Patent ID: 11922384
Assignee: ORANGE
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 8:
9. A security token service provider device for use in electronic transactions, the device comprising:
a processor and a memory arranged to execute software modules;
a first reception module arranged to receive from a mobile terminal at least one request to obtain multiple security tokens for use by the mobile terminal during electronic transactions, the at least one request including at least one identification value for the mobile terminal as generated by a secure element of the mobile terminal by using a first secret key shared between the secure element and the token service provider device;
a first verification module configured to verify the at least one identification value by use of the first secret key;
a first generator module that is activated upon successful verification of the at least one identification value by the first verification module is valid and that is configured for generating one multiple security tokens and random numbers uniquely associated with the multiple security tokens for the mobile terminal, different security tokens generated by the security token service provider device being respectively associated with different random numbers;
a second generator module configured to generate, for each security token as generated by the first generator module, an encryption key for from the random number associated with the respective security token and from a second secret key shared between the security token service provider device and the secure element of the mobile terminal;
an encryption module configured to encrypt each security token by using a symmetric encryption algorithm and the encryption key generated for the respective security token; and
a send module configured to send the multiple encrypted security tokens and the associated random numbers to the mobile terminal.