US 2014/0156995 A1 · METHOD AND SYSTEM FOR ESTABLISHING REAL-TIME TRUST IN A PUBLIC NETWORK

Abstract

A method for performing authenticated communication in a public network includes sending an open request to a common directory server for a first key, the first key being a trusted embedded authentication common directory service key wrapped in a public key of a public-private key pair. The open request includes an authentication request value that identifies the open request as a verified setup directory service, the public key, an email address and a specified third additional out-of-band communication channel. The common directory server sends a first reply of three replies after generating the first key, which first reply is sent directly back to the directory server with a first half of the first key offset by a unique value and wrapped using the public key. The second reply of the three replies is sent via email to the email address, which second reply includes a second half of the first key offset by the first half of the first key. The third reply of the three replies is sent to the specified third additional out-of-band channel, which third reply includes the unique value.

Claims20

Dependent claims

A method for performing authenticated communication in a public network comprising:

sending an open request from a directory server to a common directory server for a first key, said first key being a trusted embedded authentication common directory service key wrapped in a public key of a public-private key pair, wherein the open request includes an authentication request value that identifies the open request as a verified setup directory service, the public key, an email address and a specified third additional out-of-band communication channel;
sending by the common directory server a first reply of three replies after generating the first key, said first reply being sent directly back to the directory server with a first half of the first key offset by a unique value and wrapped using the public key;
sending a second reply of the three replies via email to the email address, said second reply including a second half of the first key offset by the first half of the first key;
and
sending a third reply of the three replies to the specified third additional out-of-band channel, said third reply including the unique value.

2 more elements

A non-transitory computer readable media have encoded thereon instructions for a processor and memory to cause the processor in conjunction with the memory to perform a method for performing real-time authentication between a first directory server and a second directory server, the first directory server having obtained a first key from a common directory server and the second directory server having obtained a second key from the common directory server comprising:

sending by the first directory server a first request to the common directory server wrapped in the first key in an SSLX-EA communication to obtain a first directory server session master key to use in subsequent communication with the second directory server, wherein the first request includes a first authentication request value that indicates to the common directory server with which one of a plurality of directory servers that the first directory server wishes to communicate;
generating the first directory server session master key by the common directory server;
sending by the common directory server a first of two replies after generating the first directory server session master key, wherein the first reply is sent to the second directory server with the first directory server session master key wrapped in an SSLX-EA message using the second key;
and
sending a second reply of the two replies back to the first directory server with the first directory server session master key wrapped in an SSLX-EA message using the first key.

2 more elements

Dependencies are inferred from the claim text.

Method and system for establishing real-time trust in a public network

Life of this patent

Method and system for establishing real-time trust in a public network

Life of this patent

Abstract

Claims20