Method and device for secure notification of identity

1. A method of secure notification of presence of an electronic device in a communications network, wherein a certificate is associated with an identity, the method comprising:

generating a salted hash of the certificate and a salt;

transmitting a message containing an address location identifying where to retrieve the salted hash;

receiving a request message responsive to the message; and

sending a reply message responsive to the request message, wherein the reply message includes the salt and a truncated salted hash of the certificate, the reply message excluding the identity.

2. The method of claim 1 wherein the message comprises a multicast message.

3. The method of claim 1 wherein the certificate includes the identity.

4. The method of claim 1 further comprising securely transmitting the certificate and the identity to a second electronic device through a secure communications channel.

5. The method of claim 4 wherein the second electronic device comprises a server.

6. The method of claim 1 wherein the identity represents one of the identity of the electronic device or the identity of a user associated with the electronic device.

7. The method of claim 1 wherein the certificate comprises a self-signed certificate.

8. The method of claim 1 further comprising establishing a secure connection in the communications network using the certificate.

9. An electronic device, comprising:

a communication subsystem for sending and receiving messages over a communications network;

a memory storing a certificate associated with an identity; and

a processor configured to:

generate a salted hash of the certificate and a salt;

transmit a message containing an address location identifying where to retrieve the salted hash;

receive a request message responsive to the message; and

send a reply message responsive to the request message, wherein the reply message includes the salt and a truncated salted hash of the certificate, the reply message excluding the identity.

10. A non-transitory computer readable medium containing computer-executable instructions that, when performed by a processor in an electronic device in a communications network, wherein a certificate is associated with an identity, cause the processor to:

generate a salted hash of the certificate and a salt;

transmit a message containing an address location identifying where to retrieve the salted hash;

receive a request message responsive to the message; and

send a reply message responsive to the request message, wherein the reply message includes the salt and a truncated salted hash of the certificate, the reply message excluding the identity.

11. A method of secure identification of a sending electronic device using a receiving electronic device, the method comprising:

storing one or more certificates in a memory of a receiving electronic device, wherein each of the certificates is associated with an identity;

receiving a message containing an address location identifying where to retrieve a salted hash of a certificate of the sending device;

transmitting a request message responsive to the message;

receiving a reply message responsive to the request message, wherein the reply message includes a salt and a received truncated salted hash of the certificate of the sending device, the reply message excluding the identity;

comparing the received truncated salted hash with truncated salted hashes of the one or more stored certificates; and

on a condition that the received truncated salted hash corresponds to one of the truncated salted hashes of the stored certificates, identifying the identity of the sending device as the identity associated with the received truncated salted hash.

12. The method of claim 11 wherein the message comprises a multicast message.

13. The method of claim 11 , further comprising securely receiving the one or more certificates and each associated identity from a server through a secure communications channel.

14. The method of claim 11 , further comprising initiating secure communications with the sending device.

15. The method of claim 11 wherein the identity comprises a user identity, a device identity, or both a user identity and a device identity.

16. The method of claim 11 wherein the identity represents a group of peer devices.

17. An electronic device, comprising:

a communication subsystem for sending and receiving messages over a network;

a memory storing a plurality of certificates, each certificate associated with an identity; and

a processor configured to:

receive a message containing an address location identifying where to retrieve a salted hash of a certificate of the sending device;

transmit a request message responsive to the message;

receive a reply message responsive to the request message, wherein the reply message includes a salt and a received truncated salted hash of the certificate of the sending device, the reply message excluding the identity;

compare the received truncated salted hash with truncated salted hashes of the plurality of stored certificates; and

on a condition that the received truncated salted hash corresponds to one of the truncated salted hashes of the stored certificates, identify the identity of the sending device as the identity associated with the received truncated salted hash.

18. A non-transitory computer readable medium containing computer-executable instructions that, when performed by a processor, cause the processor to:

store one or more certificates in a memory of a receiving electronic device, wherein each of the certificates is associated with an identity;

receive a message containing an address location identifying where to retrieve a salted hash of a certificate of the sending device;

transmit a request message responsive to the message;

receive a reply message responsive to the request message, wherein the reply message includes a salt and a received truncated salted hash of the certificate of the sending device, the reply message excluding the identity;

compare the received truncated salted hash with truncated salted hashes of the one or more stored certificates; and

on a condition that the received truncated salted hash corresponds to one of the truncated salted hashes of the stored certificates, identify the identity of the sending device as the identity associated with the received truncated salted hash.

19. A system for secure communications, the system comprising:

a communications network;

at least one sending electronic device configured to:

store a certificate associated with an identity;

generate a salted hash of the certificate and a salt;

transmit a message containing an address location identifying where to retrieve the salted hash; receive a request message responsive to the message; and

send a reply message responsive to the request message, wherein the reply message includes the salt and a truncated salted hash of the certificate, the reply message excluding the identity;

at least one receiving electronic device configured to:

store a plurality of certificates associated with one or more identities in a memory of the receiving device, receive the message containing an address location identifying where to retrieve a salted hash of a certificate of the sending device;

transmit the request message responsive to the message;

receive the reply message responsive to the request message, wherein the reply message includes a salt and a received truncated salted hash of the certificate of the sending device, the reply message excluding the identity;

compare the received truncated salted hash with truncated salted hashes of the plurality of stored certificates; and

on a condition that the received truncated salted hash corresponds to one of the truncated salted hashes of the stored certificates, identify the identity of the sending device as the identity associated with the received truncated salted hash.

20. The system of claim 19 further comprising a server configured to store a plurality of certificates and associated identities and to communicate with the at least one sending device and the at least one receiving electronic device.

21. A non-transitory computer readable medium containing computer-executable instructions that, when performed by a processor in an electronic device in a communications network, wherein a certificate is associated with an identity, cause the processor to:

generate a salted hash of the certificate and a salt;

transmit a multicast message containing an address location identifying where to retrieve the salted hash;

receive a request message responsive to the multicast message; and

send a reply message responsive to the request message, wherein the reply message includes the salt and a truncated salted hash of the certificate, the reply message excluding the identity.

22. A non-transitory computer readable medium containing computer-executable instructions that, when performed by a processor, cause the processor to:

store one or more certificates in a memory of a receiving electronic device, wherein each of the certificates is associated with an identity;

receive a multicast message containing an address location identifying where to retrieve a salted hash of a certificate of the sending device;

transmit a request message responsive to the multicast message;

receive a reply message responsive to the request message, wherein the reply message includes a salt and a received truncated salted hash of the certificate of the sending device, the reply message excluding the identity;

compare the received truncated salted hash with truncated salted hashes of the one or more stored certificates; and

on a condition that the received truncated salted hash corresponds to one of the truncated salted hashes of the stored certificates, identify the identity of the sending device as the identity associated with the received truncated salted hash.