Browser authentication of server public key certificate (bas-pkc)
AssigneeWells Fargo Bank, N.A.
InventorJeffrey J. Stapleton
Life of this patent
Estimating the term…
Abstract
The arrangements disclosed herein relate to systems, apparatus, methods, and non-transitory computer readable media for determining, by a browser, data cipher by encrypting data using a first encryption key, the first encryption key is generated using a first random number, a second random number, and a third random number. The browser sends to a server, the data cipher. The browser determines a key cipher by encrypting the third random number using a certificate of the server. The browser sends to the server the key cipher.
Claims20
A method performed by at least one processor, comprising:
- receiving, from a first server, a certificate of the first server and a first random number;
- sending, to a second server, a second random number;
- receiving, from the second server, a first hash value using the first random number, the second random number, and the certificate;
- determining a second hash value using the first random number, the second random number, and the certificate;
- and
- authenticating in response to determining that the first hash value and the second hash value are the same.
A system comprising at least one processor, the at least one processor is configured to:
- receive, from a first server, a certificate of the first server and a first random number;
- send, to a second server, a second random number;
- receive, from the second server, a first hash value using the first random number, the second random number, and the certificate;
- determine a second hash value using the first random number, the second random number, and the certificate;
- and
- authenticate in response to determining that the first hash value and the second hash value are the same.
At least one non-transitory processor-readable medium comprising processor-readable instructions, such that, when executed, causes at least one processor to:
- receive, from a first server, a certificate of the first server and a first random number;
- send, to a second server, a second random number;
- receive, from the second server, a first hash value using the first random number, the second random number, and the certificate;
- determine a second hash value using the first random number, the second random number, and the certificate;
- and
- authenticate in response to determining that the first hash value and the second hash value are the same.
Dependencies are inferred from the claim text.