Patent ID: 11900368
Assignee: VIJAY MADISETTI
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 4:
5. The method of claim 3, wherein performing the bidirectional authentication procedure comprises:
receiving at the verifier server a zero-knowledge session initiation request from the client application, the zero-knowledge session initiation request comprising a user ID and a client ID;
generating a random number;
generating a sequence number responsive to the zero-knowledge session initiation request;
computing a first authentication output using a function that uses the user ID and the random number as inputs;
generating a response using a function that uses the first authentication output as an input, defining a local response;
computing an anonymity key using a function that uses the first authentication output as an input;
computing a message authentication code using a function that uses the first authentication output, the sequence number, and the client ID as inputs;
generating a zero-knowledge authentication number by concatenating an output of an exclusive-or operation with the sequence number and the anonymity key with the concatenation of the client ID and the message authentication code;
transmitting the random number and the zero-knowledge authentication number to the client application;
receiving at the verifier server a response from the client application, defining a received response;
comparing the received response with the local response to determine if they match; and
upon determining the received response matches the local response, transmitting a session ID to the client application.