Method and apparatus for initial certificate enrollment in a wireless communication system

A mobile device capable of facilitating initial certification enrollment in a wireless communication system, the mobile device comprising:

• a processor;
• an at least one memory device that is configured to store instructions that, when executed by the processor, cause the processor to:
• establish a first wireless connection with an infrastructure;
• establish a second wireless connection with another mobile device;
• receive a first certification request from the another mobile device and over the second wireless connection, wherein the first certification request comprises a request for a digital certificate for the another mobile device and first biometric data associated with a user of the mobile device;
• obtain second biometric data, wherein the second biometric data is associated with a user of the another mobile device;
• convey a second certification request to the infrastructure and over the first wireless connection, wherein the second certification request comprises the request for the digital certificate for the another mobile device, the first biometric data, and the second biometric data;
• in response to conveying the second certification request to the infrastructure, receive, from the infrastructure and over the first wireless connection, the digital certificate for the another mobile device by receiving, from the infrastructure and over the first wireless connection, a certification response comprising the digital certificate for the another mobile device, wherein the certification response is signed by a third private key;
• convey, to the another mobile device over the second wireless connection, the digital certificate;
• convey, to the another mobile device, a digital certificate associated with the mobile device;
• in response to conveying to the another mobile device the digital certificate associated with the mobile device, receive, from the another mobile device, a public key;
• wherein receiving the first certification request comprises receiving the first certification request signed by a private key corresponding to the public key;
• and
• wherein the private key comprises a first private key and wherein the at least one memory device is configured to convey a second certification request to the infrastructure by:
• signing the second certification request using a second private key to produce a signed second certification request
• conveying the signed second certification request to the infrastructure;
• and
• wherein the at least one memory device is configured to store instructions that, when executed by the processor, further cause the processor to validate the first certification request based on the public key.