Patent ID: 8307421

Claim:
A method for transmitting information from a sending device to a receiving device using a protocol for establishing a session between the devices, the information including a symmetric key and content other than the symmetric key, the method comprising: encrypting the information using a public key of a receiver of the receiving device, the information including a symmetric key and content other than the symmetric key; signing the encrypted information using a private key of a sender of the sending device by encrypting the encrypted information with the private key of the sender; adding the signed encrypted information to a message of the protocol; and sending from the sending device to the receiving device the message with the signed encrypted information wherein upon receiving the message, the receiving device can verify using the public key of the sender that the encrypted information was signed by the sender by decrypting the information including the symmetric key and the content other than the symmetric key with the public key of the sender, decrypt the information using the private key of the receiver, and then use the symmetric key of the decrypted information to encrypt and decrypt information transmitted during an established session.