Patent ID: 8302167
Filing Date: 2012-10-30
Classification: G06F,H04L

Abstract:
1. An apparatus for generating and communicating to a user security values for use in interactions with a server, said apparatus comprising: a data input interface for receiving a server message comprising transaction related data and server credential information cryptographically related to the transaction related data, a user communication interface to communicate information to a user and to receive input from the user, the communication interface adapted to present a representation of the transaction related data to the user for approval and to detect the user's approval of the transaction related data, one or more microprocessors for performing a verification of said server credential information, and for generating a security value, said generation of said security value being performed using a first symmetric cryptographic algorithm with a first secret shared between said apparatus and said server, and said verification of said server credential information being performed using a second symmetric cryptographic algorithm with a second secret shared between said apparatus and said server; wherein the user communication interface is further adapted to communicate said generated security value to the user; and wherein the generation and communication of the security value to the user is conditional on said server credential information verification and said user's approval of the transaction related data.