Patent ID: 9621353
Date: 2017-04-11
CPC Classifications: H04L

Claim:
1. A method for authenticating a piece of key information between a first terminal and a second terminal that are configured to communicate via at least one network comprising: the first terminal creating a first message, the first message having a header and a body, the body having at least one fingerprint derived from at least one certificate of the first terminal that authenticates the at least one certificate, the header comprising a piece of identification information that identifies the first terminal and a piece of date information; the first terminal copying the piece of identification information and inserts the copied piece of identification information into an additional field or element of the header of the first message; the first terminal sending the first message to a first proxy assigned to the first terminal in a first domain; the first proxy receiving the first message and inserting a piece of reference information for the at least one certificate in the first message, the reference information identifying an address at which the at least one certificate is stored or is callable; the first proxy generating a signature based on a hash value derived from the date information, signature information managed by the first proxy, the copied piece of identification information, and the at least one fingerprint; the first proxy including the generated signature within the header of the first message having the inserted piece of reference information for the at least one certificate to form a second message; the first proxy sending the second message to a second proxy assigned to the second terminal in a second domain.