Rubicon Labs, Inc.

Broadcom Corporation

Alexander Usach

William Vincent Oxford

Roderick Schultz

Gerald E Woodcock, Iii

Stephen E Smith

Marcos Portnoi

David Albert Lundgren

Steven Malkos

Keith Mark Evans

Andrei Kosolobov

Manuel Del Castillo

Christopher Lane

Charles T Schad

Michael K Eneboe

Stuart W Juengst

Embodiments of systems and methods disclosed herein include an embedded secret provisioning system that is based on a shared-derivative mechanism. Embodiments of this mechanism use a trusted third-party topology, but only a single instance of a public-private key exchange is required for initialization. Embodiments of the system and methods are secure and any of the derived secret keys are completely renewable in untrusted environments without any reliance on asymmetric cryptography. The derived secrets exhibit zero knowledge attributes and the associated zero knowledge proofs are open and available for review. Embodiments of systems and methods can be implemented in a wide range of previously-deployed devices as well as integrated into a variety of new designs using minimal roots-of-trust.

Method and system for an efficient shared-derived secret provisioning mechanism

Embodiments as described herein provide systems and methods for sharing secrets between a device and another entity. The shared secret may be generated on the device as a derivative of a secret value contained on the device itself in a manner that will not expose the secret key on the device and may be sent to the entity. The shared secret may also be stored on the device such that it can be used in future secure operations on the device. In this manner, a device may be registered with an external service such that a variety of functionality may be securely accomplished, including, for example, the generation of authorization codes for the device by the external service based on the shared secret or the symmetric encryption of data between the external service and the device using the shared secret.

System and method for initializing a shared secret system

A GNSS enabled mobile device transmits to a location server a combination of GNSS-based location data and non-GNSS based location data used to determining reference positions at the location server. The GNSS mobile device receives the determined reference positions from the location server to calculate an associated GNSS position fix. The transmitted GNSS-based location data comprises GNSS position fixes associated with the GNSS enabled mobile device. The transmitted non-GNSS-based location data comprises a serving Cell-ID, neighbor Cell-IDs, neighbor cell fingerprinting, timing advance parameters, and/or a mobile country code. Reference positions associated with the serving Cell-ID are determined and/or refined based on location information acquired from each of associated mobile devices. To respond to a reference position request from the GNSS enabled mobile device without an associated serving Cell-ID, the location server determines corresponding reference positions by combing subscriber population density with an associated MCC.

Method and system for determining a position of a mobile communication device

Growing community of inventors

San Francisco, CA, United States of America

Alexander Usach