Patent ID: 8745394

Claim:
A method for secure electronic communication between a client application processor and a server processor, comprising: generating, using a server processor coupled to memory, a client application public/private key pair and storing the client application public/private key pair on a physical hardware security module without sending a client application private key to, or storing the client application private key on, a user's communication device; receiving, using the server processor, a request message from a user's communication device processor consisting at least in part of a session key encrypted with the client application public key of the public/private key pair; retrieving, using the server processor, the client application private key of the public/private key pair stored on the physical hardware security module; decrypting, using the server processor, the request message with the client application private key of the public/private key pair and retrieving the decrypted session key from the decrypted request message; generating, using the server processor, a response message and encrypting the response message with the retrieved session key; and sending, using the server processor, the session key-encrypted response message to the user's communication device processor.