System and method for provisioning device certificates
AssigneeBlackBerry Limited
InventorsMichael K. Brown, Michael S. Brown, Michael Kirkup
Life of this patent
Estimating the term…
Abstract
A method is provided for provisioning a device certificate. A device certificate request is transmitted from a communication device to a server in a communication network using an established communications channel between the communication device and the server. The device certificate request comprises at least a user identifier and a device identifier. The server provides to the communication device a device certificate that includes the user identifier and the device identifier and that is signed by a private key of a certificate authority.
Claims40
A method at a communication device for provisioning a device certificate, the method comprising:
- transmitting a device certificate request to a server in a communication network using an established communications channel between the communication device and the server, wherein the device certificate request comprises at least a user identifier and a device identifier;
- and
- responsive to transmitting the device certificate request, receiving a device certificate that comprises a signed version of the device certificate request that is signed by a private key of a certification authority, the device certificate binding together the user identifier and the device identifier.
A method at a server in a communication network, the method comprising:
- receiving a device certificate request from a communication device over an established communications channel between the communication device and the server, wherein the device certificate request comprises at least a user identifier and a device identifier;
- and
- responsive to receiving the device certificate request, providing to the communication device a device certificate that comprises a signed version of the device certificate request that is signed by a private key of a certification authority, the device certificate binding together the user identifier and the device identifier.
A communication device configured:
- to establish a master communication key with a server in a communication network for encryption and decryption of communication with the server;
- to transmit a device certificate request to a server in a communication network using an established communications channel between the communication device and the server, wherein the device certificate request comprises at least a user identifier and a device identifier;
- and
- responsive to transmitting the device certificate request, to receive a device certificate that comprises a signed version of the device certificate request that is signed by a private key of a certification authority, the device certificate binding together the user identifier and the device identifier.
A server comprising:
- a processor;
- and
- a communication interface coupled to the processor;
- wherein the server is configured:
- to receive, via the communication interface, a device certificate request from a communication device over an established communications channel between the communication device and the server, wherein the device certificate request comprises at least a user identifier and a device identifier;
- and
- responsive to receiving the device certificate request, to provide, via the communication interface, to the communication device a device certificate that comprises a signed version of the device certificate request that is signed by a private key of a certification authority, the device certificate binding together the user identifier and the device identifier.
A non-transitory computer-readable medium having stored thereon executable instructions which, when executed by a processor of a communication device, cause the communication device to:
- transmit a device certificate request to a server in a communication network using an established communications channel between the communication device and the server, wherein the device certificate request comprises at least a user identifier and a device identifier;
- and
- responsive to transmitting the device certificate request, receive a device certificate that comprises a signed version of the device certificate request that is signed by a private key of a certification authority, the device certificate binding together the user identifier and the device identifier.
A non-transitory computer-readable medium having stored thereon executable instructions which, when executed by a processor of a server in a communication network, cause the server to:
- receive a device certificate request from a communication device over an established communications channel between the communication device and the server, wherein the device certificate request comprises at least a user identifier and a device identifier;
- and
- responsive to receiving the device certificate request, provide to the communication device a device certificate that comprises a signed version of the device certificate request that is signed by a private key of a certification authority, the device certificate binding together the user identifier and the device identifier.
Dependencies are inferred from the claim text.