Mutual authentication

1. A system for authenticating, comprising:

a first computing device, a second computing device and a server;

wherein the first computing device is configured to perform:

generating a first authentication token (AT), the first authentication token (AT) being a data structure to be used for authenticating the first computing device to the second computing device, and sending the first authentication token (AT) to the server;

wherein the server is configured to perform:

receiving and authenticating the first authentication token (AT), and

generating a second authentication token for the first computing device and sending the second authentication token (AT) to the first computing device;

wherein the first computing device is configured to perform:

receiving and authenticating the second authentication token (AT), thereby performing a mutual authentication of the first computing device and the server;

wherein the server is further configured to perform:

generating a third authentication token (AT) for the second computing device and sending the third authentication token to the first computing device;

wherein the first computing device is further configured to perform:

receiving the third authentication token (AT) and sending it to the second computing device;

wherein the second computing device is configured to perform:

receiving and authenticating the third authentication token (AT) thereby performing an authentication of the server and the first computing device;

wherein the second computing device is configured to further authenticate the server by:

generating a fourth authentication token (AT), and

sending the fourth authentication token to the server;

wherein the server is further configured to perform:

receiving and authenticating the fourth authentication token (AT), and

generating a fifth authentication token for the second computing device; and sending the fifth authentication token (AT) to the second computing device; and

wherein the second computing device is configured to perform:

receiving and authenticating the fifth authentication token (AT), thereby performing a mutual authentication of the second computing device and the server.

2. The system according to claim 1 , wherein the server is further configured to generate the third authentication token (AT) for the second computing device and send the third authentication token to the first computing device along with the second authentication token (AT).

3. The system according to claim 1 , wherein the server is further configured to generate a sixth authentication token (AT) for the first computing device and send the sixth authentication token (AT) to the second computing device, wherein the second computing device is further configured to perform receiving the sixth authentication token (AT) and sending the sixth authentication token (AT) to the first computing device, wherein the first computing device is configured to perform receiving and authenticating the sixth authentication token (AT) thereby performing an authentication of the server and the second computing device.

4. The system according to claim 3 , wherein the server is further configured to generate the sixth authentication token (AT) for the first computing device and send the sixth authentication token (AT) to the second computing device along with the fifth authentication token (AT).

5. The system according to claim 1 , wherein the system is an apparatus and the first computing device is an external device constructed to be installed in the apparatus and the apparatus is configured to execute the server or communicate with the server.

6. An authentication method, comprising the steps of:

generating, by a first computing device, a first authentication token (AT), being a data structure to be used for authenticating the first computing device to a second computing device; and

sending, by the first computing device, the first authentication token (AT) to a server;

receiving and authenticating, by the server, the first authentication token (AT);

generating, by the server, a second authentication token for the first computing device;

sending, by the server, the second authentication token (AT) to the first computing device;

receiving and authenticating, by the first computing device, the second authentication token (AT), thereby performing a mutual authentication of the first computing device and the server;

generating, by the server, a third authentication token (AT) for the second computing device and sending, by the server, the third authentication token (AT) to the first computing device;

receiving, by the first computing device, the third authentication token (AT) and sending, by the first computing device, the third authentication token (AT) to the second computing device; and

receiving and authenticating, by the second computing device, the third authentication token (AT) thereby performing an authentication of the server on behalf of the first computing device;

generating, by the second computing device, a fourth authentication token (AT) and sending, by the second computing device, the fourth authentication token to the server;

receiving and authenticating, by the server, the fourth authentication token (AT);

generating, by the server, a fifth authentication token for the second computing device and sending, by the server, the fifth authentication token (AT) to the second computing device, and

receiving and authenticating, by the second computing device, the fifth authentication token (AT), thereby performing a mutual authentication of the second computing device and the server.

7. A non-transitory computer readable storage medium encoded with instructions that, when executed on one or more processors, causes the one or more processors to perform the method according to claim 6 .