Patent ID: 7424615

Claim:
A cryptographic method, including: generating, at a first entity, a first public key M B , the first public key M B being session specific; receiving from a second entity, at the first entity, a second public key M A , the second public key M A being session specific; generating, at the first entity, a first secret S B by hashing one or more parameters that are known to the first entity and the second entity, at least one of the parameters being a result of hashing one or more of the following: a first password P B , the first public key M B , and the second public key M A ; generating, at the first entity, a first session key K B , the first session key K B being different from the first secret S B , both the first session key K B and the first secret S B being computed from the second public key M A ; encrypting, at the first entity, a first random nonce N B with the first session key K B or the first secret S B to obtain a first encrypted result; encrypting, at the first entity, the first encrypted result with the other one of the first session key K B or the first secret S B to obtain an encrypted random nonce; transmitting the encrypted random nonce from the first entity to the second entity; receiving a response to the encrypted random nonce; and authenticating through determining whether the response includes a correct modification of the first random nonce N B .