Patent ID: 8782412

Claim:
A method for obtaining secured privileged access in a mobile device, the method comprising: configuring the mobile device with an embedded stub having root privileges; configuring a client and a plurality of tools on the mobile device; attempting to make a connection with a server via the client; detecting whether the client has a privilege to invoke at least one tool of the plurality of tools; invoking the embedded stub to elevate an access level of the at least one tool to make a connection with the server; receiving a stub connection request from the server; and performing a mutual authentication between the embedded stub, the client and the server, further comprising: sending a connection request from the client to the embedded stub; sending a random session token from the stub to the client; sending a NULL authentication vector from the client to indicate to the embedded stub that the client does not have the session key; sending, by the embedded stub to the server via the client, a challenge request with encrypted random number and cryptographic algorithm that was used to encrypt the random number; receiving, at the embedded stub via the client, a signature sent by server; verifying, at the stub, the signature and sending via the client a key that is encrypted; receiving at the client a response from the server on a condition that the server decrypted the key that was encrypted; computing, at the client, a hash on a token with the key and requesting a session token from the embedded stub; and sending, by the embedded stub, the session to the client and completing a mutual authentication process.