Patent ID: 6490682
Filing Date: 2002-12-03
Classification: H04L

Abstract:
A method of authenticating an exchange of information between a pair of correspondents (C, S) in a public key information exchange session where each of said correspondents have a respective public key pair with a private key and a corresponding public key, to permit exchange of information therebetween, said method including:a) the first correspondent (C) transmitting to the second correspondent (S) a first message including a first unique information and a first authentication utilising said private key b) the second correspondent (S) utilising said first authentication to verify the identity of the first correspondent (C) and generating a second unique information; c) transmitting from said second correspondent (S) to the first correspondent (C) a second message including the first and second unique information together with a second authentication utilising said private key of said second correspondent to bind said first and second unique information to said correspondent (S); d) the first correspondent (C) utilising said second authentication to verify the first unique information to thereby establish the identity of said second correspondent (S) and currency of the session; e) the first correspondent (C) then initiating the exchange of information by generating a third unique information and transmitting the third unique information to the second correspondent (S) along with an information request; f) the second correspondent (S) transmitting to the first correspondent (C) the requested information along with said second and third unique information and a further authentication utilising said private key of said second correspondent to bind said second and third unique information to said second correspondent (S); g) said first correspondent (C) utilising said further authentication to verify to verify said third unique information to thereby establish currency of the request and verifying the second unique information to thereby establish currency of the session.