Patent ID: 11922384
Assignee: ORANGE
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 4:
5. A method implemented by a security token service provider device, the method comprising generating multiple security tokens that are to be used by a mobile terminal during electronic transactions, wherein generating the multiple security tokens comprises:
receiving from the mobile terminal at least one request to obtain multiple security tokens for use by the mobile terminal during electronic transactions, the at least one request including at least one identification value for the mobile terminal as generated by the secure element of the mobile terminal by using a first secret key shared between the secure element and the security token provider;
verifying the at least one identification value by use of the first secret key;
generating, triggered by successful verification of the at least one identification value, for the mobile terminal, the multiple security tokens and random numbers associated with the multiple security tokens, different security tokens generated by the security token service provider device being respectively associated with different random numbers;
generating, for each security token, an encryption key from the random number uniquely associated with the respective security token and from a second secret key shared between the security token service provider device and the secure element of the mobile terminal;
encrypting each security token by using a symmetric encryption algorithm and the encryption key generated for the respective security token; and
sending the multiple encrypted security tokens and the associated random numbers to the mobile terminal.