System and method for securing system content by automated device authentication

1. A method for authentication of a requesting entity by an authenticating entity comprising:

receiving, by an authenticating entity, a request for data from a requesting entity; and

sending, by the authenticating entity, challenge data to the requesting entity;

receiving, by the authenticating entity, the challenge data from the requesting entity;

wherein the challenge data is encrypted, by a computer processor, in one direction between the authenticating entity and the requesting entity, and the challenge data is sent in plain text in the other direction between the authenticating entity and the requesting entity;

wherein the challenge data comprises time data based on a current time of a system of the authenticating entity;

wherein the authenticating entity determines a received time of the received challenge data and calculates, by a computer processor, a time difference between the time data and the received time when the challenge data is received from the requesting entity; and

authenticating, by the authenticating entity, the requesting entity by comparing the challenge data sent to the requesting entity and the challenge data received from the requesting entity, and determining that the time difference is less than a predetermined threshold, wherein when the requesting entity requests data, the authenticating entity provides an application and a key for download by the requesting entity, and wherein the challenge data is encrypted by the requesting entity or the authenticating entity and decrypted by the authenticating entity or the requesting entity using the key.

2. The method of claim 1 , wherein the challenge data sent by the authenticating entity is encrypted and the challenge data received from the requesting entity is decrypted.

3. The method of claim 2 , wherein the challenge data received from the requesting entity is in plain text.

4. The method of claim 1 , wherein the challenge data received from the requesting entity is encrypted and the authenticating entity decrypts the encrypted challenge data.

5. The method of claim 4 , wherein the authenticating entity sends the challenge data to the requesting entity in plain text.

6. The method of claim 1 , wherein the requesting entity is a mobile telecommunications device requesting content to be downloaded.

7. The method of claim 6 , wherein the authenticating entity is a content provider maintaining content to be downloaded to the mobile telecommunications device.

8. A method for authentication of a requesting entity by an authenticating entity comprising:

receiving, by an authenticating entity, a request for data from a requesting entity;

sending, by the authenticating entity to the requesting entity, challenge data in plain text, wherein the challenge data comprises time data based on a current time of a system of the authenticating entity;

receiving, by the authenticating entity from the requesting entity, the challenge data, wherein the received challenge data is encrypted, by a computer processor of the requesting entity;

calculating, by a computer processor, a time difference between when the challenge data is sent to the requesting entity in plain text from the authenticating entity and when the encrypted challenge data is received by the authenticating entity from the requesting entity; and

authenticating, by the authenticating entity, the requesting entity by decrypting the received encrypted challenge data and determining that the time difference is less than a predetermined threshold, wherein when the requesting entity requests data, the authenticating entity provides an application and a key for download by the requesting entity, and wherein the challenge data is encrypted by the requesting entity and decrypted by the authenticating entity using the key.

9. The method of claim 8 , wherein the requesting entity periodically downloads a new application and a new key from the authenticating entity.

10. The method of claim 9 , wherein the challenge data is encrypted by the requesting entity and decrypted by the authenticating entity using the new key.

11. The method of claim 8 , wherein the requesting entity is a mobile telecommunications device requesting content to be downloaded.

12. A method for authentication of a requesting entity by an authenticating entity comprising:

receiving, by an authenticating entity, a request for data from a requesting entity;

encrypting, by a computer processor of the authenticating entity, challenge data;

sending, by the authenticating entity to the requesting entity, the encrypted challenge data, wherein the challenge data comprises time data based on a current time of a system of the authenticating entity;

receiving, by the authenticating entity from the requesting entity, the challenge data in plain text, wherein the received challenge data in plain text is decrypted by the requesting entity, and

calculating a time difference between when the encrypted challenge data is sent to the requesting entity from the authenticating entity and when the challenge data in plain text is received by the authenticating entity from the requesting entity; and

authenticating, by the authenticating entity, the requesting entity when the authenticating entity receives the challenge data in plain text and when the time difference is less than a predetermined threshold, wherein when the requesting entity requests data, the authenticating entity provides an application and a key for download by the requesting entity, and wherein the challenge data is encrypted by the authenticating entity and decrypted by the requesting entity using the key.

13. The method of claim 12 , wherein the key is used by a plurality of requesting entities to authenticate each of the plurality of requesting entities.

14. The method of claim 12 , wherein the requesting entity is a mobile telecommunications device requesting content to be downloaded.