Patent ID: 8156340

Claim:
A method for authentication of a requesting entity by an authenticating entity comprising: receiving, by an authenticating entity, a request for data from a requesting entity; and sending, by the authenticating entity, challenge data to the requesting entity; receiving, by the authenticating entity, the challenge data from the requesting entity; wherein the challenge data is encrypted, by a computer processor, in one direction between the authenticating entity and the requesting entity, and the challenge data is sent in plain text in the other direction between the authenticating entity and the requesting entity; wherein the challenge data comprises time data based on a current time of a system of the authenticating entity; wherein the authenticating entity determines a received time of the received challenge data and calculates, by a computer processor, a time difference between the time data and the received time when the challenge data is received from the requesting entity; and authenticating, by the authenticating entity, the requesting entity by comparing the challenge data sent to the requesting entity and the challenge data received from the requesting entity, and determining that the time difference is less than a predetermined threshold, wherein when the requesting entity requests data, the authenticating entity provides an application and a key for download by the requesting entity, and wherein the challenge data is encrypted by the requesting entity or the authenticating entity and decrypted by the authenticating entity or the requesting entity using the key.