Computer-implemented method for secure communication, computer-readable medium, and system for secure communication

Abstract

The present disclosure is directed towards a computer-implemented method for secure communication between a first entity (A) and a second entity (B). The first entity (A) is associated with a first public key (PKA) and a corresponding first private key (SKA), and the second entity (B) is associated with a second public key (PKB) and a corresponding second private key (SKB). The method comprises the steps of: a) requesting, by the second entity (B), the first public key (PKA) from a communication network security database, in particular hosted on a server (20); b) receiving, by the second entity (B), at least the following data: - the first public key (PKA); - a first key verification mechanism (IPA) associated with the first public key (PKA); - database integrity data (RH) related to the communication network security database; c) verifying, by the second entity (B), the first public key (PKA) using the first key verification mechanism (IPA); d) sending, by the second entity (B) to the first entity (A), at least the following data: - the first key verification mechanism (IPA); - the database integrity data (RH); and - a first message (M1) being asymmetrically encrypted with the first public key (PKA) and signed with the second private key (SKB); e) verifying, by the first entity (A), the first public key (PKA) using the first key verification mechanism (IPA); f) decrypting, by the first entity (A), the first message (M1) using the first private key (SKA); g) verifying, by the first entity (A), an integrity and authenticity of the first message (M1) using the second public key (PKB).

Images