| 摘要 |
<p>A method and system (100) for authenticating a public key of a server digital certificate of a third party online entity (130) is disclosed. The method includes establishing a secure, independent connection (140) between an aggregation server (110) and a mobile device (120), over which a request to authenticate a public key of the server digital certificate is received from the mobile device (120). The request includes an identifier of the third party online entity (130) with which the mobile device (120) seeks to communicate. The aggregation server (110) retrieves the server digital certificate (134) of the third party online entity (130) from the entity, obtains the public key (132) or a public key fingerprint from the server digital certificate (134); and transmits at least the obtained public key (132) or public key fingerprint, as the case may be, to the mobile device (120) so as to enable the mobile device (120) to unambiguously communicate or establish a connection (160) with the third party online entity (130).
</p> |
