Patent ID: 8601267

Claim:
A method for establishing a secured communication session between a user using an untrusted device and a server, the method comprising: the untrusted device receiving first user input to obtain an authentication algorithm and an encryption algorithm for establishing a communication session with the server, wherein said receiving the first user input is performed prior to authentication with the server, and wherein prior to the user input, the untrusted device did not store the authentication algorithm and the encryption algorithm; in response to the first user input, the untrusted device obtaining the authentication algorithm and the encryption algorithm prior to authentication with the server; the untrusted device creating a session key prior to authentication with the server; the untrusted device obtaining a public key of the server prior to authentication with the server; the untrusted device receiving second user input specifying a personal identity number for performing authentication with the server; in response to the second user input, the untrusted device sending the personal identity number to the server for authentication by using the authentication algorithm, the personal identity number being encrypted by using the encryption algorithm and the public key of the server; and the untrusted device sending the session key to the server for encrypting purpose between the untrusted device and the server, the session key being encrypted by using the encryption algorithm and the public key of the server.