Patent ID: 8332643

Claim:
A method of establishing trust between a first device and a second device, comprising: generating, by the first device, a first set of n password substrings from a one-time-password known to the second device, wherein n is an integer greater than one; receiving n received authenticators from the second device, wherein a first received authenticator of the n received authenticators is a cryptographic encoding comprising a first nonce of n nonces and a first password substring of a second set of n password substrings generated by the second device; receiving the n nonces from the second device; generating, by the first device, n corresponding authenticators, wherein each of the n corresponding authenticators is a cryptographic encoding comprising one of the nonces of the n nonces and one of the password substrings of the first set of n password substrings, wherein a first corresponding authenticator of the n corresponding authenticators is a cryptographic encoding comprising a first nonce of the n nonces and a first password substring of the first set of n password substrings; verifying that each received authenticator of the n received authenticators matches a corresponding authenticator of the n corresponding authenticators including verifying that the first corresponding authenticator matches the first received authenticator; and establishing trust between the first device and the second device after each received authenticator of the n received authenticators has been verified.