Patent ID: 8504836

Claim:
A method of transferring a domain key between a first device and a second device in a network, the method comprising: verifying the second device is an authorized device through certificates, wherein the second device verifies the first device is an authorized device though the certificates; receiving, at the first device, a first random number from the second device, wherein the first random number is encrypted; determining a second random number at the first device; sending the second random number from the first device to the second device; generating a Personal Identification Number (PIN) at the first device; in response to generating the PIN, outputting instructions, by the first device, that instruct a user entry of the PIN in the second device, wherein the PIN is generated and the instructions are output after the verifying; generating a session key from the first random number, the second random number, and the PIN; and sending the domain key encrypted with the session key from the first device to the second device or receiving the domain key encrypted with the session key from the second device to the first device.