Patent ID: 6996715

Claim:
A method for identification among at least first and second users communicating by means of a communication system, said method comprising the steps of: providing a first unique identifier from said first user to said second user; entering into an agreement between at least said first and second users as to a first plurality of hash salts; at said second user, performing a hash operation on one of (a) said first unique identifier and (b) a deterministic transformation of said first unique identifier, using a first hash salt from said plurality of hash salts, to thereby produce a first data hash (A); at said second user, performing a hash operation on at least a portion of said first data hash (A) using a second of said plurality of hash salts (B), to thereby produce a second data hash (B); at said second user, performing a hash operation on at least a portion of said first data hash (A) using a third of said plurality of hash salts (C), to thereby produce a third data hash (C); at said second user, performing a hash operation on at least a portion of said third data hash (C) using a forth of said plurality of hash salts (D), to thereby produce a fourth data hash (D); at said second user, discarding said third data hash (C); at said second user, performing a hash operation, using a further one of said plurality of hash salts (E), on at least a portion of one of (a) said first unique identifier and (b) data deterministically derived from said unique identifier, to thereby produce a fifth data hash (E); at said second user, generating a random number; at said second user, encrypting said random number with a key which includes at least a deterministic transformation of said second data hash, to produce an encrypted random number, where said transformation is agreed to ahead of time; at said first user, decrypting said encrypted random number using as a key, said at least a deterministic transformation of said second data hash, to extract said random number, to thereby form an extracted random number; at said first user, transmitting to said second user both said extracted random number and said third data hash; at said second user, performing a hash operation on said third data hash by the use of said forth hash salt, to thereby generate a sixth data hash (F); at said second user, comparing said fourth and sixth data hashes, and deeming said message to be from said first user; and at said second user, discarding said third data hash.