Filing Information

Inventor(s)	Naoaki Nii ·
Assignee(s)	Nokia Corporation ·  View assignee updates
Attorney/Agent(s)	Banner & Witcoff, Ltd. ·
Primary Examiner	Nasser Moazzami ·
Assistant Examiner	Brandon S Hoffman ·
Application Number	US9739797
Filing date	12/20/2000
Issue date	12/09/2008
Prior Publication Data	US20020076051 - 06/20/2002
Predicted expiration date	03/11/2023
Patent term adjustment	811
U.S. Classifications	380/232  · 705/65  ·
International Classifications	H04L900  · H04N7167  ·
Kind Code	B2

Patent Family

Abstract

A method of and a system for securely distributing data files to a user. A first key is encrypted using a second key. The encrypted first key is stored on an integrated circuit card that is associated with the user. The integrated circuit card is provided to the user. Data files are encrypted using the first key to get an encrypted data file at a first party. The encryption parameters are exchanged between the first party and integrated circuit card.

Independent Claims | See all claims (35)

1. 1. A method comprising: encrypting a first encryption key using a second encryption key, to provide an encrypted first encryption key; storing the encrypted first encryption key on a first integrated circuit card at a first computer; encrypting a data file using the first encryption key, to result in an encrypted data file; distributing the encrypted data file to a distribution terminal; placing the first integrated circuit card into communication with a first mobile terminal; downloading the encrypted data file from the distribution terminal to the first mobile terminal and storing the encrypted data file on the first mobile terminal; directly transferring the encrypted first encryption key from the first integrated circuit card to the first mobile terminal, wherein the encrypted first encryption key and the encrypted data file are transmitted over separate communication channels; decrypting the encrypted first encryption key in the first mobile terminal using an encryption key corresponding to the second encryption key; and decrypting the encrypted data file in the first mobile terminal using the first encryption key.
2. 11. A system comprising: a first integrated circuit card; a first computer configured to store an encrypted first encryption key on the first integrated circuit card, the encrypted first encryption key including a first encryption key encrypted using a second encryption key; a distribution terminal configured to receive an encrypted data file, wherein the encrypted data file is data file encrypted using the first encryption key; and a first mobile terminal configured to communicate with the first integrated circuit card, download the encrypted data file from the distribution terminal, store the encrypted data file, directly receive the encrypted first encryption key from the first integrated circuit card, wherein the encrypted first encryption key and the encrypted data file are transmitted over separate communication channels, decrypt the encrypted first encryption key using an encryption key corresponding to the second encryption key, and decrypt the encrypted data file using the first encryption key.
3. 17. A method comprising: establishing communication between an encryption source and a first mobile terminal; downloading an encrypted data file from a distribution source to the first mobile terminal and storing the encrypted data file on the first mobile terminal; directly receiving an encrypted first encryption key from the encryption source at the first mobile terminal, wherein the encrypted first encryption key and the encrypted data file are received into the first mobile terminal via separate communication channels; decrypting the encrypted first encryption key to obtain a first encryption key in the first mobile terminal using a second encryption key; and decrypting the encrypted data file to obtain a data file in the first mobile terminal using the first encryption key.
4. 28. Apparatus comprising: a memory; and a processor configured to perform a method comprising: establishing communication between an encryption source and the apparatus; downloading an encrypted data file from a distribution source to the apparatus and storing the encrypted data file on the apparatus; directly receiving an encrypted first encryption key from the encryption source at the apparatus, wherein the encrypted first encryption key and the encrypted data file are received into the apparatus via separate communication channels; decrypting the encrypted first encryption key to obtain a first encryption key in the apparatus using a second encryption key; and decrypting the encrypted data file to obtain a data file in the apparatus using the first encryption key.