Authentication of a device

Patent metadata

Field	Value
Publication number	US-10019564-B2
Application number	US-201514670379-A
Country	US
Kind code	B2
Filing date	Mar 26, 2015
Priority date	Mar 28, 2014
Publication date	Jul 10, 2018
Grant date	Jul 10, 2018

Abstract

Pairing data associated with a second device may be received at a first device. The pairing data may be received from a server. A first authentication proof may be generated based on the pairing data received from the server. A second authentication proof may be received from the second device. Furthermore, an authentication status of the second device may be updated based on a comparison of the first authentication proof that is based on the pairing data received from the server and the second authentication proof that is received from the second device.

First claim

What is claimed is:

1. A method comprising:
receiving, at a first device and from a server, pairing data associated with a second device, the pairing data comprising a first value and a second value, wherein the first value of the pairing data is associated with an output value generated by the second device;
selecting, by the first device, a challenge information associated with the second device;
generating a first authentication proof based on the first value of the pairing data received from the server and the challenge information selected by the first device;
transmitting, by the first device, the second value of the pairing data to the second device;
receiving, by the first device and from the second device, a second authentication proof that is based on the challenge information selected by the first device and the output value that is based on the second value of the pairing data received from the server and transmitted to the second device by the first device; and
updating, by a processing device of the first device, an authentication status of the second device based on a comparison of the first authentication proof that is based on the first value of the pairing data received from the server and the second authentication proof that is received from the second device.

2. The method of claim 1 , wherein the second value of the pairing data corresponds to an additional challenge information, the method further comprising:
transmitting the additional challenge information from the first device to the second device after receiving the pairing data, wherein the second authentication proof is further based on the additional challenge information, and wherein the first authentication proof is based on the output value.

3. The method of claim 2 , wherein the output value further corresponds to a cryptographic operation that is based on a key associated with the second device and the additional challenge information.

4. The method of claim 1 , wherein updating the authentication status corresponds to allowing the second device to access a function of the first device when the first authentication proof matches the second authentication proof, and wherein the authentication status corresponds to not allowing the second device to access the function of the second device when the first authentication proof does not match the second authentication proof.

5. The method of claim 1 , further comprising:
transmitting the challenge information from the first device to the second device, wherein the first authentication proof is based on a cryptographic function using the challenge information and the first value of the pairing data received from the server, and
wherein the second authentication proof is based on the same cryptographic function using the challenge information and the output value, wherein the output value is based on a key associated with the second device and the second value of the pairing data transmitted by the first device to the second device.

6. The method of claim 1 , further comprising:
receiving a unique identification associated with the second device; and
transmitting, to the server, a request for the pairing data associated with the second device based on the unique identification associated with the second device.

7. The method of claim 1 , wherein the first device is configured to respond to a particular command from the second device when the authentication status information indicates a successful authentication based on the comparison of the first authentication proof and the second authentication proof.

8. A system comprising:
a memory; and
a processing device operatively coupled with the memory and to:
receive a request from a secondary device for authentication of the secondary device;
receive pairing data from a server based on an identification of the secondary device, wherein the pairing data comprises a first portion of pairing data and a second portion of pairing data, wherein the first portion of the pairing data is associated with an output value generated by the secondary device;
select, by a primary device, a challenge information associated with the secondary device;
generate a first proof based on the first portion of the pairing data and the selected challenge information;
transmit the second portion of the pairing data to the secondary device;
receive, by the primary device, a second proof from the secondary device that is based on the output value, the output value being based on the second portion of the pairing data received from the server and transmitted to the secondary device and the challenge information selected by the primary device; and
authenticate the secondary device based on the first proof and the second proof.

9. The system of claim 8 , wherein the challenge information corresponds to a random number, and wherein the processing device is further to:
generate the random number; and
transmit the random number to the secondary device, wherein the first proof is further based on the generated random number and the second proof is further based on the generated random number.

10. The system of claim 9 , wherein the processing device is further to:
generate a first cryptographic check using a first cryptographic function operating with the generated random number and the first portion of the pairing data; and
transmit the first cryptographic check to the secondary device.

11. The system of claim 10 , wherein the receiving of the second proof from the secondary device is in response to the first cryptographic check matching a second cryptographic check that is generated by the secondary device.

12. The system of claim 8 , wherein the server is associated with a plurality of pairing data, and wherein one pairing data of the plurality of pairing data is received at the first device based on the identification of the secondary device.

13. The system of claim 12 , wherein the processing device is further to:
transmit, to the server, information identifying an authentication status of the secondary device in view of the authentication of the secondary device that is based on the first proof and the second proof.

14. The system of claim 12 , wherein the first portion of pairing data is a result of a cryptographic operation with a key associated with the secondary device and the second portion of the pairing data, and wherein the second proof is based on the same cryptographic operation.

15. A non-transitory computer readable medium including data that, when accessed by a processing device, cause the processing device to perform operations comprising:
receiving, at a first device and from a server, a first output value and a first challenge data associated with a second device, wherein the first output value is associated with a second output value generated by the second device;
generating a first authentication proof based on a first cryptographic operation between the first output value received from the server and a generated number from the first device;
transmitting, by the first device, the first challenge data to the second device;
receiving, by the first device and from the second device, a second authentication proof that is generated based on a plurality of cryptographic operations, the second output value that is based on the first challenge data received from the server and transmitted to the second device, and the generated number from the first device; and
updating an authentication status of the second device based on a comparison of the first authentication proof with the second authentication proof that is received from

Assignees

• Cryptography Res Inc

Inventors

• Jun Benjamin Che-Ming
• Orzen Matthew Evan
• Wittenauer Joel Patrick
• Woo Steven C

Classifications

• H04L9/321

  involving a third party or a trusted authority · CPC title

• H04L9/3271

  using challenge-response · CPC title

• G06F21/44 Primary

  Program or device authentication · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title