Patent ID: 7627760
Filing Date: 2009-12-01
Classification: H04L

Abstract:
1. A computer-implemented method for extended authenticated key exchange using a mathematical group, via operations comprising: initiating operations to execute extended authenticated key exchange between an initiator computing device and a responder computing device connected via a network; generating setup parameters on a computing device, the setup parameters comprising: determining an initiator identity, wherein the initiator identity comprises a binary string based on context information of the initiator; determining a responder identity, wherein the responder identity comprises a binary string based on context information of the responder; the initiator generating an initiator ephemeral public key in the mathematical group based on an initiator ephemeral secret key, randomly selected from the key group, and sending the initiator ephemeral public key to the responder; the responder generating a responder ephemeral public key in the mathematical group based on a responder ephemeral secret randomly selected from the key group, and sending the responder ephemeral public key to the initiator; computing, a session key for the initiator and a corresponding session key for the responder, by hashing the concatenation of a first computed value, a second computed value, the initiator identity, and the responder identity such that: the session key and the corresponding session key, if equal, providing for secure exchange of data between the initiator and the responder.