Patent ID: 7966000

Claim:
A machine-readable medium comprising: code for generating an authentication challenge at a bootstrapping server function, the authentication challenge including a first random number as a first parameter, a public key based at least in part on the random number, and a signature based at least in part on the random number, the public key and a private key; code for sending the authentication challenge to a mobile terminal, wherein the mobile terminal can verify the origin of the authentication challenge based on a previously obtained bootstrapping server certificate associated with the bootstrapping server function; code for receiving an authentication response at the bootstrapping server function that includes a second random number and a second parameter computed with a copy of the private key generated at the mobile terminal based at least in part on the first random number and a pre-shared secret key stored in a subscriber identification module in the mobile terminal; code for verifying whether the authentication response originated from the mobile terminal by re-computing the first parameter at the bootstrapping server function based on a second key provided to the bootstrapping server function; and code for generating a mutually authenticated key at the bootstrapping server function based at least in part on the first random number, the second random number, and the private key.