Patent ID: 8644515
Filing Date: 2014-02-04
Classification: H04L

Abstract:
1. A method of establishing a display authenticated secret key between a first device and a second device, comprising at the first device: selecting a first nonce; computing a witness from the first nonce and a public key of the first device; receiving, from the second device, a public key of the second device, and a second nonce; computing a shared secret key using a private key of the first device and the public key of the second device; computing a first key message authentication code using a truncated version of the shared secret key, the witness, and the second nonce; receiving a second key message authentication code from the second device; determining if the first key message authentication code and second key message authentication code match; if the first and second key message authentication codes match, computing a first display value from the first nonce and the second nonce; and displaying the first display value on the first device; and receiving an indication that the first display value matches a second display value on the second device, wherein if the first display value matches the second display value, calculating a shared master key using a second truncated version of the shared secret key, the first nonce, and the second nonce.