Patent ID: 9374366
Filing Date: 2016-06-21
CPC Classification: G06F,H04L

Claim Text:
1. A method comprising: receiving, at a processor of a server, a user identification code from a client requesting a connection with the server; sending, by the processor of the server, commitment information to the client, the commitment information including hidden information without meaning to the client at the time of transmission, wherein the commitment information demonstrates that the server can determine a value of a dynamic credential before the server receives the dynamic credential from the client; receiving, at the processor of the server, the dynamic credential from the client and validating the dynamic credential upon successful comparison to a calculated value; sending, from the server, upon the successful comparison, a commitment key to the client, the commitment key enabling the client to utilize the commitment information to authenticate the server; and authenticating the client by the server, with the dynamic credential and the static credential, wherein the static credential is received from the client in response to authentication of the server by the client using the commitment information.