Automated security provisioning protocol for wide area network communication devices in open device environment

摘要

An automated security provisioning protocol is provided for wide area network communication devices in an open device environment, such as cellular communication devices in a machine-to-machine (M2M) environment. For example, a method for performing a security provisioning protocol between a first communication device and a second communication device over at least one wide area communication network comprises the following steps from the perspective of the first communication device. The first communication device automatically uses access information not previously provisioned in the wide area communication network to gain access to the wide area communication network for an initial purpose of communicating with the second communication device. The first communication device, upon gaining access to the wide area communication network, automatically performs an authenticated key exchange operation with the second communication device over the wide area communication network and establishes a secure communication key as a result of the authenticated key exchange operation for subsequent use by the first communication device for secure communications. The wide area communication network is operated by a first entity and the second communication device is operated by a second entity.

主权项

1. A method for performing a security provisioning protocol between a first communication device and a second communication device over at least one wide area communication network, the method at the first communication device comprising steps of:
the first communication device automatically using access information not previously provisioned in the wide area communication network to gain access to the wide area communication network for an initial purpose of communicating with the second communication device; and the first communication device, upon gaining access to the wide area communication network, automatically performing an authenticated key exchange operation with the second communication device over the wide area communication network and establishing a secure communication key as a result of the authenticated key exchange operation for subsequent use by the first communication device for secure communications; wherein the wide area communication network is operated by a first entity and the second communication device is operated by a different second entity; wherein the first entity is a cellular communication network operator and the second entity is a machine-to-machine (M2M) operator.