×

Secure PKI communications for “machine-to-machine” modules, including key derivation by modules and authenticating public keys

  • US 9,998,280 B2
  • Filed: 02/12/2016
  • Issued: 06/12/2018
  • Est. Priority Date: 09/10/2013
  • Status: Active Grant
First Claim
Patent Images

1. A method for a hardware module with a radio to use a public key and a private key, the method performed by the hardware module, the method comprising:

  • receiving a set of parameters, wherein the set of parameters includes a value for an elliptic curve and a key length;

    deriving the private key and the public key using a key pair generation algorithm with the received set of parameters, wherein the hardware module records the derived private key in a nonvolatile memory, wherein the derived private key is used at least, in part, for processing a first module digital signature, and wherein the hardware module authenticates with the first module digital signature;

    reading from the nonvolatile memory (i) a module identity, and (ii) a previous module private key;

    transmitting via the radio a message from an internet protocol address and port (IP;

    port) number, wherein the message includes the derived public key, a module public key identity, and the module identity, wherein the hardware module authenticates the message with a second module digital signature, and wherein the hardware module uses the previous module private key to process the second module digital signature; and

    ,receiving via the radio a response at the IP;

    port number, wherein the response includes a server encrypted data, and wherein the server encrypted data includes a module instruction, and wherein the server encrypted data is decrypted using the derived private key.

View all claims
  • 4 Assignments
Timeline View
Assignment View
    ×
    ×