Patent ID: 7383440
Filing Date: 2008-06-03
Classification: H04L

Abstract:
1. A method for establishing private control by a user host device of a shared remote process executing in a remote device, through a communication link between the user host device and the remote device via an intermediary communication device, the method comprising: a remote process key request step of sending, by the user host device, a request message to the remote process in the remote device, the request message including a user identifier corresponding to the user host device, a request for a remote process public key corresponding to the remote process, a user public key corresponding to the user host device, and a current user session nonce; a request response step of sending, by the remote process in response to receipt of the request message, a request response message to the user host device, the request response message including a process identifier corresponding to the remote process, a process public key corresponding to the remote process, and a nonce validation code based on the current user session nonce; a remote process key validation step of comparing, in the user host device in response to receipt of the request response message, a calculated nonce validation value and the nonce validation code from the request response message, and then validating the process public key from the request response message in the case that the calculated nonce validation value and the nonce validation code are equivalent; a command step of sending, by the user host device in the case that the process public key is validated, a double-encrypted process command to the remote process, the double-encrypted process command being a process command that has been encrypted with both a user private key corresponding to the user public key, and the process public key; and a command execution step of executing, in the remote process in response to receipt of the double-encrypted process command, the process command by double-decrypting the double-encrypted process command using both a process private key corresponding to the process public key, and the user public key, and then executing the double-decrypted process command.