Patent ID: 6073237
Filing Date: 2000-06-06
Classification: G06F,G06Q,H04L

Abstract:
A tamper resistant method for securing a user's data comprising:initializing the presence of at least one user on a tamper resistant networked device using a first protocol; andestablishing routine operations by the user on the network using a second protocol, wherein the first protocol comprises:the user sending a message to a network server;the server verifying the presence of a user record;the server creating a new record if an existing record does not exist;the server sending a random challenge to the user;the user signing the random challenge and sending the signed random challenge to the server;the server verifying the user signature and thereafter generating a session key for the initialization protocol, the server further signing the session key and sending the key back to the user;the user choosing a passphrase, encrypting the passphrase and sending the encrypted passphrase back to the server; andthe server generating a symmetric key, the symmetric key encrypted by the server and sent to the user.