Patent ID: 9154302
Filing Date: 2015-10-06
Classification: G06F,H04L

Abstract:
1. A method comprising: finding, at a trusted authority, a non-supersingular curve with an even k for which no distortion map exists, the curve having a base field F generating a master secret s; choosing hash function H publishing public parameters; identifying and authenticating an authentication service to the trusted authority; taking, at the trusted authority, an identity IDs of the authentication service as input and mapping the identity IDs to a point, S, on the curve; using, over the extension field F issuing back to the authentication service over a secure network connection the secret number s, parameters of the curve and the H authenticating, at a client, an identity to the trusted authority; taking, at the trusted authority, a client's identity ID hashing, at the trusted authority, the identity ID receiving, at the client, from the trusted authority over the secure network connection A and s, where A=c.H taking, at the client, as input a PIN number, α, and calculating αA; producing, at the client, a number (s−α)A; storing, at the client, both (s−α)A and A in a browser storage of the client; using an authentication program at the client to prompt a user of the client for their PIN and their identifier; using, at the client, the authentication program to hash ID using, at the client, the hash function H sending identities ID generating values of x<q at the client and y<q at the authentication service; calculating, at the client, S where S=H exchanging P calculating r calculating, at the client, k=e((x+r at the authentication service, calculating k=e(r sending, at the client, M over the secure connection to the authentication service; sending N to the client in response to a comparison, N=M, at the authentication service indicating a match; and determining, at the client, that the client and authentication service have successfully mutually authenticated each other and have a mutually agreed upon session key N in response to a comparison of N to M at the client indicating a match.