Patent ID: 11930357
Assignee: SYNIVERSE TECHNOLOGIES, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 5:
6. A method for provisioning a key pair having a public key and a private key for securing communication between a cloud messaging service and a trusted application on a subscriber device, comprising:
a. sending a first identity request from the trusted application to a software component on the subscriber device, wherein the software component provides access to a TEE on the subscriber device;
b. receiving a first identity response from the software component and forwarding it to the cloud messaging service;
c. sending a generated identity blob request from the cloud messaging service to an OEM cloud service, which validates the subscriber device using immutable information retrieved from the TEE of the subscriber device, the information in the TEE verifiable by the OEM cloud service;
d. receiving a device identity response from the OEM cloud service at the cloud messaging service and forwarding it to the trusted application;
e. generating a key pair and provisioning the public key through the software component to the trusted application, wherein the private key is stored in a cloud wallet service by the cloud messaging service; and
f. generating a second key pair at the cloud messaging service, storing a second private key in the cloud wallet service, and sending a second public key for the second generated key pair to the operator application.