公开(公告)号：US20210058785A1

公开(公告)日：2021-02-25

申请号：US16074389

申请日：2016-04-15

Applicant: Apple Inc.

Inventor： Farid Adrangi ,  Ravikumar Balakrishnan ,  Zongrui Ding ,  Mohammad Mamunur Rashid

IPC: H04W12/06 ,  H04W4/70 ,  H04L9/32 ,  H04L9/14 ,  H04L9/08 ,  H04L29/06 ,  H04W12/04 ,  H04W8/18 ,  H04W12/00

Abstract: Non-pre-provisioned cellular Internet of things (IoT) devices can be added to an existing user's subscription with an operator and a service provider. The procedure can include obtaining a security association between a device and a user's smartphone using the operator's network. The operator and the service provider can verify the device with a certificate authority. In one embodiment, the smartphone reads (302) a URL pointer to the device certification and sends it (304) to the MME. The MME forwards (306) the URL to the HSS. The HSS verifies (312) the certificate and derives security credentials including the Master key K′. The HSS also derives another key K″ used to establish security context between the IoT device and the smartphone. The device uses its key deriving function KDF with K′ and Rand to generate K″.

公开(公告)号：US11026086B2

公开(公告)日：2021-06-01

申请号：US16074389

申请日：2016-04-15

Applicant: Apple Inc.

Inventor： Farid Adrangi ,  Ravikumar Balakrishnan ,  Zongrui Ding ,  Mohammad Mamunur Rashid

IPC: H04W12/06 ,  H04W12/069 ,  H04W4/70 ,  H04L9/32 ,  H04L9/14 ,  H04L9/08 ,  H04L29/06 ,  H04W8/18 ,  H04W12/041 ,  H04W12/71

Abstract: Non-pre-provisioned cellular Internet of things (IoT) devices can be added to an existing user's subscription with an operator and a service provider. The procedure can include obtaining a security association between a device and a user's smartphone using the operator's network. The operator and the service provider can verify the device with a certificate authority. In one embodiment, the smartphone reads (302) a URL pointer to the device certification and sends it (304) to the MME. The MME forwards (306) the URL to the HSS. The HSS verifies (312) the certificate and derives security credentials including the Master key K′. The HSS also derives another key K″ used to establish security context between the IoT device and the smartphone. The device uses its key deriving function KDF with K′ and Rand to generate K″.