Patent ID: 9544298
Date: 2017-01-10
CPC Classifications: G06F,H04L,H04W

Claim:
1. A method for certificate-based authentication in which a first subscriber provides self-authentication to a second subscriber using a certificate assigned to the first subscriber, comprising: transmitting, by a first computer system of the first subscriber, the certificate of the first subscriber that (a) specifies at least one characteristic which must be fulfilled by the second subscriber to authenticate the second subscriber as an authenticated verifier and (b) contains a public key; receiving, at a second computer system of the second subscriber, the certificate of the first subscriber; accessing, by the second computer system of the second subscriber, the at least one characteristic specified in the certificate of the first subscriber; verifying, by the second computer system of the second subscriber, whether the second subscriber fulfills the at least one characteristic specified in the certificate of the first subscriber to authenticate the second subscriber as the authenticated verifier; and only after a successful verification by the second subscriber that the second subscriber fulfills the at least one characteristic specified in the certificate of the first subscriber, performing a challenge-response exchange including: