WO2003047161A1 - Method for registering and enabling pki functionalities - Google Patents

Method for registering and enabling pki functionalities Download PDF

Info

Publication number
WO2003047161A1
WO2003047161A1 PCT/NO2002/000446 NO0200446W WO03047161A1 WO 2003047161 A1 WO2003047161 A1 WO 2003047161A1 NO 0200446 W NO0200446 W NO 0200446W WO 03047161 A1 WO03047161 A1 WO 03047161A1
Authority
WO
WIPO (PCT)
Prior art keywords
pki
code
smart card
user
activation
Prior art date
Application number
PCT/NO2002/000446
Other languages
French (fr)
Inventor
Leif Sandberg
Original Assignee
Telenor Asa
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Telenor Asa filed Critical Telenor Asa
Priority to EP02803937A priority Critical patent/EP1457000A1/en
Priority to AU2002365333A priority patent/AU2002365333B2/en
Priority to CA002468622A priority patent/CA2468622A1/en
Priority to KR1020047008098A priority patent/KR100968662B1/en
Priority to US10/496,919 priority patent/US7690027B2/en
Priority to JP2003548457A priority patent/JP2005510951A/en
Priority to HU0500688A priority patent/HUP0500688A2/en
Priority to BR0214467-0A priority patent/BR0214467A/en
Publication of WO2003047161A1 publication Critical patent/WO2003047161A1/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/006—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols involving public key infrastructure [PKI] trust models
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/30—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3234—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash

Definitions

  • the present invention is related to PKI (Public Key Infrastructure) , particularly to registering and activation of 5 PKI (Public Key Infrastructure) functionalities in SIM (Subscriber Identity Module) cards.
  • PKI Public Key Infrastructure
  • SIM Subscriber Identity Module
  • PKI has been developed as the primary platform for global commerce and communications. PKI insures that sensitive electronic communications are private 5 and protected from tampering. PKI is used for digital signatures, authentication and encryption.
  • PKI is based on the use of cryptography, which means scrambling of information by a mathematical formula and a virtual key, so that only an authorized party using a related o key can decode it.
  • a PKI uses pairs of cryptographic keys provided by a trusted third party known as a Certification Authority (CA) .
  • CA Certification Authority
  • a CA Central to the workings of a PKI, a CA issues digital certificates that identify the holder's identity.
  • a CA maintains accessible directories of valid cer- 5 tificates, and a list of certificates it has revoked.
  • the present invention provides a method of a Public Key Infrastructure (PKI) for registering a user of the PKI and enabling a PKI part of a Smart Card of the user by preprinting a number of sealed envelopes each con- taining an activation code hidden when unopened and a reference number or code visibly printed on the envelope.
  • the reference number or code and the associated activation code of each envelope are stored in a table in a security server being integrated in or connected to the PKI.
  • the user is provided one of the sealed envelopes together with an application form.
  • the user is requested to fill in the reference code or number on the application form together with personal data, and this is transferred to the PKI and the security server.
  • the activation code associated with the reference code or number in the table and a Smart Card identity corresponding to the Smart Card of the user are provided to an Activation Module in the PKI.
  • the activation code together with the Smart Card identity is transmitted from the terminal to the Activation Module.
  • the Activation Module determines if the received activation code and Smart Card identity match those previously provided by the security server, and if so, the Activation Module executes the necessary procedure for enabling the PKI part of the Smart Card.
  • the present invention will now be described by an example embodiment where a user is about to order a SIM card with PKI functionality to his GSM phone.
  • the user has to show up in person in authorized offices, like a post office, a bank or at the telephone operator, to which the user is subscribed.
  • the user At the authorized office, the user will receive a preprinted sealed envelope together with an application form he is asked to fill in.
  • a reference number printed on a noticeable place thereon identifies the envelope.
  • the form and the sealed envelope that the user receive at the office is uniquely associated with each other in that the mentioned reference number also is printed on the form, or is one of the data the user is asked to fill in.
  • an officer After filling the form, an officer will check if the given personalia matches those on an identity card the user has to produce and that the reference number corresponds to the one printed on the envelope. If the personalia and the num- ber are OK, the form is forwarded to further execution, and the user will be asked to keep the envelope unsealed until he has received his new SIM card.
  • the sealed envelope contains an activation code that is invisible when the envelope is unopened.
  • Data concerning all the preprinted envelopes are stored, e.g., in a table within a security server connected to or integrated in the PKI.
  • For each envelope at least the corresponding reference number, activation code and a status are stored so that once the security server knows the reference number or code of an application form, it also knows the activation code that is given to the user in the envelope together with the application form, and in which stage of execution the application presently is.
  • the status may be one of the following: unused, under consideration, approved, but not activated, activated, not approved. Initially, the status is set to "unused" .
  • the form data is read, pref- erably electronically, and transferred to the security server. Simultaneously, the status of the envelope stored in the table is changed from "unused" to "under consideration".
  • the form data which in this example should be considered as an application for a PKI SIM card, is executed by a PKI server under control of a CA in a way according to the state of the art, which should be known to a person skilled in the art. Additionally, the status of the envelope will be changed in the security server according to the result of the execution. If the application is refused, the corresponding status is changed to "not approved”. In contrast, if the application is approved, the corresponding status is naturally changed to "approved”.
  • the result of the execution of the application will then be sent to the user in a message via a communication network, preferably carried by SMS or similar, and alternatively by e-mail or mail.
  • a new SIM card may be sent to the user, but it is not necessary to use registered mail because the user will be able to prove his identity by using the activation code hidden in the envelope.
  • the security server will provide an Activation Module with the activation code associated with the reference number or code together with necessary identity information regarding the corresponding SIM card.
  • a message representing a positive result will, e.g., read as follows: "Your application has been approved, please open the sealed envelope and use the activation code inside on your SIM card”.
  • a "SIM PKI menu” must be enabled.
  • the user enters the activation code in his handset to enroll to the service.
  • the activation code is sent by SMS to the PKI together with the SIM card identity. The user may have 3 attempts to enter this code correctly.
  • the Activation Module fetches the activation code and the SIM card identity and verifies if it matches the activation code and the SIM card identity that already have been pro- vided from the security server. The Activation Module then transmits a "Generate PKI keys enabling command" back to the SIM, and the key generation application in the SIM will generate a key pair comprising one private key and one verification public key.
  • the verification public key (VPuK) is transmitted by SMS to the Activation Module, and the SMS is preferably encrypted according to GSM 03.48 for protection of sensitive information .
  • PIN_SIGNKEY is a personal self-chosen signing PIN used for, e.g., transaction signing and authentication.
  • the Activation Module connects to the CA to issue a valid certificate with the public key associated with the user. This certificate is at the same time sent to a certification directory.
  • a confirmation of successful certification is sent back to the user and the PKI menu will then be disabled in the SIM. Consequently, the PKI functions in the SIM card are enabled.
  • the present invention provides a method for registering and activation of PKI (Public Key Infrastructure) functionalities making it unnecessary for a user to show up in person at an authorized office more than once. Sending of items and data associated with the PKI functionalities after the first identity confirmation will not be necessary, as the user will be in possession of the activation code before his identity is assigned to the activation code, inter alia, in the RA. This guarantees that the right person is in possession of the right activation code already at the time of the first personal appearance.
  • PKI Public Key Infrastructure
  • the present invention allows for less effort in providing PKI functionalities. From an issuer's point of view, the present invention will most likely increase the number of PKI users. In addition, the costs per registration will decrease as the execution time will decrease and the need of registered mail will be eliminated.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephonic Communication Services (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Telephone Function (AREA)
  • Organic Low-Molecular-Weight Compounds And Preparation Thereof (AREA)
  • Pharmaceuticals Containing Other Organic And Inorganic Compounds (AREA)
  • Plural Heterocyclic Compounds (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Storage Device Security (AREA)

Abstract

The present invention discloses a method of registering and activation of PKI functionalities in SIM (Subscriber Identity Module) cards by preprinting a number of sealed envelopes each containing an activation code hidden when unopened and a reference number or code visibly printed on the envelope. The reference number or code and the associated activation code of each envelope are stored in a table in a security server being integrated in or connected to the PKI. The user is provided one of the sealed envelopes together with an application form. The user is requested to fill in the reference code or number on the application form together with personal data, and this is transferred to the PKI and the security server. When the registration is approved by the PKI, approval information is transmitted to the user, requesting him to enter the activation code in his terminal. Simultaneously, the activation code associated with the reference code or number in the table and a Smart Card identity corresponding to the Smart Card of the user, are provided to an Activation Module in the PKI. Upon entering of the activation code in the terminal, the activation code together with the Smart Card identity is transmitted from the terminal to the Activation Module. Upon receipt of the activation code and the Smart Card identity, the Activation Module determines if the received activation code and Smart Card identity match those previously provided by the security server, and if so, the Activation Module executes the necessary procedure for enabling the PKI part of the Smart Card.

Description

METHOD FOR REGISTERING AND ENABLING PKI FUNCTIONALITIES
Field of the invention
The present invention is related to PKI (Public Key Infrastructure) , particularly to registering and activation of 5 PKI (Public Key Infrastructure) functionalities in SIM (Subscriber Identity Module) cards.
Background of the invention
To realize the full potential of communication networks, there has to exist a standardized system so that the users 0 can engage in electronic transactions with the same degree of trust as associated with paper-based transactions.
For this reason, PKI has been developed as the primary platform for global commerce and communications. PKI insures that sensitive electronic communications are private 5 and protected from tampering. PKI is used for digital signatures, authentication and encryption.
PKI is based on the use of cryptography, which means scrambling of information by a mathematical formula and a virtual key, so that only an authorized party using a related o key can decode it. A PKI uses pairs of cryptographic keys provided by a trusted third party known as a Certification Authority (CA) . Central to the workings of a PKI, a CA issues digital certificates that identify the holder's identity. A CA maintains accessible directories of valid cer- 5 tificates, and a list of certificates it has revoked.
Traditionally, PKI functionalities have been used by data terminals with the certificate and keys stored in an external Smart Card. However, as cellular phones merge to data terminals, there will be a need for PKI functions also in o the phones. The certificate and keys will then normally be stored in the subscriber card, e.g. in the SIM (Subscriber Identity Module) card as for GSM phones.
For the PKI system to be trusted, there has to exist a secure routine when registering new users by issuing digital certificates. One has to be 100% sure that the one requesting digital certificates is who he or she claims to be. This is normally done in that the user in person shows up at an office, e.g. at a post office, fills in a form and identifies himself by a trusted identification like a pass- port. When the counter clerk at the post office has verified the identification information, the data form is transmitted electronically to a CA. The CA controls and whitewashes the data and issues a PKI card, either in the form of a SIM card or a Smart Card, together with an acti- vation code. The PKI card and the activation code are now sent by registered mail to the user. Again, the user personally has to appear in the post office and identify himself by, e.g., his passport, for being allowed to receive the mail.
This two-time appearance at an office has turned out to be a problem for the spreading of PKI, simply because people seem to have a resistance against making use of new technology with high entrance thresholds meaning that great initial efforts have to be made. Also, the process is natu- rally time consuming, and at least one week will lapse from the certificate is ordered to the user has got access to PKI functions.
From the issuer of digital certificates point of view, the costs of the issuing process are relatively high, espe- cially because of the execution and sending of the registered mail.
Thus, there is a need for simplifying the issuing process for the benefit for both the issuer and the user. Summary of the invention
It is an object of the present invention to provide a method that eliminates the drawbacks described above. The features defined in the claims enclosed characterize this method.
More specifically, the present invention provides a method of a Public Key Infrastructure (PKI) for registering a user of the PKI and enabling a PKI part of a Smart Card of the user by preprinting a number of sealed envelopes each con- taining an activation code hidden when unopened and a reference number or code visibly printed on the envelope. The reference number or code and the associated activation code of each envelope are stored in a table in a security server being integrated in or connected to the PKI. The user is provided one of the sealed envelopes together with an application form. The user is requested to fill in the reference code or number on the application form together with personal data, and this is transferred to the PKI and the security server.
When the registration is approved by the PKI, approval information is transmitted to the user, requesting him to enter the activation code in his terminal. Simultaneously, the activation code associated with the reference code or number in the table and a Smart Card identity corresponding to the Smart Card of the user, are provided to an Activation Module in the PKI. Upon entering of the activation code in the terminal, the activation code together with the Smart Card identity is transmitted from the terminal to the Activation Module. Upon receipt of the activation code and the Smart Card identity, the Activation Module determines if the received activation code and Smart Card identity match those previously provided by the security server, and if so, the Activation Module executes the necessary procedure for enabling the PKI part of the Smart Card. Detailed description of an example embodiment
The present invention will now be described by an example embodiment where a user is about to order a SIM card with PKI functionality to his GSM phone.
As before, the user has to show up in person in authorized offices, like a post office, a bank or at the telephone operator, to which the user is subscribed.
At the authorized office, the user will receive a preprinted sealed envelope together with an application form he is asked to fill in. A reference number printed on a noticeable place thereon identifies the envelope. The form and the sealed envelope that the user receive at the office is uniquely associated with each other in that the mentioned reference number also is printed on the form, or is one of the data the user is asked to fill in.
After filling the form, an officer will check if the given personalia matches those on an identity card the user has to produce and that the reference number corresponds to the one printed on the envelope. If the personalia and the num- ber are OK, the form is forwarded to further execution, and the user will be asked to keep the envelope unsealed until he has received his new SIM card.
The sealed envelope contains an activation code that is invisible when the envelope is unopened. Data concerning all the preprinted envelopes are stored, e.g., in a table within a security server connected to or integrated in the PKI. For each envelope, at least the corresponding reference number, activation code and a status are stored so that once the security server knows the reference number or code of an application form, it also knows the activation code that is given to the user in the envelope together with the application form, and in which stage of execution the application presently is. The status may be one of the following: unused, under consideration, approved, but not activated, activated, not approved. Initially, the status is set to "unused" .
Turning to the user example, the form data is read, pref- erably electronically, and transferred to the security server. Simultaneously, the status of the envelope stored in the table is changed from "unused" to "under consideration". The form data, which in this example should be considered as an application for a PKI SIM card, is executed by a PKI server under control of a CA in a way according to the state of the art, which should be known to a person skilled in the art. Additionally, the status of the envelope will be changed in the security server according to the result of the execution. If the application is refused, the corresponding status is changed to "not approved". In contrast, if the application is approved, the corresponding status is naturally changed to "approved".
The result of the execution of the application will then be sent to the user in a message via a communication network, preferably carried by SMS or similar, and alternatively by e-mail or mail. A new SIM card may be sent to the user, but it is not necessary to use registered mail because the user will be able to prove his identity by using the activation code hidden in the envelope. Alternatively, if the user al- ready has a SIM card with PKI functionality installed, but till now not accessible, no new SIM card will be necessary to issue. Simultaneously, the security server will provide an Activation Module with the activation code associated with the reference number or code together with necessary identity information regarding the corresponding SIM card.
A message representing a positive result will, e.g., read as follows: "Your application has been approved, please open the sealed envelope and use the activation code inside on your SIM card". However, before the user may enter the activation code, a "SIM PKI menu" must be enabled. When the "SIM PKI menu" is enabled, the user enters the activation code in his handset to enroll to the service. The activation code is sent by SMS to the PKI together with the SIM card identity. The user may have 3 attempts to enter this code correctly.
The Activation Module fetches the activation code and the SIM card identity and verifies if it matches the activation code and the SIM card identity that already have been pro- vided from the security server. The Activation Module then transmits a "Generate PKI keys enabling command" back to the SIM, and the key generation application in the SIM will generate a key pair comprising one private key and one verification public key.
The verification public key (VPuK) is transmitted by SMS to the Activation Module, and the SMS is preferably encrypted according to GSM 03.48 for protection of sensitive information .
The user is then requested to choose a PIN_SIGNKEY, which is a personal self-chosen signing PIN used for, e.g., transaction signing and authentication.
In the case of successful verification, the Activation Module connects to the CA to issue a valid certificate with the public key associated with the user. This certificate is at the same time sent to a certification directory.
A confirmation of successful certification is sent back to the user and the PKI menu will then be disabled in the SIM. Consequently, the PKI functions in the SIM card are enabled.
The present invention provides a method for registering and activation of PKI (Public Key Infrastructure) functionalities making it unnecessary for a user to show up in person at an authorized office more than once. Sending of items and data associated with the PKI functionalities after the first identity confirmation will not be necessary, as the user will be in possession of the activation code before his identity is assigned to the activation code, inter alia, in the RA. This guarantees that the right person is in possession of the right activation code already at the time of the first personal appearance.
From a user's point of view, the present invention allows for less effort in providing PKI functionalities. From an issuer's point of view, the present invention will most likely increase the number of PKI users. In addition, the costs per registration will decrease as the execution time will decrease and the need of registered mail will be eliminated.

Claims

P a t e n t c l a i m s
1. Method of a Public Key Infrastructure (PKI) for registering a user of the PKI and enabling a PKI part of a Smart Card of the user, said Smart Card associated with a termi- 5 nal, said terminal connected to a communication network providing access to the PKI, for the purpose of registering, the user is requested to fill personal data in an application form and to identify himself by a valid identity card, the data is verified against the identity card and o electronically transferred to the PKI for approval of the registering, c h a r a c t e r i z e d i n the following steps:
a) preprinting a number of sealed envelopes each containing an activation code hidden when unopened s and a reference number or code visibly printed on the envelope, the reference number or code and the associated activation code of each envelope are stored in a table in a security server being integrated in or connected to the PKI,
o b) providing one of the sealed envelopes to the user together with the application form on which the reference number or code possibly may be preprinted,
c) requesting the user to fill the reference code or 5 number on the application form if the reference number is not already preprinted thereon,
d) transferring the reference code or number together with said personal data to the PKI and the security server,
0 e) when the registering is approved by the PKI, transmitting approval information to the user requesting him to enter the activation code in his terminal and providing the activation code associated with the reference code or number in the table and a Smart Card identity corresponding to the Smart Card of the user to an Activation Module in the PKI,
f) upon entering of the activation code, transmitting the activation code from the terminal to the Activation Module together with the Smart Card identity, and upon receiving the activation code and the Smart Card identity:
g) determining if the received activation code and Smart Card identity match those previously provided by the security server, and if so, enabling the PKI part of the Smart Card.
2. Method as defined in claim 1, c h a r a c t e r i z e d i n that said communication network is a GSM or 3G network, said terminal is a GSM or 3G mobile telephone, and said Smart Card is a SIM card.
3. Method as defined in claim 2, c h a r a c t e r i z e d i n that said Smart Card identity is an MSISDN and ICCID.
4. Method as defined in any of the preceding claims, c h a r a c t e r i z e d i n that said PKI functions are stored in said Smart Card, but hidden for the user un- til enabling.
5. Method as defined in any of the preceding claims, c h a r a c t e r i z e d i n that the approval information is transmitted via SMS, e-mail or mail.
6. Method as defined in any of the preceding claims, c h a r a c t e r i z e d i n that for each of the sealed envelopes, a status is stored in the table together with the reference number or code and the activation code.
7. Method as defined in claim 6, c h a r a c t e r i z e d i n that the status initially is set to "unused" and changed to "under consideration" during step d) , "approved but not activated" in the case of approval during step e) , "not approved" in the case of non- approval during step e) , and "activated" in the case of a match in step g) .
PCT/NO2002/000446 2001-11-28 2002-11-26 Method for registering and enabling pki functionalities WO2003047161A1 (en)

Priority Applications (8)

Application Number Priority Date Filing Date Title
EP02803937A EP1457000A1 (en) 2001-11-28 2002-11-26 Method for registering and enabling pki functionalities
AU2002365333A AU2002365333B2 (en) 2001-11-28 2002-11-26 Method for registering and enabling PKI functionalities
CA002468622A CA2468622A1 (en) 2001-11-28 2002-11-26 Method for registering and enabling pki functionalities
KR1020047008098A KR100968662B1 (en) 2001-11-28 2002-11-26 Method for registering and enabling pki functionalities
US10/496,919 US7690027B2 (en) 2001-11-28 2002-11-26 Method for registering and enabling PKI functionalities
JP2003548457A JP2005510951A (en) 2001-11-28 2002-11-26 How to register and activate the PKI function
HU0500688A HUP0500688A2 (en) 2001-11-28 2002-11-26 Method for registering and enabling pki functionalities
BR0214467-0A BR0214467A (en) 2001-11-28 2002-11-26 Method to register and enable pki functionality

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
NO20015812 2001-11-28
NO20015812A NO314379B1 (en) 2001-11-28 2001-11-28 Registration and activation of electronic certificates

Publications (1)

Publication Number Publication Date
WO2003047161A1 true WO2003047161A1 (en) 2003-06-05

Family

ID=19913074

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/NO2002/000446 WO2003047161A1 (en) 2001-11-28 2002-11-26 Method for registering and enabling pki functionalities

Country Status (12)

Country Link
US (1) US7690027B2 (en)
EP (1) EP1457000A1 (en)
JP (1) JP2005510951A (en)
KR (1) KR100968662B1 (en)
CN (1) CN100477579C (en)
AU (1) AU2002365333B2 (en)
BR (1) BR0214467A (en)
CA (1) CA2468622A1 (en)
HU (1) HUP0500688A2 (en)
NO (1) NO314379B1 (en)
RU (1) RU2323530C2 (en)
WO (1) WO2003047161A1 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1826713A1 (en) * 2006-02-27 2007-08-29 Northrop Grumman Corporation Method and system for efficient exception handling of the production process of personal identification verification (PIV) smartcards
CN100347986C (en) * 2003-11-24 2007-11-07 华中科技大学 Method and system for certification

Families Citing this family (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TW595195B (en) * 2003-04-04 2004-06-21 Benq Corp Network lock method and related apparatus by ciphered network lock and inerasable deciphering key
CN100401849C (en) * 2005-11-04 2008-07-09 中国移动通信集团公司 Bidirection control method for preventing fraudulent use of client end software
US7945959B2 (en) * 2007-06-18 2011-05-17 International Business Machines Corporation Secure physical distribution of a security token through a mobile telephony provider's infrastructure
FR2926938B1 (en) * 2008-01-28 2010-03-19 Paycool Dev METHOD OF AUTHENTICATING AND SIGNING A USER TO AN APPLICATION SERVICE USING A MOBILE PHONE AS A SECOND FACTOR IN COMPLEMENT AND INDEPENDENTLY OF A FIRST FACTOR
US8391452B2 (en) * 2009-04-30 2013-03-05 Microsoft Corporation User-based authentication for realtime communications
US8782391B2 (en) * 2009-06-10 2014-07-15 Visa International Service Association Service activation using algorithmically defined key
CN101945099B (en) * 2010-07-27 2013-11-06 公安部第三研究所 Smart card external authentication method
EP2424205B1 (en) * 2010-08-26 2019-03-13 Unify GmbH & Co. KG Method and system for automatic transfer of status information
RU2452111C1 (en) * 2010-11-17 2012-05-27 ЗАО Институт инфокоммуникационных технологий Method for threshold key generating for protection system based on identity data
EP2461613A1 (en) * 2010-12-06 2012-06-06 Gemalto SA Methods and system for handling UICC data
US8607050B2 (en) 2012-04-30 2013-12-10 Oracle International Corporation Method and system for activation
US8744078B2 (en) 2012-06-05 2014-06-03 Secure Channels Sa System and method for securing multiple data segments having different lengths using pattern keys having multiple different strengths
RU2562913C2 (en) * 2013-03-29 2015-09-10 Виталий Олегович Клебан System for monitoring mobile personnel
FR3043228B1 (en) 2015-11-03 2018-03-30 Proton World International N.V. STARTING THE CONTROL OF AN ELECTRONIC CIRCUIT
FR3043229B1 (en) * 2015-11-03 2018-03-30 Proton World International N.V. SECURE STARTING OF AN ELECTRONIC CIRCUIT
RU2649295C2 (en) * 2015-12-31 2018-03-30 Акционерное общество "Национальная система платежных карт" Method of customer verification
CN105915343B (en) * 2016-04-08 2019-07-23 金蝶软件（中国）有限公司 A kind of offline Activiation method of registration user and system
CN109361697B (en) * 2018-11-29 2020-12-25 深圳市安信认证系统有限公司 Method for realizing credible identity authentication based on SIM card loading PKI
KR102607207B1 (en) * 2019-02-14 2023-11-29 삼성전자주식회사 Method and apparatus for secondary platform bundle download using activation code
FR3111441B1 (en) 2020-06-10 2022-08-05 Proton World Int Nv Secure start of an electronic circuit

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6061791A (en) * 1997-05-09 2000-05-09 Connotech Experts-Conseils Inc. Initial secret key establishment including facilities for verification of identity
EP1162781A2 (en) * 2000-06-09 2001-12-12 TRW Inc. System and method for generation of a signature certificate in a public key infrastructure
EP1185027A2 (en) * 2000-08-30 2002-03-06 Hitachi, Ltd. Certificate validity authentication method and apparatus
WO2002060210A1 (en) * 2001-01-24 2002-08-01 Telenor Asa Method for enabling pki functions in a smart card

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH04264864A (en) * 1991-02-19 1992-09-21 Nippon Telegr & Teleph Corp <Ntt> Personal communication transmitting signal authentication system
JPH0787081A (en) * 1993-09-16 1995-03-31 Nippon Telegr & Teleph Corp <Ntt> Entity registration method to key publicity center
US5604803A (en) * 1994-06-03 1997-02-18 Sun Microsystems, Inc. Method and apparatus for secure remote authentication in a public network
FR2763773B1 (en) * 1997-05-20 1999-08-06 Gemplus Card Int REMOTE UNLOCKING OF ACCESS TO A TELECOMMUNICATION SERVICE
FI105637B (en) * 1997-07-02 2000-09-15 Sonera Oyj A method for managing applications stored on a subscriber identity module
US6370380B1 (en) * 1999-02-17 2002-04-09 Telefonaktiebolaget Lm Ericsson (Publ) Method for secure handover
US6988199B2 (en) * 2000-07-07 2006-01-17 Message Secure Secure and reliable document delivery
JP3696445B2 (en) * 1999-08-25 2005-09-21 日本電信電話株式会社 Public key certificate issuance method, user terminal, authentication center apparatus, and medium storing these programs
US7020778B1 (en) * 2000-01-21 2006-03-28 Sonera Smarttrust Oy Method for issuing an electronic identity
JP2001209616A (en) * 2000-01-28 2001-08-03 Nippon Seigyo Kk Password system, electronic terminal equipment and password generator
NO314530B1 (en) * 2000-02-25 2003-03-31 Ericsson Telefon Ab L M Wireless reservation, check-in, access control, check-out and payment
US6961858B2 (en) * 2000-06-16 2005-11-01 Entriq, Inc. Method and system to secure content for distribution via a network
US6957199B1 (en) * 2000-08-30 2005-10-18 Douglas Fisher Method, system and service for conducting authenticated business transactions
DE10118267A1 (en) * 2001-04-12 2002-10-24 Bosch Gmbh Robert Method for authorizing a user accessing a software based system using an unsecured access medium has a two stage encryption process that ensures users are authorized before the system can be accessed
US7570943B2 (en) * 2002-08-29 2009-08-04 Nokia Corporation System and method for providing context sensitive recommendations to digital services

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6061791A (en) * 1997-05-09 2000-05-09 Connotech Experts-Conseils Inc. Initial secret key establishment including facilities for verification of identity
EP1162781A2 (en) * 2000-06-09 2001-12-12 TRW Inc. System and method for generation of a signature certificate in a public key infrastructure
EP1185027A2 (en) * 2000-08-30 2002-03-06 Hitachi, Ltd. Certificate validity authentication method and apparatus
WO2002060210A1 (en) * 2001-01-24 2002-08-01 Telenor Asa Method for enabling pki functions in a smart card

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100347986C (en) * 2003-11-24 2007-11-07 华中科技大学 Method and system for certification
EP1826713A1 (en) * 2006-02-27 2007-08-29 Northrop Grumman Corporation Method and system for efficient exception handling of the production process of personal identification verification (PIV) smartcards

Also Published As

Publication number Publication date
HUP0500688A2 (en) 2005-11-28
CA2468622A1 (en) 2003-06-05
NO20015812D0 (en) 2001-11-28
NO20015812A (en) 2003-03-10
EP1457000A1 (en) 2004-09-15
CN100477579C (en) 2009-04-08
BR0214467A (en) 2004-10-13
US7690027B2 (en) 2010-03-30
RU2004118413A (en) 2006-01-10
NO314379B1 (en) 2003-03-10
US20050086496A1 (en) 2005-04-21
KR100968662B1 (en) 2010-07-06
KR20040075321A (en) 2004-08-27
JP2005510951A (en) 2005-04-21
CN1618199A (en) 2005-05-18
AU2002365333B2 (en) 2008-10-16
RU2323530C2 (en) 2008-04-27
AU2002365333A1 (en) 2003-06-10

Similar Documents

Publication Publication Date Title
AU2002365333B2 (en) Method for registering and enabling PKI functionalities
EP1371255B1 (en) Method for enabling pki functions in a smart card
EP1807966B1 (en) Authentication method
US7362869B2 (en) Method of distributing a public key
US7020778B1 (en) Method for issuing an electronic identity
US7793102B2 (en) Method for authentication between a portable telecommunication object and a public access terminal
AU2002230306A1 (en) Method for enabling PKI functions in a smart card
EP1615097B1 (en) Dual-path-pre-approval authentication method
US20060262929A1 (en) Method and system for identifying the identity of a user
US8302175B2 (en) Method and system for electronic reauthentication of a communication party
US7865719B2 (en) Method for establishing the authenticity of the identity of a service user and device for carrying out the method
CN112565294B (en) Identity authentication method based on block chain electronic signature
US8601270B2 (en) Method for the preparation of a chip card for electronic signature services
WO2001027886A1 (en) Distribution of certifiers

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ OM PH PL PT RO RU SC SD SE SG SI SK SL TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR IE IT LU MC NL PT SE SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
WWE Wipo information: entry into national phase

Ref document number: 2468622

Country of ref document: CA

Ref document number: 1020047008098

Country of ref document: KR

WWE Wipo information: entry into national phase

Ref document number: 2003548457

Country of ref document: JP

WWE Wipo information: entry into national phase

Ref document number: 2002365333

Country of ref document: AU

WWE Wipo information: entry into national phase

Ref document number: 2002803937

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 20028276442

Country of ref document: CN

WWP Wipo information: published in national office

Ref document number: 2002803937

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 10496919

Country of ref document: US