The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Nov. 24, 2015

Filed:

Mar. 05, 2012
Applicants:

Salah E. Machani, Thornhill, CA;

Konstantin Teslenko, Richmond Hill, CA;

Inventors:

Salah E. Machani, Thornhill, CA;

Konstantin Teslenko, Richmond Hill, CA;

Assignee:

IMS HEALTH INCORPORATED, Danbury, CT (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/32 (2006.01); H04L 9/08 (2006.01); G06Q 20/38 (2012.01); G06Q 20/40 (2012.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
H04L 9/0863 (2013.01); G06Q 20/3829 (2013.01); G06Q 20/401 (2013.01); H04L 9/3228 (2013.01); H04L 9/3234 (2013.01); H04L 9/3242 (2013.01); H04L 63/0435 (2013.01); H04L 63/061 (2013.01); H04L 63/0838 (2013.01); H04L 2209/56 (2013.01);
Abstract

A method of authenticating and encrypting a client-server communication is provided. Two one-time passwords (OTPand OTP) are generated from a cryptographic token. An encryption key (K_ENC) and a MAC key (K_MAC) are generated based on OTP. The client data are prepared and protected using K_ENC and K_MAC. A request message is sent from the client to the server, and contains the protected client data, a cryptographic token identifier and OTP. OTPis validated at the server, and OTPis generated at the server upon successful validation. K_ENC and K_MAC are derived from OTPat the server. The request message is processed and result data is generated. The result data is encrypted using K_ENC and a digest is created using K_MAC. The encrypted result data is sent to the client, and is decrypted using K_ENC and the authenticity of the result data is verified using K_MAC.


Find Patent Forward Citations

Loading…