Patent ID: 9608967
Date: 2017-03-28
CPC Classifications: H04L

Claim:
1. In a communication network comprising a plurality of communicating entities, a method to establish a secure end-to-end communication between a source entity and a target entity having different resource constraints a session key between a source entity and a target entity, the method comprising the steps of: generating at the source entity a secret x for the source entity, the secret comprising n secret values (x1, xi, xn); assigning by the source entity each of the n secret values (xi) to a respective assistant entity (Pi) among the plurality of communicating entities, wherein each assistant entity is selected by the source entity to be a proxy entity with fewer resource constraints than the source entity; encrypting and signing by each assistant entity each assigned secret value (xi); authenticating the source entity upon reception by the target entity of one or more encrypted and signed secret values (x1, xi, xn) of the n assistant entities; generating an encrypted and signed secret y with the target entity, wherein the secret y is encrypted with the secret x; authenticating the target entity upon reception, by at least one of the n assistant entities (P1, Pi, Pn), of the encrypted and signed secret y; and generating a session key between the source entity and the target entity upon reception by the source entity of the authenticated secret y and of said secret x of the source entity.