SYSTEM AND METHOD FOR GENERATING A RANDOM NUMBER
A system and method for generating a random number are provided. The method is performed on a mobile device, and includes the steps of establishing a secure, independent connection with a remote server, of transmitting a request for a random seed value from the server, of receiving a random seed value from the server generated by a dedicated random seed device, and of generating a random number using the random seed as input to a random number generating algorithm. The random number may in turn be used to generate an asymmetric key pair, including a public key and a private key, which in turn may be used to encrypt communication. The public key may be communicated to a remote server, which in turn may provide the mobile device with a digital certificate to use when digitally signing messages.
1 . A method for generating a random number performed on a mobile device and including the steps of:
establishing a secure, independent connection with a remote server;
transmitting, to the remote server over the secure, independent connection, a request for a random seed value;
receiving, from the remote server over the secure, independent connection, a random seed value generated by a dedicated random seed device; and
generating a random number using the random seed value as input to a random number generating algorithm.
2 . The method as claimed in claim 1 which includes the step of validating the authenticity of the remote server whilst establishing a secure, independent connection with the remote server.
3 . The method as claimed in claim 1 which includes the step of generating an asymmetric key pair using the random number as input value to an asymmetric key pair generating algorithm, the asymmetric key pair including a private key and a public key.
4 . The method as claimed in claim 2 which includes the steps of:
transmitting, to the remote server, a request for a digital certificate;
transmitting, to the remote server, the public key; and
receiving, from the remote server, a digital user certificate that includes the public key and that is signed with a certificate authority private key.
5 . The method as claimed in claim 1 wherein the step of establishing a secure, independent connection is done via a Diffie-Hellman key exchange.
6 . A method performed on a remote server and including the steps of:
establishing a secure, independent connection with a mobile device;
receiving, from the mobile device over the secure, independent connection, a request for a random seed value;
generating a random seed value by a dedicated random seed device; and
transmitting the random seed value over the secure, independent connection to the mobile device to enable the mobile device to generate a random number using the random seed value as input to a random number generating algorithm.
7 . The method as claimed in claim 6 which includes the step of responding to a validating request to validate the authenticity of the remote server whilst establishing a secure, independent connection with the remote server.
8 . The method as claimed in claim 6 which includes the steps of:
receiving, from the mobile device, a request for a digital certificate;
receiving, from the mobile device, a public key;
generating a digital user certificate that includes the public key and that is signed with a certificate authority private key; and
sending the digital user certificate to the mobile device.
9 . The method as claimed in claim 6 wherein the step of establishing a secure, independent connection is done via a Diffie-Hellman key exchange.
10 . A system for generating a random number, the system comprising a mobile device including:
a communication component for establishing a secure, independent connection with a remote server;
wherein the communication component is configured to transmit a request for a random seed value from the remote server over the secure, independent connection;
wherein the communication component is configured to receive a random seed value generated by a dedicated random seed device at the remote server over the secure, independent connection; and
a random number generating component for generating a random number using the random seed value as input to a random number generating algorithm.
11 . The system as claimed in claim 10 wherein the mobile device includes:
a key generating component for generating an asymmetric key pair using the random number as input to an asymmetric key pair generating algorithm, the asymmetric key pair including a private key and a public key;
wherein the communication component is configured to transmit the public key to the remote server over the secure, independent connection; and
wherein the communication component is configured to receive, from the remote server and over the secure, independent connection, a digital certificate that includes the public key and that is signed with a certificate authority private key.
12 . The system as claimed in claim 11 wherein the mobile device includes:
a memory component configured to store the asymmetric key pair; and
a digital signing component configured to digitally sign a message.
13 . The system as claimed in claim 10 wherein the system comprising a server including:
a communication component configured to receive the request for a random seed value and the public key, and to transmit the random seed value and the digital certificate;
a dedicated random seed generation device configured to generate the random seed value; and
a digital certificate creation component for generating the digital certificate.
14 . A system for generating a random number, the system comprising a server including:
a communication component for establishing a secure, independent connection with a mobile device;
wherein the communication component is configured to receive, from the mobile device over the secure, independent connection, a request for a random seed value;
a dedicated random seed generation device configured to generate the random seed value; and
wherein the communication component is configured to transmit the random seed value over the secure, independent connection to the mobile device to enable the mobile device to generate a random number using the random seed value as input to a random number generating algorithm.
15 . The system as claimed in claim 14 wherein the system includes:
a digital certificate creation component for generating the digital certificate.
16 . A computer program product for generating a random number, the computer program product comprising a computer readable storage medium having computer-readable program code configured to:
establish a secure, independent connection with a remote server;
transmit, to the remote server over the secure, independent connection, a request for a random seed value;
receive, from the remote server over the secure, independent connection, a random seed value generated by a dedicated random seed device; and
generate a random number using the random seed value as input to a random number generating algorithm.
17 . A computer program product for generating a random number, the computer program product comprising a computer readable storage medium having computer-readable program code configured to:
establish a secure, independent connection with a mobile device;
receive, from the mobile device over the secure, independent connection, a request for a random seed value;
generate a random seed value by a dedicated random seed device; and
transmit the random seed value over the secure, independent connection to the mobile device to enable the mobile device to generate a random number using the random seed value as input to a random number generating algorithm.