Patent ID: 9692602
Date: 2017-06-27
CPC Classifications: H04L

Claim:
1. A method comprising: authenticating a user device with an authentication server of a primary service provider and forming a root certificate at the primary service provider; communicating the root certificate to the user device from the primary service provider; authenticating a supplemental service provider by signing a supplemental service provider certificate at an intermediate authentication authority to form a signed supplemental service provider certificate then signing the signed supplemental service provider certificate with the authentication server of the primary service provider and forming a twice-signed supplemental service provider certificate, said supplemental service provider separate from the primary service provider; communicating the twice-signed supplemental service provider certificate to the supplemental service provider; mutually authenticating the user device and the supplemental service provider with each other using the root certificate and the twice-signed supplemental service provider certificate; and after mutually authenticating, communicating directly between the supplemental service provider and the user device.