Patent ID: 6189096
Filing Date: 2001-02-13
Classification: H04L

Abstract:
A method of authentication, comprising:obtaining a user private key from a user;retrieving an encrypted client secret key value associated with said user;decrypting said encrypted user secret key value using said user private key to provide a client secret key;computing a preliminary digest of:a first time stamp,a user certificate serial number associated with said user, andsaid client secret key;providing an unencrypted message including said first time stamp, said user certificate serial number, and said preliminary digest;retrieving an encrypted server secret key value associated with said user certificate serial number of said unencrypted message;decrypting said encrypted server secret key value using a server private key to provide a server secret key;computing a computed digest of:said first time stamp of said unencrypted message,said user certificate serial number of said unencrypted message, andsaid server secret key; anddetermining said present message to be authentic based on a comparison between said preliminary digest of said unencrypted message and said computed digest.