Back to results
US 8,898,455 B2Granted
System and method for authentication of a communication device
AssigneeAT&T Intellectual Property I, L.P.
InventorsNam Nguyen, Donggen Zhang, Kevin Meng
Life of this patent
Estimating the term…
Abstract
A system and method for authentication of a communication device is disclosed. A system that incorporates teachings of the present disclosure may include, for example, a communication device having a controller element to compute a shared secret key based at least in part on a communication device private key and a cryptography algorithm, where the communication device private key is stored in an identity module of the communication device and is unknown to an authentication center, and wherein the communication device is authenticated by the authentication center based at least in part on the shared secret key. Additional embodiments are disclosed.
Claims20
A non-transitory computer-readable storage medium, comprising computer instructions that, when executed by a processor, causes the processor to perform operations comprising:
- generating an authentication center private key at an authentication center, wherein the authentication center comprises a network proxy including a communication interface for communicating with a gateway that provides voice, video, internet protocol television and data communication services between voice over internet protocol terminals;
- computing an authentication center public key based at least in part on the authentication center private key and a reference point in a cryptography algorithm;
- receiving a communication device public key computed by a communication device based at least in part on a communication device private key and the reference point in the cryptography algorithm, wherein the communication device private key is stored in an identity module of the communication device, wherein the communication device private key is provided to the communication device from a third party network, wherein the cryptography algorithm is an elliptic curve algorithm having a base point, wherein the third party network is operated by a single party source, and wherein the authentication center private key, the communication device private key, and the elliptic curve algorithm and base point are supplied to the authentication center and the communication device by the single party source;
- supplying the authentication center public key to the communication device;
- computing a shared secret key based at least in part on the authentication center public key and the communication device public key;
- authenticating the communication device based at least in part on the shared secret key, wherein the shared secret key is temporarily stored by an authentication server, wherein the authentication center private key is provided to the authentication server from the third party network;
- removing the shared secret key from a memory of the authentication server;
- encrypting data utilizing the shared secret key;
- and
- supplying the encrypted data to the communication device.
7 more elements
A communication device, comprising:
- a memory to store computer instructions;
- and
- a controller element coupled to the memory, wherein the controller element, responsive to executing the computer instructions, performs operations comprising:
- computing a shared secret key based at least in part on a
- communication device private key and a cryptography algorithm,
- wherein the communication device private key is stored in an identity module of the communication device and is unknown to an authentication center, wherein the communication device is authenticated by the authentication center based at least in part on the shared secret key,
- wherein the communication device private key is provided to the communication device from a third party network,
- wherein the cryptography algorithm is an elliptic curve algorithm having a base point,
- wherein the third party network is operated by a single party source,
- wherein an authentication center private key, the elliptic curve algorithm and base point are supplied to the authentication center and the communication device by the single party source, and
- wherein the authentication center comprises a network proxy including a communication interface for communicating with at least a gateway that provides voice, video, internet protocol television, and data communication services between at least voice over internet protocol terminals,
- wherein the identity module comprises identification information corresponding to a subscriber associated with the communication device, and
- wherein the identity module is a subscriber identity module card, a universal subscriber identity module card, a removable user identity module card, or Willcom subscriber identity module card.
10 more elements
A method, comprising:
- computing, by a system comprising a processor, a shared secret key at an authentication center based at least in part on an authentication center private key and a cryptography algorithm, the authentication center private key being unknown to a communication device, wherein the cryptography algorithm is an elliptic curve algorithm having a base point, wherein the authentication center comprises a network proxy including a communication interface for communicating with at least a gateway that provides voice, internet protocol television, and data communication services between at least voice over internet protocol terminals;
- and
- authenticating, by the system, the communication device based at least in part on the shared secret key, wherein the shared secret key is temporarily stored in the communication device and the authentication center, wherein the authentication center private key is provided to the authentication center from a third party network, wherein the third party network is operated by a single party source, and wherein a communication device private key, the elliptic curve algorithm and base point are supplied to the authentication center and the communication device by the single party source;
- and
- computing, by the system, a communication device public key based at least in part on a communication device private key and the cryptography algorithm, wherein the communication device private key is stored in an identity module of the communication device.
2 more elements
Dependencies are inferred from the claim text.