The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 06, 2012

Filed:

Feb. 08, 2008
Applicants:

Salah E. Machani, Thornhill, CA;

Konstantin Teslenko, Richmond Hill, CA;

Inventors:

Salah E. Machani, Thornhill, CA;

Konstantin Teslenko, Richmond Hill, CA;

Assignee:

Diversinet Corp., Toronto, CA;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/00 (2006.01);
U.S. Cl.
CPC ...
Abstract

The invention comprises a method of authenticating and encrypting a client-server communication, comprising the steps of: a) generating a first one-time password (OTP) and a second one-time password (OTP) from a cryptographic token; b) generating an encryption key (K_ENC) and a MAC key (K_MAC) based on OTP; c) preparing and protecting the client data using K_ENC and K_MAC; d) sending a request message from the client to the server, the request message containing the protected client data, a cryptographic token identifier (TID) and OTP; e) validating OTPat the server, and generating OTPat the server upon successful validation; f) deriving K_ENC and K_MAC from OTPat the server; g) processing the request message and generating result data h) encrypting the result data using K_ENC and creating a digest using K_MAC; i) sending the encrypted result data to the client; and i) decrypting the result data at the client using K_ENC and verifying the authenticity of the result data using K_MAC.


Find Patent Forward Citations

Loading…