Patent ID: 9106635
Filing Date: 2015-08-11
Classification: H04L

Abstract:
1. A method of enabling a client device to connect to a network, the method comprising: obtaining, at a server device and from the client device, an authorization code via an out-of-band communication channel different from the network, the authorization code corresponding to the client device; and after detecting initiation of a security negotiation protocol by the client device, using the authorization code in at least one cryptographic operation during establishment of a transport layer security (TLS) session by modifying the security negotiation protocol to utilize the authorization code, wherein the authorization code is used in generating at least one of a master secret, a key block, and a pre master secret generated during establishment of the TLS session and the authorization code is used in establishing the TLS session by: obtaining a negotiated secret elliptic curve point; multiplying the elliptic curve point by the authorization code to obtain a product; and forming the pre master secret from an x-coordinate of the product.