Authentication method and terminal device
An authentication method and terminal device obtain a device identifier associated with an electronic device and receive an Integrated Circuit Card Identifier (ICC ID) of a Subscriber Identity Module (SIM) of the electronic device. A group of IDs is cryptographically signed with a device key of the terminal device or a key derived from the device key. The group of IDs may comprise the device identifier and the ICC ID.
1. A method comprising:
obtaining a device identifier associated with an electronic device;
receiving an Integrated Circuit Card Identifier (ICC ID) of a Subscriber Identity Module (SIM) of the electronic device;
cryptographically signing a group of IDs with a device key of the electronic device or a key derived from the device key, wherein the group of IDs comprises the device identifier and the ICC ID, wherein the device identifier comprises an identifier associated with a trusted execution environment (TEE) provided by the electronic device;
generating, within the TEE, a request to perform an action in relation to the electronic device and sending the request with the signed group of IDs;
wherein the device identifier associated with the electronic device comprises a media access control (MAC) address, and
wherein the group of IDs comprises at least one of an International Mobile Subscriber Identity (IMSI) and a Temporary Mobile Subscriber Identity (TMSI).
2. A method according to claim 1 , further comprising:
sending a signed group of IDs with at least one request for an action.
3. A method according to claim 2 , wherein the action in the at least one request for an action comprises setting a user selected authentication step for use in an action with user selected data.
4. A method according to claim 1 , further comprising:
sending the signed group of IDs to a database during a registration phase.
5. A method according to claim 1 , wherein the device key is a private key.
6. A method according to claim 1 , further comprising storing the cryptographically signed group of IDs within a secure memory protected by the TEE against access by untrusted code executed outside the TEE.
7. A terminal device comprising processing circuitry configured to:
obtain a device identifier associated with an electronic device;
receive an Integrated Circuit Card Identifier (ICC ID) of a Subscriber Identity Module (SIM) of the electronic device;
cryptographically sign a group of IDs with a device key of the electronic device, wherein the group of IDs comprises the device identifier and the ICC ID, wherein the device identifier comprises an identifier associated with a trusted execution environment (TEE) provided by the electronic device;
generate, within the TEE, a request to perform an action in relation to the electronic device and sending the request with the signed group of IDs;
wherein the device identifier associated with the electronic device comprises a media access control (MAC) address, and
wherein the group of IDs comprises at least one of an International Mobile Subscriber Identity (IMSI) and a Temporary Mobile Subscriber Identity (TMSI).
8. A terminal device according to claim 7 , wherein the processing circuitry is configured to:
send a signed group of IDs with at least one request for an action.
9. A terminal device according to claim 8 , wherein the action in the at least one request for an action comprises setting a user selected authentication step for use in an action with user selected data.
10. A terminal device according to claim 7 , wherein the processing circuitry is configured to:
send the signed group of IDs to a database during a registration phase.
11. A terminal device according to claim 7 , wherein the device key is a private key.
12. A terminal device according to claim 7 , wherein the processing circuitry is configured to store the cryptographically signed group of IDs within a secure memory protected by the TEE against access by untrusted code executed outside the TEE.