Patent ID: 7387240

Claim:
A method for securely transferring data between a first device and a second device over an open network, comprising the steps of: establishing a secure connection to the first device over the open network through an open network server; generating a public/private encryption key pair at the first device; transmitting a public encryption key of the public/private encryption key pair to the second device on the secure connection over the open network; generating a first encryption key for encrypting communications between the first device and the second device and a second encryption key for encrypting the data transmitted between the first device and the second device; providing a first cryptogram including the first encryption key to the second device and the first device; providing a second cryptogram including the second encryption key to the second device and the first device; providing a third cryptogram including both the first encryption key and the second encryption key to the second device and the first device; decrypting the first, second and third cryptograms at the first device to determine the first encryption key and the second encryption key; and providing secure information transfer between the first device and the second device using the public/private encryption key pair, the first encryption key and the second encryption key.