Token provisioning

• US 20050188202A1
• Filed: 02/23/2004
• Published: 08/25/2005
• Est. Priority Date: 02/23/2004
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: VeriSign, Inc.
• Inventors: Popp, Nicolas
• Granted Patent: US 7,548,620 B2
• Time in Patent Office: Days
• US Class Current: 713/175
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method for provisioning a device such as a token. The device issues a certificate request to a Certification Authority. The request includes a public cryptographic key uniquely associated with the device. The Certification Authority generates a symmetric cryptographic key for the device, encrypts it using the public key, and creates a digital certificate that contains the encrypted symmetric key as an attribute. The Certification Authority sends the digital certificate to the device, which decrypts the symmetric key using the device'"'"'s private key, and stores the decrypted symmetric key.

Claims

1. A digital certificate including a secret encrypted by a public key associated with a device, wherein the secret is used by the device to generate a plurality of One Time Passwords.

2. The digital certificate of claim 1, wherein the digital certificate is a PKI certificate.