Method For Provisioning Security Credentials In User Equipment For Restrictive Binding

摘要

A binding verification scheme based on a proof of possession of the device-specific secret key associated with the reported IMEI is provided. The IMEI reported by user equipment (UE) is checked to make sure that it matches the IMEI configured into the UE by the manufacturer and has therefore not been modified by an attacker.

主权项

1. A method for provisioning security credentials in user equipment at a communication network, the method comprising:
receiving a request from user equipment (UE) for access to a communication network, wherein the request includes the IMSI (International Mobile Subscriber Identity) of the UE; receiving proof that a device-specific key exists in the device; and if the device-specific key matches the network device key, allowing the UE to utilize a subscription of the communication network.