| CPC H04L 9/083 (2013.01) [H04L 9/0866 (2013.01); H04L 9/321 (2013.01)] | 14 Claims |

|
1. A method of provisioning user key material from a server to a client, comprising:
(a) receiving a request for user key material that contains (i) an access token to authenticate the client and (ii) an identifier of a transport key (TrK-ID) from the client by the server;
(b) authenticating the request for the user key material based upon the access token;
(c) generating a response for the provisioning of user key material responsive to the request for the user key material;
(d) encrypting the response for the provisioning of the user key material based upon a transport key (TrK) identified by the identifier of the transport key (TrK-ID);
(e) provisioning of user key material comprising the encrypted response from the server to the client further comprising the identifier of the transport key (TrK-ID);
(f) wherein the provisioning of user key material is configured to be decrypted according to the transport key (TrK) to recover a decrypted identifier of the transport key (TrK-ID) and validated using the decrypted identifier of the transport key (TrK-ID).
|