Method and apparatus for key management for various device-server configurations
View Patent ↗A first entity initiates a first connection to a second entity which then receives from the second entity initial information which the first entity uses to derive a key for the first entity (first entity key). The first entity key is then used to authenticate the second entity and if the second entity is authenticated then the first entity derives a second key which is used for communication between the first entity and the second entity.
1. A method for establishing a connection, the method comprising in order:
first, receiving at a device management server (DMS) an identification from a device; then
second, deriving only at said DMS a first key based on said received identification from said device; then
third, using said derived first key only at said DMS to authenticate said device; then
fourth, when authenticated only at said DMS, then sending from said DMS to said device information selected from the group consisting of a credential, and a redirection signal; then
fifth, sending from said DMS to said device a second key for use in all further communications between said DMS and said device; then
sixth, establishing a secure socket layer (SSL) session between said DMS and a device application server (DAS); then
seventh, sending to said DAS said second key; then
eighth, using said second key at said DAS to authenticate said device; then
ninth, when authenticated; and then
tenth, sending a third key from said DAS to said device for use in communication between said DAS and said device.
2. A method comprising in order:
first, receiving at a device a connection request from a first entity; then
second, sending to said first entity a device identification after said received connection request; then
third, receiving at said device from said first entity a first key; then
fourth, using said received first key to authenticate only on said device said first entity; then
fifth, when authenticated on said device; then
sixth, receiving from said first entity a second key on said device for use in communication between said first entity and said device; then
seventh when authenticated, then eighth receiving from said first entity information selected from the group consisting of a credential, and a redirection signal; then
ninth, sending said identification and said credential from said device to a second entity; then
tenth, receiving from said second entity a third key; then
eleventh, using said third key to authenticate said second entity; then
twelfth, when authenticated; and then
thirteenth, receiving a fourth key for use in communication between said second entity and said device.
3. The method of claim 2 wherein said first entity, and said second entity are individually selected from the group consisting of a device management server (DMS), a device application server (DAS), a second device, and said device.
4. A method for establishing a secure communication link, the method comprising in order:
first, receiving at a device application server (DAS) prior to establishing said secure communication link an identification from a device; then
second, forwarding said received identification from said device at said DAS to a device management server (DMS) prior to establishing said secure communication link; then
third, deriving only at said DMS a first key; then
fourth, using said derived first key only at said DMS to authenticate said device prior to establishing said secure communication link; then
fifth, when authenticated; then
sixth, sending a second key from said DMS to said device for use in communication between said DMS and said device; then
seventh, establishing said secure communication link between said DMS and said device using said sent second key; then
eighth, establishing a secure socket layer (SSL) session between said DMS and said DAS; then
ninth, sending to said DAS said second key; then
tenth, using said second key at said DAS to authenticate said device; then
eleventh, when authenticated; and then
twelfth, sending a third key from said DAS to said device for use in communication between said DAS and said device.
5. A method for key management, the method comprising in order:
first, receiving at a device management server (DMS) an identification from a device; then
second, deriving only at said DMS a first key based on said received identification from said device; then
third, using said derived first key only at said DMS to authenticate said device; then
fourth, when authenticated only at said DMS sending a redirection signal from said DMS to said device; then
fifth, sending from said DMS to said device a second key for use in all further communications between said DMS and said device; then
sixth receiving at said DMS a device key from said device, said received device key completing said key management; then
seventh, establishing a secure socket layer (SSL) session between said DMS and a device application server (DAS); then
eighth, sending to said DAS said device key; then
ninth, using said device key at said DAS to authenticate said device; then
tenth, when authenticated; then
eleventh, sending a key request from said DAS to said DMS; then
twelfth, receiving at said DAS a third key from said DMS; and then
thirteenth, sending said third key from said DAS to said device for use in communication between said DAS and said device.