Abstract: A system and method of authenticated ID-based key exchange and remote login with insecure token and PIN number can provide an authenticated key agreement protocol based on an elliptic curve bilinear type-3 pairing. A server acts as an Authentication Service to Clients and a Trusted Authority (TA) issues identity based secret numbers to Clients and Authentication Services. Included in the system and method is the capability for the Client to split their secret number into two parts, a Client selected PIN number, and the larger number, the Token.

Abstract: A system and method where the “dealer” of a split Master Secret becomes the Master Key Server, whose role is to initially compute the Master Secret, create and distribute shares of the Master Secret to two Distributed Private Key Generators (D-PKG), initialize and route the inter-process communication between the nodes, co-ordinate and computationally participate in the User System's IBE Private Key generation process.

Abstract: A sender private key is created from a master key. The sender private key and public information about a recipient is used to produce a secret key. Data is encrypted with the secret key. The encryption uses authentication data. The encrypted data is sent to the recipient. A recipient private key is created from the master key. The recipient private key is different from the sender private key. The recipient private key and public information about the sender is used to recreate the secret key. At the recipient, the secret key is used to decrypt the encrypted data and the authentication data is used to authenticate the data.