Patent ID: 9716591
Date: 2017-07-25
CPC Classifications: H04L

Claim:
1. A method for authorising a second client to a server for a user account for setting up a secure connection between the second client and a first client, wherein the method comprises the steps of: a) generating a random number by the first client, b) displaying the random number by the first client, c) generating a first hash value from the random number by the first client, wherein the first hash value comprises a symmetric key, a password, and an initialisation vector, d) generating, by the first client, a first data packet from a name of the user account, from a first public key of the first client, and from a hash value of the first public key, e) encrypting the first data packet by means of the symmetric key and the initialisation vector by the first client, f) generating a second hash value from the password with use of the initialisation vector as salt by the first client, g) transmitting the encrypted first data packet and the second hash value from the first client to the server, h) receiving, by a second client, the name of the user account and the random number from an input means of the second client, i) generating the first hash value from the random number received via input means by the second client, wherein the first hash value comprises the symmetric key, the password, and the initialisation vector, j) generating the second hash value from the password with use of the initialisation vector as salt by the second client, k) transmitting the second hash value from the second client to the server, l) comparing the second hash value obtained from the first client with the second hash value obtained from the second client through the server and, if the values match, transmitting the encrypted first data packet through the server to the second client, m) decrypting the encrypted first data packet by means of the symmetric key and the initialisation vector by the second client in order to obtain a decrypted name of the user account, a decrypted second public key, and a decrypted hash value of the second public key, n) comparing, by the second client, the decrypted name of the user account with the name of the user account received via input means, the decrypted public key with the first public key of the first client, and/or the decrypted hash value with the hash value of the first public key of the first client and, if the values match, authorising the second client to the server.