METHOD AND SYSTEM FOR PROVIDING CLIENT PRIVACY WHEN REQUESTING CONTENT FROM A PUBLIC SERVER

摘要

The method and system (100) operates to provide client privacy on the Intern et when the client (102) requests content from a public application server (106 ). The method is well-suited to key management protocols that utilize the conce pt of tickets. The client (102) name or identity is encrypted in all key management messages where the client is requesting a ticket (TGS_REQ) for a specific application server (106). The key management messages are between t he client and a key distribution center (KDC) (104) and between the client (102 ) and the specific application server (106). The KDC (104) does not provide th e client (102) name or identity in the clear in such messages. This prevents t he client's identity from being linked with the content provided by the specifi c application server (106), which results in improved user privacy.