Patent ID: 8190895

Claim:
A computer-implemented method of authenticated key exchange (AKE) using a mathematical group, the method comprising: obtaining parameters implementing AKE between an initiator computing device and a responder computing device connected via a network; computing, by the initiator computing device, a derived ephemeral public-key based at least on a derived ephemeral secret key and the mathematical group, the derived ephemeral secret key being based at least on hashing a randomly selected ephemeral secret key and a long-term secret key; communicating, by the initiator computing device, the derived ephemeral public-key to the responder computing device for validation; and responsive to validation of the derived ephemeral public key of the initiator computing device, generating, by the initiator computing device, a session key for secure exchange of information with the responder computing device, the session key being generated using the initiator computing device's derived ephemeral secret key and the responder computing device derived ephemeral public-key.