Patent ID: 11949798
Assignee: nan
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A wireless computing device comprising:
a) at least one processor for a primary platform (PP);
b) at least one computer-readable medium operatively connected to the at least one processor and having stored thereon instructions that, when executed by the at least one processor, cause the wireless device to perform a method for the PP to configure a secondary platform bundle (SPB), the method comprising:
1) Recording (i) a first set of cryptographic parameters and (ii) a primary platform public key and a primary platform private key and (iii) a first certificate authority certificate;
2) Receiving a ciphertext firmware comprising the secondary platform bundle;
3) Deriving a first random number using a hardware random number generator;
4) Establishing a secure session with a configuration server;
5) Sending, to the configuration server, the first random number and the first set of cryptographic parameters;
6) Receiving, from the configuration server, a subset of the first set of cryptographic parameters, a second set of cryptographic parameters, and a second random number;
7) Deriving a SPB public key infrastructure (PKI) key pair comprising a SPB private key and a corresponding SPB public key using the second set of cryptographic parameters;
8) Sending, to the configuration server, the derived SPB public key;
9) Receiving, from the configuration server, a first digital signature over at least the SPB public key and the first random number, wherein the PP verifies the first digital signature using at least the subset and the first certificate authority certificate;
10) Generating a second digital signature using the primary platform private key and the subset, wherein the second digital signature is over at least the SPB public key and the second random number;
11) Sending, to the configuration server, the second digital signature;
12) Receiving a SPB certificate and an identity for the SPB; and
13) authenticating with a network using at least the SPB certificate and the identity.