Patent ID: 8418235
Filing Date: 2013-04-09
Classification: H04L

Abstract:
1. A method for client credential based authentication of messages between a client and a server, said client and server both knowing said client credential, the method comprising the steps of: utilizing the client credential to create a first key; preparing a message for transmission at the client; computing, at the client, a message authentication code ‘MAC’ with the first key and the message by using a MAC function known to both the client device and the server; sending the message and the MAC from the client to the server; receiving, at the client, a response message from the server, the response message including a session identifier; utilizing the client credential and the session identifier to create a second key; and using the MAC function and the second key to authenticate subsequent messages between the client and the server; wherein creation of at least one of the first key and the second key is performed using a secure pseudo-random number generator that employs a seed being the client credential combined with either a security token or a nonce.