Patent ID: 7418596

Claim:
A method of distribution of at least one encryption key for use in controlling access of a mobile node to packet communication service via a wireless communication network, the method comprising: receiving a key update instruction in the mobile node via the wireless communication network; in response to the key update instruction, producing an encrypted key payload in the mobile node, wherein: the encrypted key payload comprises the at least one encryption key for the mobile node and a first authenticator value generated from the at least one encryption key; and the payload is encrypted with a public encryption key of a packet communication service control node of the wireless communication network; sending the encrypted key payload through the wireless communication network, from the mobile node to the packet communication service control node, for decryption thereof with a private key of the packet communication service control node corresponding to the public encryption key; receiving a reply message in the mobile node via the wireless communication network, the reply message containing a second authenticator value from the packet communication service control node; and designating the at least one encryption key in the mobile node for use in future procedures to obtain access to the packet communication service of the wireless communication network via the service control node, upon determining that the second authenticator value matches the first authenticator value.