Patent ID: 7747862

Claim:
A method, comprising: generating an attestation identity key (AIK) key pair at a subscriber station, the AIK key pair including a subscriber station AIK private and public key, the AIK key pair being an alias for an endorsement key (EK) that is embedded in a trusted platform module (TPM) of the subscriber station, the AIK key pair being used to sign a subscriber station manifest generated by the TPM; sending the subscriber station AIK public key and identification information through a base station of a broadband wireless network to a specific authentication server used for managing access to a broadband wireless network; and authenticating the subscriber station to allow the subscriber station to access the broadband wireless network by, establishing an unsecured wireless connection with the base station of the broadband wireless network; sending subscriber station authentication information to the authentication server via the base station, the subscriber station authentication information comprising the subscriber station manifest having a digital signature signed with the subscriber station AIK private key; employing the subscriber station AIK public key to authenticate the subscriber station via the digital signature; terminating the established unsecured wireless connection; and establishing an authenticated wireless connection with the base station.