Establishing a secured communication session

A non-transitory, computer accessible memory medium storing program instructions for establishing a secured communication session between a user using an untrusted device and a server, wherein the program instructions are executable by a processor to:

• receive first user input to obtain an authentication algorithm and an encryption algorithm for establishing a communication session with the server, wherein said receiving the first user input is performed prior to authentication with the server, and wherein prior to the user input, the untrusted device did not store the authentication algorithm and the encryption algorithm;
• in response to the first user input, obtain an authentication algorithm and an encryption algorithm prior to authentication with the server;
• receive second user input for establishing the secured communication session with the server;
• in response to the second user input, create a session key prior to authentication with the server;
• in response to the second user input, obtain a public key of the server prior to authentication with the server;
• receive third user input specifying a personal identity number for performing authentication with the server;
• in response to the third user input, send the personal identity number to the server for authentication by using the authentication algorithm, the personal identity number being encrypted by using the encryption algorithm and the public key of the server;
• and
• send the session key to the server for encrypting purpose between the untrusted device and the server, the session key being encrypted by using the encryption algorithm and the public key of the server;
• wherein the untrusted device does not belong to the user.

An apparatus comprising:

• a processing logic implemented with hardware;
• an input coupled to the processing logic, wherein the input is configured to receive user input from a user;
• and
• a transmitter/receiver coupled to the processing logic for establishing a secured communication session between the user using the apparatus and a server, wherein the processing logic is configured to:
• receive first user input to obtain an authentication algorithm and an encryption algorithm for establishing a communication session with the server via the input, wherein said receiving the first user input is performed prior to authentication with the server, and wherein prior to the user input, the apparatus did not store the authentication algorithm and the encryption algorithm;
• in response to the first user input, obtain an authentication algorithm and an encryption algorithm prior to authentication with the server;
• receive second user input for establishing the secured communication session with the server;
• in response to the second user input, create a session key prior to authentication with the server;
• in response to the second user input, obtain a public key of the server prior to authentication with the server;
• receive third user input specifying a personal identity number for performing authentication with the server;
• in response to the third user input, send the personal identity number to the server for authentication by using the authentication algorithm, the personal identity number being encrypted by using the encryption algorithm and the public key of the server;
• and
• send the session key to the server for encrypting purpose between the apparatus and the server, the session key being encrypted by using the encryption algorithm and the public key of the server, wherein the apparatus is untrusted and does not belong to the user.