Patent ID: 9621519
Date: 2017-04-11
CPC Classifications: H04L

Claim:
1. A system for exchanging a key based on terminal user authentication information, comprising: a terminal implemented by at least one hardware processor configured to generate an ID-based ciphertext, corresponding to the terminal user authentication information, using a terminal-side random number and a server ID; and a server implemented by at least one hardware processor configured to decrypt the ID-based ciphertext generated by the terminal, using a server-side private key corresponding to the server ID, to produce restored terminal user authentication information; the server being further configured to authenticate the terminal, using the restored terminal user authentication information, whereby the terminal is an authenticated terminal; and the server being further configured to generate a server-side session key corresponding to the authenticated terminal, calculate a second session key element from a server-side random number when the terminal is authenticated, and to generate a server-side third session key element from the server-side random number and a first session key element; wherein the terminal is further configured to: wherein the server-side session key is based on a hash value of a character string including one or more of the ID-based ciphertext, the server ID, the encryption character string, the first session key element, the second session key element, a server-side encryption element, and the server-side third session key element.