Patent ID: 9049025
Filing Date: 2015-06-02
Classification: H04L,H04W

Abstract:
1. A method comprising: receiving, by a server, registration information of a plurality of devices, including information indicating whether each device is a secure device having encryption and decryption capabilities or a non-secure device not having encryption and decryption capabilities; distributing, by a key management server, to the server and to the secure devices, respective encryption and decryption keys; receiving, in the server, information encrypted by and sent from one of the secure devices to an intended recipient device through a communication network, the encrypted information being accompanied with information identifying the intended recipient and the encrypted information being encrypted using the respective secure device encryption key that is different from the encryption keys used by other secure devices; determining in the server, based on the recipient information and the registration information, whether a device of the intended recipient is a secure or a non-secure device; and upon determining that the intended recipient device is a non-secure device: wherein at least one of the decrypting and sending steps is responsive to the server determining, based on the communication with the authentication and authorization system, that the token is valid.