certificate-based key establishment (CBKE)

A key-establishment method based on public keys transported in signed certificates. The digital certificate binds the device identity with a public key and is signed by a certificate authority (CA). A CA public key is required to validate the device certificate.