Patent ID: 7320073

Claim:
In an Internet based network comprising at least one server and at least one client which enables users to communicate with said at least one server, a method for encrypted communications using private keys and certificates, comprising steps of: (a) a user choosing a username and a passphrase via said at least one client; (b) said at least one client generating a private key and a public key using random data collected from said user and other sources that cannot be accessed by said at least one server; (c) calculating a first hash value of said passphrase using an algorithm; (d) calculating an authentication value based on said private key and said passphrase, wherein said authentication value comprises a separate entity distinct from said private key and said passphrase; (e) concatenating said private key and said authentication value, and encrypting said private key concatenated with said authentication value using said passphrase; (f) submitting said username, along with said first hash value, said encrypted private key concatenated with said authentication value, and said public key to said at least one server over a secure channel; (g) said at least one server checking whether a record of said user exists in a database associated with said at least one server; (h) if a check result of (g) is yes, then verifying access to said user's record by comparing said first hash value with a stored hash value of said passphrase; (i) if a check result of (g) is no, then creating a record for said user; (j) creating and signing a certificate that certifies said username and said public key; (k) storing said first hash value, said encryption result and said certificate in said user's record; and (l) returning a confirmation to said at least one client.