Authentication key management system and method

• US 5,850,445 A
• Filed: 01/31/1997
• Issued: 12/15/1998
• Est. Priority Date: 01/31/1997
• Status: Expired due to Fees

• Current Assignee: Synacom Technology, Inc.
• Original Assignee: Synacom Technology, Inc.
• Inventors: Snyder, Randall A., Lee, Ming J., Chan, Yick Man
• Primary Examiner(s): GREGORY, BERNARR E
• Application Number:
  US08/792,513
• Time in Patent Office: 683 Days
• Field of Search: 380/4, 380/9, 380/21, 380/23, 380/25, 380/44, 380/45, 380/46, 380/47, 380/49, 380/50, 380/52, 380/59
• US Class Current: 380/247
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

A system and method for automatically securely generating and programming an MS and SAMS with the sensitive authentication information while significantly reducing the risk of misappropriation of the sensitive authentication information. The risk of misappropriation is reduced since the sensitive authentication information (or other sensitive information) need not be pre-programmed into the MS, or if it is pre-programmed, the sensitive authentication information can be re-programmed, thereby reducing the potential access to the information by unauthorized people before the MS is sold. In addition, the risk of misappropriation is reduced since the generation and programming system and method is performed automatically using a secured communication technique.

Claims

1. A method for securely programming a mobile system with sensitive authentication information, comprising the steps of:

connecting the mobile system to a validator unit;

initiating a connection between said validation unit and a secure authentication-key management system (SAMS) via a wide area data network;

securely generating a encryption key in the validator unit and the SAMS;

generating the sensitive authentication information signal in the SAMS;

encrypting the sensitive authentication information signal using the encryption key to generate encrypted sensitive authentication information signal;

transmitting said encrypted sensitive authentication information signal from the SAMS to the validation unit via the wide area data network;

unencrypting the encrypted sensitive authentication information signal in the validation unit to generate said sensitive authentication information signal; and

automatically programming said mobile system with said sensitive authentication information signal.