Patent ID: 8578165

Claim:
A method of authenticated key exchange in a data communication system, said method comprising: a first communication device generating a first public value G A for use as a session public key and sending to a second communication device said first public value G A ; said second communication device generating a second public value G B for use as another session public key, obtaining a shared key K and computing a first keyed hash of said first public value G A , said second public value G B and identification information of one of said first communication device and said second communication device, said first keyed hash using said shared key K; said second communication device sending said first keyed hash, said second public value G B and said identification information of one of said first communication device and said second communication device to said first communication device; said first communication device obtaining said shared key K and computing a first verification keyed hash of said first public value G A , said second public value G B and said identification information of one of said first communication device and said second communication device, said first verification keyed hash using said shared key K; and said first communication device verifying that said first keyed hash equals said first verification keyed hash.