Method for secret origination service to distribute a shared secret

Abstract

A method and secret origination service are provided for calculating and distributing a shared secret. The secret origination service receives a first shared secret request from a first device. The first shared secret request includes a first identity token associated with a first user of the first device and a second participant identifier associated with a second user. The secret origination service verifies the first identity token to produce a first verified requestor identity and calculates a first shared secret based on the first verified requestor identity and the second user. The secret origination service sends the first shared secret to the first device. The secret origination service also receives a second shared secret request from the second device, which includes a second identity token associated with the second user of the second device and a first participant identifier associated with the first user. The secret origination service verifies the second identity token to produce a second verified requestor identity and calculates a second shared secret based on the second verified requestor identity and the first user. Because the inputs are the same, the second shared secret is identical to the first shared secret. The secret origination service sends the second shared secret to the second device.

Dependencies are inferred from the claim text.