Patent ID: 7457956

Claim:
A method for establishing secure communication between a client and a requested service at a service providing server, the client and the server having a common computing platform supporting digital signing and verification of arbitrary data, said method comprising the steps of: downloading, in a first transmission, from the server to the client, a digitally signed data package containing algorithms/proxy, corresponding to the service, for doing authenticated key exchange that includes a certificate that certifies a public key of the server, wherein the client and the server do not have a predefined security relation; verifying in the client the digital signature of the downloaded data package based on a trusted public key of the client that corresponds to the digital signature; wherein said digital signature is verified by said client returning, in a second transmission, a client certificate including a public key of the client to the server; and, generating at the client and the server a shared security key, wherein said generating comprises execution at the client of said algorithms/proxy; and, using the shared key to encrypt communication between client and server.