1. A method by which a signed client certificate is created for use by a client device in establishing mutually authenticated secure communications with a backend server of an application service, the communications to be secured by a client privatepublic key pair, the backend server storing a validation server public key used by the backend server to confirm a certificate signature of the signed client certificate, comprising:
at the client device, generating a first message and sending it to a device validation server, the generating including (1) generating the client privatepublic key pair using a random number generator, (2) generating a certificate signing request including the client public key and a certificate hash value; (3) encrypting the certificate signing request together with a device-specific authentication token and a locator value for the backend server, the encrypting producing encrypted values and performed using a domain token shared among a plurality of client devices, and (4) forming the first message to include the encrypted values and a hash of the domain token;
at the device validation server, (1) receiving the first message and confirming the hash of the domain token, (2) decrypting the encrypted values using the domain token to obtain decrypted values including the certificate signing request, the device-specific authentication token and the locator value, (3) generating the certificate signature from the decrypted values using a digital signature process and a validation server private key, and (4) securely sending the certificate signature to the client device; and
at the client device, forming the signed client certificate including the client public key and the certificate signature received from the device validation server.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A macromolecule that is a functional heavy chain antibody, a functional single domain heavy chain antibody or a functional VH domain comprising a first immunoglobulin single variable domain having a first antigen or epitope binding specificity and a second immunoglobulin single variable domain having a second antigen or epitope binding specificity wherein one or both of said first and second variable domains bind to human serum albumin, and the first and the second immunoglobulin variable domains are heavy chain variable domains, wherein the first or second variable domains comprises a sequence selected from SEQ ID NOs. 112-116, and wherein the amino acid at position 103 of the functional heavy chain antibody, the functional single domain heavy chain antibody or the functional VH domain is arginine (R) or wherein the amino acid at position 103 is replaced with arginine (R), said position 103 determined according to Kabat numbering.
2. The macromolecule according to claim 1, wherein the first or second variable domains comprises SEQ ID NO. 112.