SHARED SECRET ESTABLISHMENT AND DISTRIBUTION
Providing secure communication with a security token includes establishing a shared secret between the security token and a first entity, transferring the shared secret between the first entity and a second entity, and the security token and the second entity establishing a secure communication channel using the shared secret. Transferring the shared secret may include selectively transferring the shared secret to a subset of entities according to access considerations for the security token. The security token may be part of a mobile phone having NFC capability, the first entity may be a Web service and the second entity may be a door controller. The Web service may establish a shared secret with the mobile phone. Providing secure communication with a security token may also include distributing the shared secret to all of the hosts corresponding to doors to which the phone can be used to obtain access.
1 . A method of providing secure communication with a security token, comprising:
establishing a shared secret between the security token and a first entity;
transferring the shared secret between the first entity and a second entity; and
the security token and the second entity establishing a secure communication channel using the shared secret.
2 . A method, according to claim 1 , wherein the first entity is a registrar.
3 . A method, according to claim 2 , wherein the second entity is a host.
4 . A method, according to claim 3 , wherein the host is coupled to a door controller and wherein the security token provides access through a corresponding door thereof.
5 . A method, according to claim 1 , wherein the first entity is a host.
6 . A method, according to claim 5 , wherein the host is coupled to a door controller and wherein the security token provides access through a corresponding door thereof.
7 . A method, according to claim 1 , wherein transferring the shared secret includes selectively transferring the shared secret to a subset of entities according to access considerations for the security token.
8 . A method, according to claim 1 , wherein the security token is part of a mobile phone having NFC capability, the first entity is a Web service and the second entity is a door controller.
9 . A method, according to claim 8 , wherein the Web service establishes a shared secret with the mobile phone.
10 . A method, according to claim 9 , further comprising:
distributing the shared secret to all of the hosts corresponding to doors to which the phone can be used to obtain access.
11 . Computer software, provided in a computer-readable medium, that provides secure communication with a security token, the software comprising:
executable code that establishes a shared secret between the security token and a first entity;
executable code that transfers the shared secret between the first entity and a second entity; and
executable code that causes the security token and the second entity to establish a secure communication channel using the shared secret.
12 . Computer software, according to claim 11 , wherein the first entity is a registrar.
13 . Computer software, according to claim 12 , wherein the second entity is a host.
14 . Computer software, according to claim 13 , wherein the host is coupled to a door controller and wherein the security token provides access through a corresponding door thereof.
15 . Computer software, according to claim 11 , wherein the first entity is a host.
16 . Computer software, according to claim 15 , wherein the host is coupled to a door controller and wherein the security token provides access through a corresponding door thereof.
17 . Computer software, according to claim 11 , wherein executable code that transfers the shared secret selectively transfers the shared secret to a subset of entities according to access considerations for the security token.
18 . Computer software, according to claim 11 , wherein the security token is part of a mobile phone having NFC capability, the first entity is a Web service and the second entity is a door controller.
19 . Computer software, according to claim 18 , wherein the Web service establishes a shared secret with the mobile phone.
20 . Computer software, according to claim 19 , further comprising:
executable code that distributes the shared secret to all of the hosts corresponding to doors to which the phone can be used to obtain access.