>These three fields would be concatenated into a token. The token would be sent to Apple server (albert.apple.com) where it would be signed with Apple's private

>These three fields would be concatenated into a token. The token would be sent to Apple server (albert.apple.com) where it would be signed with Apple's private key. The signed token would then be sent back to the device. A daemon lockdownd, listening over USB verified the token using Apple's public key. With the proof that the token came from Apple, and matching DeviceID, IMEI, and ICCID, lockdownd updated the device state to "Activated". The user then had access to the iPhone homescreen and the apps. Sounds like the pre-cursor to oAuth now days.