Client privacy preserving session resumption
AssigneeNXP B.V.
InventorsMarcel Medwed, Stefan Lemsitzer
Life of this patent
Estimating the term…
Abstract
Various embodiments relate to a method and system for resuming a secure communication session with a server by a device, including: sending a message to the server requesting the resumption of a secure communication session; receiving from the server a server identifier, a server nonce, and a salt; determining that the device has a shared key with the server based upon the server identifier; determining that the received salt is valid; calculating a salted identifier based upon the shared key and the salt; sending the salted identifier to the server; and resuming the secure communication session with the server.
Claims12
A method for resuming, by a server, a secure communication session with a device, comprising:
- storing salted identifiers in a server database, wherein each salted identifier stored within the server database is based upon shared keys and a salt;
- receiving a message from the device requesting the resumption of a secure communication session;
- sending to the device a server identifier, a server nonce, and the salt, and wherein the salt is a valid salt when the salt is greater than or equal to a salt threshold T, and in response to the sale being valid, the value of the salt threshold T is updated to an incremented value of the salt;
- receiving a salted identifier from the device, wherein the salted identifier is based upon a shared key and the incremented value of the salt;
- determining that the received salted identifier has a match in the server database;
- and
- resuming the secure communication session with the device in response to determining that the received salted identifier has a match in the server database.
A server configured to resume a secure communication session with a device, comprising:
- a memory;
- a processor coupled to the memory, wherein the processor is further configured to:
- store salted identifiers in a server database, wherein each salted identifier stored within the server database is based upon shared keys and a salt;
- receive a message from the device requesting the resumption of a secure communication session;
- send to the device a server identifier, a server nonce, and the salt, wherein the salt is greater than or equal to a salt threshold T, and in response to the sale being valid, the salt threshold T is updated to an incremented value of the salt;
- receive a salted identifier from the device, wherein the salted identifier is based upon a shared key and the incremented value of the salt;
- determine that the received salted identifier has a match in the server database;
- and
- resume the secure communication session with the device in response to the received salted identifier having a match in the server database.
Dependencies are inferred from the claim text.