Abstract: During pairing between a connecting device and a server, cryptographic information of the connecting device is mapped to symbols and displayed, in a random sequence, on the connecting device. An operator, who is authorizing the connecting device to establish a trusted connection to the server, is provided the symbols in a different sequence from the random sequence. The operator is asked to put the symbols into the random sequence, a candidate validation code is generated from the operator-provided sequence and confirmed by the connecting device when an actual validation code generated by the connecting device for the random sequence matches the candidate validation code. The entropy/effort entered by operator is smaller than entropy of the underlying cryptographic information, but the full extent of the underlying cryptographic information is reliably verified by the operator action.

Abstract: During pairing between a connecting device and a server, cryptographic information of the connecting device is mapped to symbols and displayed, in a random sequence, on the connecting device. An operator, who is authorizing the connecting device to establish a trusted connection to the server, is provided the symbols in a different sequence from the random sequence. The operator is asked to put the symbols into the random sequence, a candidate validation code is generated from the operator-provided sequence and confirmed by the connecting device when an actual validation code generated by the connecting device for the random sequence matches the candidate validation code. The entropy/effort entered by operator is smaller than entropy of the underlying cryptographic information, but the full extent of the underlying cryptographic information is reliably verified by the operator action.

Abstract: During a pairing process between a connecting device and a server, a shared certificate is translated into a graphical scene by a validating client device of the server and the connecting device and the corresponding graphical scenes are independently displayed on each device for visual comparison by an operator of the validating client device. A validation word or code is also presented on the connecting device. When the validation word or code is correctly entered into a pairing validation interface on the client device by the operator, the server permits the connecting device to pair/connect with the server. In an embodiment, even single bit differences between the shared certificate expected by the server creates significant differences in the graphical scene depicted on the connecting device from that which is depicted on the client device.