Granted Patent B2

US 9,154,477 · App. 13/481,387 · Granted Oct 6, 2015

Abstract

Claims (70)

1. A computer-implemented method for encrypting communications from a mobile device comprising one or more processors, the method comprising:

receiving, by the one or more processors, derivation information associated with a first symmetric key, from a trusted service manager;

deriving, by the one or more processors, the first symmetric key, wherein the first symmetric key is derived independently from a second symmetric key derived by the trusted service manager;

receiving, by the one or more processors, an asymmetric key encrypted by the independently derived second symmetric key;

decrypting, by the one or more processors, the asymmetric key using the independently derived first symmetric key;

generating, by the one or more processors executing a first application stored on a first memory of the mobile device, a message to be communicated to an intended recipient;

providing, by the first application to an authentication application stored on a secure element of the mobile device, the message, wherein the secure element is an embedded or separate securitized memory;

encrypting, by the one or more processors executing the authentication application, using the asymmetric key, the message;

providing, by the authentication application to the first application, the encrypted message; and

directing, by the first application, communication of the message to the intended recipient.

2. The computer-implemented method of claim 1 , further comprising:

generating, by the authentication application, a message tag; and

associating, by the authentication application, the generated tag with the message.

3. The computer-implemented method of claim 1 , further comprising:

receiving, by the authentication application, key information output by a trusted service manager,

wherein encrypting the message comprises encrypting the message utilizing the received key information.

4. The computer-implemented method of claim 3 , wherein receiving key information comprises receiving an asymmetric key.

5. The computer-implemented method of claim 3 , wherein receiving key information comprises receiving key information encrypted by the trusted service manager utilizing a first symmetric key, and further comprising:

deriving, by the authentication application, a second symmetric key; and

decrypting, by the authentication application, the key information utilizing the derived second symmetric key.

6. The computer-implemented method of claim 5 , wherein deriving the second symmetric key comprises deriving the second symmetric key utilizing card production life cycle (CPLC) information associated with the secure element.

7. The computer-implemented method of claim 6 , wherein deriving the second symmetric key further comprises deriving the second symmetric key utilizing derivation information received from the trusted service manager.

8. The computer-implemented method of claim 1 , further comprising:

transmitting, by the at least one processor, a registration request, to a trusted service manager; and

receiving, by the at least one processor, a registration status, from the trusted service manager.

9. A system for encrypting communications from a mobile device, the system comprising:

at least one secure element, wherein the at least one secure element is an embedded or separate securitized memory storing an authentication application;

at least one memory configured to store computer-executable instructions; and

at least one processor configured to access the at least one memory and execute the computer-executable instructions to:

receive, by the at least one processor, from a trusted service manager derivation information associated with a first symmetric key;

derive, by the at least one processor, the first symmetric key, wherein the first symmetric key is derived independently from a second symmetric key derived by the trusted service manager;

receive, by the at least one processor, an asymmetric key encrypted by the independently derived second symmetric key;

decrypt, by the at least one processor, the asymmetric key using the independently derived first symmetric key;

generate, by the at least one processor executing a first application stored on a first memory of the mobile device, a message to be communicated to an intended recipient;

provide, by the first application to the authentication application, the message;

encrypt, by the at least one processor executing the authentication application, using the asymmetric key, the message;

provide, by the authentication application to the first application, the encrypted message; and

direct, by the first application, communication of the message to the intended recipient.

10. The system of claim 9 , wherein the at least one processor is further configured to execute the computer-executable instructions to:

generate, by the authentication application, a message tag; and

associate, by the authentication application, the generated tag with the message.

11. The system of claim 9 , wherein the at least one processor is further configured to execute the computer-executable instructions to:

receive, by the authentication application, key information output by a trusted service manager,

wherein encrypting the message comprises encrypting the message utilizing the received key information.

12. The system of claim 11 , wherein the computer-executable instructions to receive key information comprise instructions to receive an asymmetric key.

13. The system of claim 11 , wherein the computer-executable instructions to receive key information comprise instructions to receive key information encrypted by the trusted service manager utilizing a first symmetric key, and further comprise instructions to:

derive, by the authentication application, a second symmetric key; and

decrypt, by the authentication application, the key information utilizing the derived second symmetric key.

14. The system of claim 13 , wherein the computer-executable instructions to derive the second symmetric key comprise instructions to derive the second symmetric key utilizing card production life cycle (CPLC) information associated with the secure element.

15. The system of claim 14 , wherein the computer-executable instructions to derive the second symmetric key further comprise instructions to derive the second symmetric key utilizing derivation information received from the trusted service manager.

16. The system of claim 9 , wherein the at least one processor is further configured to execute the computer-executable instructions to:

determine, by the at least one processor, that the mobile device is authenticated; and

install, by the at least one processor, an administration software associated with the trusted service manager.

17. A method comprising:

receiving, by at least one processor of a mobile device, from a trusted service manager derivation information associated with a first symmetric key;

deriving, by the at least one processor, the first symmetric key, wherein the first symmetric key is derived independently from a second symmetric key derived by the trusted service manager;

receiving, by the at least one processor, an asymmetric key encrypted by the independently derived second symmetric key;

decrypting, by the at least one processor, the asymmetric key using the independently derived first symmetric key;

generating, by the at least one processor executing at least one application stored in at least one memory of the mobile device, a message to be communicated to an intended recipient;

providing, by the at least one application to an authentication application stored in at least one secure element of the mobile device, the message, wherein the at least one secure element is an embedded or separate securitized memory;

encrypting, by the at least one processor executing the authentication application, using the asymmetric key, the message;

providing, by the authentication application to the first application, the encrypted message; and

directing, by the first application, communication of the message to the intended recipient.

18. The method of claim 17 , further comprising:

generating, by the authentication application, a message tag; and

associating, by the authentication application, the generated tag with the message.

19. The method of claim 17 , further comprising:

receiving, by the authentication application, key information output by a trusted service manager,

wherein encrypting the message comprises encrypting the message utilizing the received key information.

20. The method of claim 19 , wherein receiving key information comprises receiving an asymmetric key.

Assignments (8)