Patent ID: 8447982

Claim:
A method for connecting an end-to-end security channel between an IC card and a server on a communication network, comprising the steps of: generating, by the server, a random number Rs for transmission to the IC card, generating an E(Rs) by encrypting the random number Rs by a user public key, and transmitting the E(Rs) to the IC card through the communication network; receiving, by the IC card, the E(Rs) through the communication network and extracting the random number Rs by decrypting the E(Rs) by a user private key; generating, by the IC card, a random number Rc to be transmitted to the server, generating a session key K′ by the random number Rs and the random number Rc, and generating a first card verifier MAC′ by encrypting the random number Rs by the session key K′; transmitting, by the IC card, the random number Rc and the first card verifier MAC′ to the server through the communication network; receiving, by the server, the random number Rc and the first card verifier MAC′ through the communication network, generating a session key K by the random number Rs and the random number Rc, and generating a first server verifier MAC by encrypting the random number Rs by the session key K; comparing, by the server, the first card verifier MAC′ and the first server verifier MAC to certify the session key K; encrypting, by the server, the random number Rc by the session key K to generate a second server verifier MAC; transmitting, by the server, the second server verifier MAC to the IC card through the communication network; receiving, by the IC card, the second server verifier MAC and encrypting the random number Re by the session key K′ to generate a second card verifier MAC′; comparing, by the IC card, the second card verifier MAC′ and the second server verifier MAC to certify the session key K′; and processing that an end-to-end security channel is connected between the IC card and the server, if the session key K′ is certified.