SYSTEM ACCESS USING A MOBILE DEVICE
FIG12 is a block diagram illustrating exemplary system elements, according to some embodiments
FIG12 is a block diagram illustrating an exemplary distributed system, according to some embodiments. In the illustrated embodiment, the system includes mobile device manufacturer backend 1230, key tracking server 1250, OEM business backend 1270, and other backend 1210. In the illustrated embodiment, ones of these backend systems communicate with owner device 130, system 110, friend device 160, and service device 1220.
block diagram
160
device
130
device
1250
KTS
1230
backend
1210
other backend
1270
backend
1220
service device
110
system
['1. An apparatus, comprising: one or more processing elements configured to: generate a first ephemeral key pair that includes a first public key and a first private key; determine a second public key generated by a system, wherein the second public key is included in a second ephemeral key pair; generate a first shared secret using a key exchange function that uses the first private key and the second public key as inputs; generate a derived shared secret using a key derivation function that uses at least the following inputs: the first shared secret, the first public key, and a public key of the system previously established during a paring session between the apparatus and the system; generate a signature by signing transaction information with a private key of the apparatus established during the pairing session; encrypt the signature and information identifying the apparatus based on the derived shared secret; verify a signed certificate received from the system using the public key of the system, wherein the certificate is signed with a corresponding private key of the system established during the pairing session; and in response to verification of the signed certificate, transmit the encrypted signature and information to the system.', '4. The apparatus of claim 1, wherein, to share access to one or more functions of the system with another device, the apparatus is configured to: receive a certificate signing request from the other device; verify the received certificate using a root certificate of a an authorized entity associated with the other device; authenticate a user of the apparatus; sign the certificate using the private key of the apparatus established during the pairing session with the system; and transmit the signed certificate to the other device.']