Patent ID: 9124419
Filing Date: 2015-09-01
Classification: G06F,G09C,H04L,H04W

Abstract:
1. A system comprising: a server able to communicate with a remote client device; wherein the server comprises: an authentication module to send, to said remote client device, a server authentication certificate; an accreditation certificate stored in a pre-defined location on a memory of the server, wherein the pre-defined location is accessible to the remote client device; wherein at least one of said authentication module and said memory, is implemented by utilizing at least a processor and a memory unit; wherein the accreditation certificate indicates a previously-defined condition that the server authentication certificate needs to meet in order for the server authentication certificate to be accepted for authentication by the remote client device; wherein the remote client device comprises: a Secure Execution Environment (SEE) to securely run an application; wherein the SEE comprises a Transport Layer Security (TLS)/Secure Sockets Layer (SSL) integration library which interacts with a locally-stored enrolled-websites database; wherein upon a launch of said application, the TLS/SSL integration library is to query said locally-stored enrolled-websites database; upon determining that said application is associated with a website that is not indicated in said locally-stored enrolled-websites database, the TLS/SSL integration library is (A) to fetch said accreditation certificate from said website, (B) to verify signature of said accreditation certificate using a reference public key that is stored in said SEE; (C) to verify format of said accreditation certificate; and (D) to store user credentials for said application in a local secure storage associated with said SEE.