METHOD AND SYSTEM FOR PROVIDING CLIENT PRIVACY WHEN REQUESTING CONTENT FROM A PUBLIC SERVER

摘要

The method and system (100) operates to provide client privacy on the Internetwhen the client (102) requests content from a public application server (106).The method is well-suited to key management protocols that utilize the conceptof tickets. The client (102) name or identity is encrypted in all keymanagement messages where the client is requesting a ticket (TGS_REQ) for aspecific application server (106). The key management messages are between theclient and a key distribution center (KDC) (104) and between the client (102)and the specific application server (106). The KDC (104) does not provide theclient (102) name or identity in the clear in such messages. This prevents theclient's identity from being linked with the content provided by the specificapplication server (106), which results in improved user privacy.