Patent ID: 7319757

Claim:
A method of providing an over-the-air (OTA) application to a wireless device comprising: receiving a request for an OTA application at an authentication center from the wireless device; generating a random number and sending the random number to the wireless device in response to the request; receiving a signed response (Sres) from the wireless device, the signed response generated by the wireless device based on the random number and a user key (Ki) stored within the wireless device; and authenticating the wireless device by comparing the signed response (Sres) received from the wireless device with a predicted signed response (Sres), when the wireless device is authenticated, the method further comprises: adding the random number to one protocol data unit (PDU) of a plurality of PDUs comprising the OTA application; encrypting the PDUs using a cipher key (Kc) generated with the random number; and sending the encrypted PDUs to the wireless device, wherein the wireless device extracts the random number from the one PDU that includes the random number, calculates a calculated cipher key (Kcc) from the extracted random number and the user key (Ki), and either accepts or rejects installation of the OTA application based on a comparison of the calculated cipher key (Kcc) and a generated cipher key (Kc).