Patent ID: 9112840
Filing Date: 2015-08-18
Classification: H04L

Abstract:
1. A method for verifying privacy of a Web Real-Time Communications (WebRTC) media channel, comprising: establishing, by a first WebRTC client executing on a first computing device and a second WebRTC client executing on a second computing device, a WebRTC media channel between the first WebRTC client and the second WebRTC client using a keying material; establishing, using the same keying material, a WebRTC data channel between the first WebRTC client and the second WebRTC client corresponding to the WebRTC media channel; negotiating, in the WebRTC data channel, a cryptographic key exchange between the first WebRTC client and the second WebRTC client; generating a first Short Authentication String (SAS) and a second SAS based on the cryptographic key exchange in the WebRTC data channel; and displaying the first SAS via the first WebRTC client and the second SAS via the second WebRTC client, such that a mismatch between the first SAS and the second SAS indicates an existence of a man-in-the-middle (MitM) attacker.