System and method for pre-shared key (PSK) based secure communications with mobile service provider authenticator
The method provides an automated and scalable system for the generation, distribution, management of symmetric pre-shared keys (PSKs) to applications executing on headless and mobile devices. It helps achieve device protection, application security, and data protection with data authenticity and confidentiality in intra-device, inter-device, device-to-edge, and device-to-cloud communications. It helps Transport Layer Security (TLS) enabled applications dynamically acquire and renew PSKs and use identity hints for PSK based authentication ceremony during a TLS handshake. It helps client-server applications dynamically acquire and renew PSKs using keyed-hash message authentication code (HMAC) for data integrity and authenticity, content signing, and data encryption for confidentiality. It helps manage and distribute API shared secrets and API access tokens required for authenticated API requests and API security. It helps applications (producers, brokers, and consumers of content) with PSKs for supply chain tamper resistance. It helps real-time low-latency applications with selective encryption of partial messages.
1 . A method of generating, distributing, and managing a lifecycle of a symmetric pre-shared key (PSK) used in client authentication (C-PSK) between applications executing on distributed mobile devices including a client application executing on a client mobile device, a server application executing on a server device, a key distribution service (KDS), a KDS proxy, a KDS interface, a symmetric KDS member PSK (M-PSK), a M-PSK identity hint, a tenant identifier, a device group identifier associated with a tenant identifier, a member domain associated with the group identifier, an application identifier associated with the group identifier, a C-PSK identity hint, a key record, a domain name system (DNS) server, a device directory service (DDS), and a mobile service provider (MSP) server, the method comprising:
authenticating, with the KDS, by the client application executing on the client mobile device, using the tenant identifier, the symmetric KDS member PSK (M-PSK) and the M-PSK identity hint, wherein the client mobile device is registered by an international mobile subscriber identity (IMSI) on the MSP server, configured with the KDS or the KDS proxy, and wherein the client mobile device is configured as a first member of a device group on the KDS;
acquiring, by the client application, the C-PSK from the KDS using at least the group identifier and the C-PSK identity hint, wherein the C-PSK is used as a shared symmetric key for client authentication over a secure transport protocol during communication with the server application executing on the server device, wherein the server device is registered by a DNS hostname in the DNS server, wherein the server device is configured as a second member of the device group on the KDS;
authenticating with the KDS, by the server application executing on the server device, using the tenant identifier, the symmetric KDS member PSK (M-PSK), and the M-PSK identity hint, wherein the server device is registered by a DNS hostname on the DNS server configured with the KDS or the KDS proxy;
acquiring, by the server application, the C-PSK from the KDS using at least the group identifier and the C-PSK identity hint, wherein the C-PSK is used as a shared symmetric key for client authentication over the secure transport protocol during communication with the client application executing on the client device, wherein the client device is registered by a DNS hostname in the DNS server;
initiating, by the client application, a TLS-PSK session, wherein the session is initiated using the acquired C-PSK for the client mobile device in the device group as the PSK used in client authentication, to establish secure communications with the server application executing on the server device; and
renewing, by the client application and the server application, the C-PSK programmatically and automatically using the KDS interface, without requiring human intervention, and without service disruption.
2 . The method of claim 1 , wherein a mobile device member authentication handshake is performed by the KDS interface on the client mobile device using the tenant identifier, the symmetric KDS member PSK (M-PSK) and the M-PSK identity hint as a first factor of a device authentication, and further wherein a session key is generated using a key exchange handshake between the KDS interface and the KDS or the KDS proxy, and further wherein a device member validation is performed as a second factor of the device authentication by:
receiving, by the KDS from the client mobile device, an integrated circuit card identifier (ICCID), international mobile equipment identity (IMEI), and IMSI information of the client mobile device;
sending, by the KDS to the client mobile device, a nonce for signing by a SIM on the client mobile device using the authentication key stored securely within the SIM, wherein the storage location may be in a card circuitry or on an applet on the SIM;
receiving, by the KDS from the client mobile device, the signed nonce;
sending, by the KDS to the mobile services provider of the client mobile device, the nonce and IMSI for signing using the associated authentication key of the mobile device; and
authenticating, by the KDS, the client mobile device by comparing and matching the signed nonces received from the client mobile device and the mobile service provider to authenticate and validate the client mobile device.
3 . The method of claim 1 , wherein a device member authentication handshake is performed by the KDS interface on the server device using the symmetric KDS member PSK (M-PSK) and M-PSK identity hint, and further wherein the session key is generated using a key exchange handshake between the KDS interface and the KDS or the KDS proxy, and further wherein a device member validation is performed by:
performing, by the KDS or the KDS proxy, a DNS reverse lookup of a device member IP address to query for the DNS hostname;
retrieving, by the KDS or the KDS proxy, the DNS hostname from a resource record in a DNS response; and
comparing and matching, by the KDS or the KDS proxy, the retrieved DNS hostname with a device member identifier in a plurality of KDS requests.
4 . The method of claim 3 , wherein the device authentication and a plurality of key exchange handshakes are performed over a connection-less UDP or connection-oriented TCP transport protocol, without requiring a security transport protocol, and further wherein a data authentication and/or a data encryption is performed with the retrieved pre-shared keys using any communications protocol.
5 . The method of claim 1 , wherein the KDS interface provides a plurality of application programming interfaces (APIs), wherein the client application and the server application send a plurality of requests for key operations directly to the KDS and receive a plurality of responses for key operations directly from the KDS, or wherein the client application and the server application send a plurality of requests for key operations indirectly through the KDS proxy and receive a plurality of responses for key operations indirectly through the KDS proxy.
6 . The method of claim 1 , wherein the server device is registered by a unique DNS hostname in a domain on a local DNS server with an IP address (A) record and a PTR record used in a DNS hostname reverse lookup.
7 . The method of claim 1 , wherein on the KDS, the client device and the server device are configured as members of a tenancy associated with the tenant identifier and the device group associated with the tenant identifier, and further wherein the device group is configured with a key record that includes a key instance used in client authentication.
8 . The method of claim 1 , wherein a key record configured for the device group on the KDS includes a key expiration timestamp and a key status to manage automatic key renewal, key rotation, and key revocation operations on the KDS.
9 . The method of claim 1 , wherein a key record configured for the device group on the KDS includes a key token, and wherein the client application sends an authenticated API request to the server application using a key instance as an API shared secret and the key token as an API shared token, and further wherein the API request may be a REST API request.
10 . A method of claim 1 , wherein an authenticated member device's request for any key operation, based on the group identifier and the C-PSK identity hint, is processed by the KDS and permitted based on a match of a member domain with a domain name and a plurality of top-level domain suffix parts derived from a plurality of resource records retrieved by a DNS reverse lookup for a member device DNS hostname.
11 . A method of claim 1 , wherein an authenticated member device's request for any key operation, based on the group identifier, the C-PSK identity hint, and the application identifier, is processed by the KDS and permitted based on a match with an application identifier associated with the group identifier, wherein the KDS is configured to allow or deny the key operation.
12 . A method of claim 1 , wherein an authenticated member device's request for any key operation, based on the group identifier and the C-PSK identity hint, is processed by the KDS and permitted based on a match of the member device tenant identifier with an associated license owner identifier retrieved from the DDS as a vendor specific member device information.
13 . A method of claim 1 , wherein a device unique C-PSK identity hint is generated by the client application to create a device unique PSK for client authentication using a device unique registration identifier and a derivation function.
14 . A method of claim 13 , wherein a derived device key (D-PSK) is created locally, just-in-time on-demand and not stored locally, using the retrieved S-PSK and a device unique identifier as the registration identifier for the client application and server application to sign and/or encrypt messages or tokens for data authentication and/or privacy.
15 . A method of generating, distributing, and managing a lifecycle of a symmetric pre-shared key (PSK) used in secure communications (S-PSK), for use between applications executing on distributed mobile devices including a client application executing on a mobile device, a server application executing on a server device, a key distribution service (KDS), a KDS proxy, a KDS interface, a symmetric KDS member M-PSK, a M-PSK identity hint, a tenant identifier, a device group identifier associated with the tenant identifier, a member domain associated with the group identifier, an application identifier associated with the group identifier, a S-PSK identity hint, a derived device key (D-PSK), a key record, a device directory service (DDS), and a mobile service provider (MSP) server, the method comprising:
authenticating with the KDS, by the client application executing on the mobile device, using the tenant identifier, the symmetric KDS member PSK (M-PSK), and the M-PSK identity hint, wherein the mobile device is registered by a first international mobile subscriber identity (IMSI) on the MSP server, configured with a KDS or KDS proxy, and configured as a first member of a device group on the KDS;
acquiring, by the client application, the S-PSK from the KDS, using at least the group identifier and the S-PSK identity hint, wherein the C-PSK is used as a shared symmetric key to secure communications over an insecure transport protocol during communication with a server application executing on the server device, wherein the server device is registered by a second international mobile subscriber identity (IMSI) on the MSP server, wherein the server device is configured as a second member of the device group;
authenticating with the KDS, by the server application executing on the server device, using the tenant identifier, the symmetric KDS member PSK (M-PSK), and the M-PSK identity hint, wherein the server device is registered by a second international mobile subscriber identity (IMSI) on the MSP server configured with the KDS or the KDS proxy;
acquiring, by the server application the S-PSK from the KDS, using at least the group identifier and the S-PSK identity hint, wherein the S-PSK is used as the shared symmetric key to secure communications over the insecure transport protocol during communication with the client application executing on the client mobile device, wherein the client mobile device is registered by a first international mobile subscriber identity (IMSI) on the MSP server;
protecting, by the client application executing on the mobile device, using the acquired S-PSK the authenticity and/or the confidentiality of data in communications with the server application executing on the server device over an insecure connection-oriented or a connection-less transport protocol;
protecting, by the server application executing on the server device, using the acquired S-PSK the authenticity and/or the confidentiality of data in communications with the client application executing on the mobile device over the insecure connection-oriented or the connection-less transport protocol; and
renewing, by the client application and the server application, the S-PSK, programmatically and automatically using the KDS interface, without requiring human intervention, and without service disruption.
16 . The method of claim 15 , wherein a device member authentication handshake is performed by the KDS interface on the client device and the server device using the tenant identifier, the device member PSK (M-PSK) and the M-PSK identity hint as a first factor of a device authentication, and further wherein the session key is generated using a key exchange handshake between the KDS interface and the KDS or the KDS proxy, and further wherein a device member validation is performed as a second factor of device authentication by:
receiving, by the KDS from the mobile device, an integrated circuit card identifier (ICCID), an international mobile equipment identity (IMEI), and an IMSI information of the mobile device;
sending, by the KDS to the mobile device, a nonce for signing by a SIM on the mobile device using the authentication key stored securely within the SIM, wherein a storage location may be in a card circuitry or on an applet on the SIM;
receiving, by the KDS from the mobile device, the signed nonce;
sending, by the KDS to the mobile services provider of the mobile device, the nonce and the IMSI for signing using an associated authentication key of the mobile device; and
authenticating, by the KDS, the mobile device by comparing and matching the signed nonces received from the mobile device and the mobile service provider to authenticate and validate the mobile device.
17 . The method of claim 15 , wherein the device authentication and a plurality of key exchange handshakes are performed over a connection-less UDP or connection-oriented TCP transport protocol, without requiring a security transport protocol, and further wherein a data authentication and/or a data encryption is performed with the retrieved pre-shared keys over any communications protocol.
18 . The method of claim 15 , wherein the KDS interface provides a plurality of application programming interfaces (APIs), wherein the client application and the server application send a plurality of requests for key operations directly to the KDS and receive a plurality of responses for key operations directly from the KDS, or wherein the client application and the server application send a plurality of requests for key operations indirectly through the KDS proxy and receive a plurality of responses for key operations indirectly through the KDS proxy.
19 . The method of claim 15 , wherein on the KDS, the client device and server device are configured as members of a tenancy associated with the tenant identifier and the device group associated with the tenant identifier, and further wherein the device group is configured with a key record that includes a key instance used to secure communications between the client and server applications.
20 . The method of claim 15 , wherein a key record configured for the device group on the KDS includes a key expiration timestamp and a key status to manage automatic key renewal, key rotation, and key revocation operations on the KDS.
21 . The method of claim 15 , wherein prior to acquiring the S-PSK from the KDS by the client application, the S-PSK is created on the KDS by the server application with the server member device as a key creator and with restricted key usage permissions for data authentication, data encryption, content signing, broadcast signing, broadcast encryption, multicast signing, multicast encryption, token signing, or token encryption operations.
22 . The method of claim 15 , wherein the acquiring of the S-PSK from the KDS by the client application restricts key usage based on permissions configured by a key creator.
23 . The method of claim 15 , wherein a key record configured for the device group on the KDS includes a key token for the client application to send an authenticated API request to the server application using the key instance as an API shared secret and the key token as an API shared token and further wherein the API request may be a REST API request.
24 . A method of claim 15 , wherein an authenticated member device's request for any key operation, based on the group identifier and the S-PSK identity hint, is processed by the KDS and permitted based on a match of a member domain with a domain derived from a plurality of resource records retrieved by a DNS reverse lookup for a member device DNS hostname.
25 . A method of claim 15 , wherein an authenticated member device's request for any key operation, based on the group identifier, the S-PSK identity hint, and the application identifier, is processed by the KDS and permitted based on a match with an application identifier associated with the group identifier, wherein the KDS is configured to allow or deny the key operation.
26 . A method of claim 15 , wherein an authenticated member device's request for any key operation, based on the group identifier and the S-PSK identity hint, is processed by the KDS and permitted based on a match of the member device tenant identifier with an associated license owner identifier retrieved from the DDS as a vendor specific member device information.