Patent ID: 6243812
Filing Date: 2001-06-05
Classification: G06Q,H04L

Abstract:
A method of authentication using a secure device that has the capability to do public-key cryptography and generate random numbers, comprising:a. the installation authority authenticates that the device is untampered and genuine, and the device authenticates that the installation authority is genuine, which establishes an authenticated communication path between the installation authority and the device;b. the installation authority sends an authenticated communication to the device which contains the authenticating authority public key, and a signal for the device to begin secret key authentication initialization;c. the device uses its random number generator to generate a new set of primary secret key authentication keys;d. the device enciphers the new set of primary secret key authentication keys with the authenticating authority public key, to form a secret key authentication core, and then transmits the secret key authentication core to the installation authority;e. the installation authority takes the secret key authentication core, appends identifying information and other parameters to form a secret key authentication certificate, and the installation authority signs this certificate with an installation authority private key; andf. the installation authority then stores the signed secret key authentication certificate in a manner to allow an authenticating authority who wishes to authenticate the device to obtain it.