Patent ID: 7529933
Filing Date: 2009-05-05
Classification: H04L

Abstract:
1. A method of authentication between a client and a server, the method comprising: negotiating the use of an extensible authentication protocol; receiving from the server, using the extensible authentication protocol, a first request packet requesting to use a protected extensible authentication protocol; transmitting a first response packet, using the extensible authentication protocol, to the server agreeing to use the protected extensible authentication protocol, wherein the protected extensible authentication protocol is used in transmitting and receiving further authentication packets between the client and the server; receiving a second request packet from the server with information for establishing a secure communication tunnel between the client and the server and for authenticating the server to the client; authenticating the server; transmitting a second response packet to the server establishing the secure communication tunnel between the client and the server; receiving a third request packet sent by the server within the secure communication tunnel, the third request packet requesting an identity for authenticating the client; transmitting a third response packet within the secure communication tunnel to the server with the identity; receiving a fourth request packet sent by the server within the secure communication tunnel, the fourth request packet proposing an inner extensible authentication protocol method for authenticating the client; transmitting a fourth response packet to the server within the secure communication tunnel, the fourth request packet agreeing to the inner extensible authentication protocol method; and authenticating the client within the secure communication tunnel using the inner extensible authentication protocol method.