Patent ID: 9300473
Filing Date: 2016-03-29
CPC Classification: G06F,H04J,H04L,H04W,H05K,Y02D

Claim Text:
1. A method for a hardware module with a radio to use a derived public key infrastructure (PKI) key pair, the method performed by the hardware module, the method comprising: reading a first module private key and an identity from a nonvolatile memory, and sending the identity; receiving via the radio a first symmetric key, wherein the first symmetric key is decrypted using the first module private key; receiving via the radio a set of cryptographic parameters, wherein at least a portion of the set of cryptographic parameters is decrypted using the first symmetric key; selecting a subset of the set of cryptographic parameters, and sending the subset; deriving a second module private key and a module public key using the subset, wherein the derived module public key is associated with a module public key identity; transmitting via the radio the derived module public key and the module public key identity, wherein the hardware module authenticates using the first module private key; using the second module private key and a key exchange token to derive a second symmetric key for a symmetric ciphering algorithm; encrypting a sensor measurement with the second symmetric key; and, using an IP:port number to (i) send a message with the encrypted sensor measurement and (ii) receive a response to the message sent.