Abstract: A method for securely connecting to a remote server that provides improved Internet security. In the method, a client receives a request to connect to a remote server associated with a domain name. The client, when resolving the domain name, determines whether the remote server supports at least one predetermined IP layer security protocol. The client performs a key exchange protocol with the remote server to generate at least one shared secret in response to determining that the remote server supports the at least one predetermined IP layer security protocol. The client connects to the remote server using the at least one shared secret in the IP layer security protocol.

Abstract: A method for securely connecting to a remote server that provides improved Internet security. In the method, a client receives a request to connect to a remote server associated with a domain name. The client, when resolving the domain name, determines whether the remote server supports at least one predetermined IP layer security protocol. The client performs a key exchange protocol with the remote server to generate at least one shared secret in response to determining that the remote server supports the at least one predetermined IP layer security protocol. The client connects to the remote server using the at least one shared secret in the IP layer security protocol.

Abstract: A method for securely connecting to a remote server that provides improved Internet security. In the method, a client receives a request to connect to a remote server associated with a domain name. The client, when resolving the domain name, determines whether the remote server supports at least one predetermined IP layer security protocol. The client performs a key exchange protocol with the remote server to generate at least one shared secret in response to determining that the remote server supports the at least one predetermined IP layer security protocol. The client connects to the remote server using the at least one shared secret in the IP layer security protocol.

Abstract: Aspects may relate to performing an Internet Key Exchange (IKE) to create an IPsec security association (SA) between a first device and a second device based upon both an authentication header (AH) and an encapsulating security payload (ESP), free of creating a child security association. Information exchange may then be allowed between the first device and the second device based upon the IPsec SA.

Abstract: A method for securely connecting to a remote server that provides improved Internet security. In the method, a client receives a request to connect to a remote server associated with a domain name. The client, when resolving the domain name, determines whether the remote server supports at least one predetermined IP layer security protocol. The client performs a key exchange protocol with the remote server to generate at least one shared secret in response to determining that the remote server supports the at least one predetermined IP layer security protocol. The client connects to the remote server using the at least one shared secret in the IP layer security protocol.

Abstract: Apparatus, system and method for authenticating a device for secure network communication. Identification data is configured as a hash of a public key for identifying at least one of the device and/or a user associated with the device. An Internet Protocol (IP) message may be generated, wherein an IP source address in the IP message includes the identification data. The device may register with a server by transmitting the IP message and the public key and subsequently generate and transmit a second IP message, wherein an IP source address of the second IP message includes the identification data. The server may issue a challenge to the device in response to the second IP message, wherein the challenge is based at least in part on the identification data. After receiving the challenge, the device may transmit response data to the server for authenticating the device for secure network communication.

Abstract: A method for securely connecting to a remote server that provides improved Internet security. In the method, a client receives a request to connect to a remote server associated with a domain name. The client, when resolving the domain name, determines whether the remote server supports at least one predetermined IP layer security protocol. The client performs a key exchange protocol with the remote server to generate at least one shared secret in response to determining that the remote server supports the at least one predetermined IP layer security protocol. The client connects to the remote server using the at least one shared secret in the IP layer security protocol.

Abstract: At a transmitter node, a commitment value C is obtained as a function of a message m. The commitment value C and transmitter terms of use TA for the message m are then sent to a receiver node without disclosing the message m. A cryptographic receiver signature SB over the commitment value C and the transmitter terms of use TA is received from the receiver node, where the cryptographic receiver signature SB is signed with a private key kprv-B associated with the receiver node. The receiver signature SB may be authenticated using a public key kpuh-B for the receiver node. If the receiver signature SB is successfully authenticated, the message m and the receiver signature SB are signed using a private key kprv-A for the transmitter node to obtain a transmitter signature SA. The message m and the transmitter signature SA may then be sent to the receiver node.

Abstract: Apparatus, system and method for authenticating a device for secure network communication. A device may obtain identification data in the device, wherein the identification data is configured as a hash of a public key for identifying at least one of the device and/or a user associated with the device. An Internet Protocol (IP) message may be generated, wherein an IP source address in the IP message includes the identification data. The device may register with a server by transmitting the IP message and the public key and subsequently generate and transmit a second IP message after registering the device, wherein an IP source address of the second IP message includes the identification data. The server may issue a challenge to the device in response to the second IP message, wherein the challenge is based at least in part on the identification data. After receiving the challenge, the device may transmit response data to the server for authenticating the device for secure network communication.

Abstract: A method for securely connecting to a remote server that provides improved Internet security. In the method, a client receives a request to connect to a remote server associated with a domain name. The client, when resolving the domain name, determines whether the remote server supports at least one predetermined IP layer security protocol. The client performs a key exchange protocol with the remote server to generate at least one shared secret in response to determining that the remote server supports the at least one predetermined IP layer security protocol. The client connects to the remote server using the at least one shared secret in the IP layer security protocol.

Abstract: Aspects may relate to performing an Internet Key Exchange (IKE) to create an IPsec security association (SA) between a first device and a second device based upon both an authentication header (AH) and an encapsulating security payload (ESP), free of creating a child security association. Information exchange may then be allowed between the first device and the second device based upon the IPsec SA.