Patent ID: 8977856
Filing Date: 2015-03-10
Classification: H04L,H04W

Abstract:
1. A method in a target mobile device for obtaining a credential key associated with a user account from a source mobile device, the method comprising: producing, by the target mobile device, a request message for a key exchange, the request message including a target identifier and a target device key of the target mobile device, the target mobile device and the source mobile device each associated with the user account, the source mobile device being identified by a source identifier; signing, by the target mobile device, the request message with a digital signature; sending, by the target mobile device, the signed request message to the source mobile device; when the request message is positively verified, receiving, by the target mobile device, a response message from the source mobile device, the response message including the target identifier and an encrypted form of the credential key, the encrypted form of the credential key being encrypted with the target device key; decrypting, by the target mobile device, the encrypted form of the credential key; retrieving, by the target mobile device, a plurality of encrypted credential objects from a network infrastructure, each of the plurality of encrypted credential objects comprising a respective authentication token; decrypting, by the target mobile device, the plurality of encrypted credential objects using the credential key; and, using, by the target mobile device, resulting authentication tokens to access respective data applications.