for establishing a connection, the method comprising in order:
- first, receiving at a device management server (DMS) an identification from a device;
- then
- second, deriving only at said DMS a first key based on said received identification from said device;
- then
- third, using said derived first key only at said DMS to authenticate said device;
- then
- fourth, when authenticated only at said DMS, then sending from said DMS to said device information selected from the group consisting of a credential, and a redirection signal;
- then
- fifth, sending from said DMS to said device a second key for use in all further communications between said DMS and said device;
- then
- sixth, establishing a secure socket layer (SSL) session between said DMS and a device application server (DAS);
- then
- seventh, sending to said DAS said second key;
- then
- eighth, using said second key at said DAS to authenticate said device;
- then
- ninth, when authenticated;
- and then
- tenth, sending a third key from said DAS to said device for use in communication between said DAS and said device.
16 more elements
A method comprising in order:
- first, receiving at a device a connection request from a first entity;
- then
- second, sending to said first entity a device identification after said received connection request;
- then
- third, receiving at said device from said first entity a first key;
- then
- fourth, using said received first key to authenticate only on said device said first entity;
- then
- fifth, when authenticated on said device;
- then
- sixth, receiving from said first entity a second key on said device for use in communication between said first entity and said device;
- then
- seventh when authenticated, then eighth receiving from said first entity information selected from the group consisting of a credential, and a redirection signal;
- then
- ninth, sending said identification and said credential from said device to a second entity;
- then
- tenth, receiving from said second entity a third key;
- then
- eleventh, using said third key to authenticate said second entity;
- then
- twelfth, when authenticated;
- and then
- thirteenth, receiving a fourth key for use in communication between said second entity and said device.
20 more elements
A method for establishing a secure communication link, the method comprising in order:
- first, receiving at a device application server (DAS) prior to establishing said secure communication link an identification from a device;
- then
- second, forwarding said received identification from said device at said DAS to a device management server (DMS) prior to establishing said secure communication link;
- then
- third, deriving only at said DMS a first key;
- then
- fourth, using said derived first key only at said DMS to authenticate said device prior to establishing said secure communication link;
- then
- fifth, when authenticated;
- then
- sixth, sending a second key from said DMS to said device for use in communication between said DMS and said device;
- then
- seventh, establishing said secure communication link between said DMS and said device using said sent second key;
- then
- eighth, establishing a secure socket layer (SSL) session between said DMS and said DAS;
- then
- ninth, sending to said DAS said second key;
- then
- tenth, using said second key at said DAS to authenticate said device;
- then
- eleventh, when authenticated;
- and then
- twelfth, sending a third key from said DAS to said device for use in communication between said DAS and said device.
20 more elements
A method for key management, the method comprising in order:
- first, receiving at a device management server (DMS) an identification from a device;
- then
- second, deriving only at said DMS a first key based on said received identification from said device;
- then
- third, using said derived first key only at said DMS to authenticate said device;
- then
- fourth, when authenticated only at said DMS sending a redirection signal from said DMS to said device;
- then
- fifth, sending from said DMS to said device a second key for use in all further communications between said DMS and said device;
- then
- sixth receiving at said DMS a device key from said device, said received device key completing said key management;
- then
- seventh, establishing a secure socket layer (SSL) session between said DMS and a device application server (DAS);
- then
- eighth, sending to said DAS said device key;
- then
- ninth, using said device key at said DAS to authenticate said device;
- then
- tenth, when authenticated;
- then
- eleventh, sending a key request from said DAS to said DMS;
- then
- twelfth, receiving at said DAS a third key from said DMS;
- and then
- thirteenth, sending said third key from said DAS to said device for use in communication between said DAS and said device.
22 more elements
Dependencies are inferred from the claim text.