Patent ID: 9197411
Filing Date: 2015-11-24
Classification: G06Q,H04L

Abstract:
1. A method of authenticating and encrypting a client-server communication, comprising steps of: a) generating a first one-time password (OTP b) generating an encryption key (K_ENC) and a MAC (Message Authentication Code) key (K_MAC) based on OTP c) preparing and protecting client data using K_ENC and K_MAC; d) sending a request message from the client to the server, the request message containing the protected client data, a cryptographic token identifier (TID) and OTP e) validating OTP f) deriving K_ENC and K_MAC from OTP g) processing the request message and generating result data; h) encrypting the result data using K_ENC and creating a digest using K_MAC; i) sending the encrypted result data to the client; and j) decrypting the result data at the client using K_ENC and verifying the authenticity of the result data using K_MAC.