Patent ID: 7096352
Filing Date: 2006-08-22
Classification: H04L

Abstract:
1. A method of establishing a security protocol structure in an application layer of a Wireless Application Protocol (WAP) standard, comprising: receiving a first message containing a client random value from a client; determining whether the first message is a valid message; extracting a pre-master secret from the first message; generating a specific server random value; generating and transmitting a second message to the client to pass the server random value to the client; generating a master secret in accordance with the extracted pre-master secret, client random value, and server random value; generating a key block in accordance with the master secret, client random value, and server random value; generating from the key block an encryption key value for encryption and decryption algorithms and Message Authentication Code (MAC) algorithms; generating a third message indicating that encryption is activated; and generating a fourth message to verify that the client has generated a client master secret identical to the master secret and to indicate that secured communication has been established between a server generating the server random value and the client, wherein the security protocol structure comprises: wherein the secure session layer provides a data security function in the application layer, and includes a secured session layer security (SSLS) protocol to provide a secure session interface to an application program, and wherein secure communication is established between a server and a client using the SSLS protocol and without using a certificate or public/private key generation operation.