| 摘要 |
<p>A system for securing and authenticating wireless transactions. The method includes hard cooing a public key intoa non-reprogramable ROM (114) through a first path (130) of a wireless communication device (116). An object to be stored on the wireless device is first signed by a private or secret key (104), which corresponds to the public key (104), to create a certificate (120). The certificate (120) is then bound to the object and both are subsequently sent to the wireless device (116) though a second path (132), which is different from the first path (130). A certifiedprogram segment (119) is also stored on the wireless device and is executed upon the boot up process of the device. During the boot process of the device, the certified program segment (119) is authenticated , and if authentic, it is executed. During the execution of the authenticated certified program sequence (119), certificates of corresponding objects stored on the device are authenticated by the public key and cryptographic program segments stored in the non-reprogramable ROM.</p> |
