Authentication of a device

Patent metadata

Field	Value
Publication number	US-10579790-B2
Application number	US-201816015107-A
Country	US
Kind code	B2
Filing date	Jun 21, 2018
Priority date	Mar 28, 2014
Publication date	Mar 3, 2020
Grant date	Mar 3, 2020

Abstract

Pairing data associated with a second device may be received at a first device. The pairing data may be received from a server. A first authentication proof may be generated based on the pairing data received from the server. A second authentication proof may be received from the second device. Furthermore, an authentication status of the second device may be updated based on a comparison of the first authentication proof that is based on the pairing data received from the server and the second authentication proof that is received from the second device.

First claim

What is claimed is:

1. A method comprising:
receiving, at a first device and from a server, pairing data associated with a second device, wherein the pairing data includes a value that is associated with an output value of an operation to be performed by the second device to generate the output value based on a key of the second device;
generating a first authentication proof based on the value of the pairing data received from the server;
receiving, from the second device, a second authentication proof; and
authenticating, by a processing device, the second device based on a comparison of the first authentication proof that is based on the value of the pairing data received from the server and the second authentication proof that is received from the second device.

2. The method of claim 1 , wherein the pairing data further includes a challenge data, and wherein the method further comprises:
transmitting the challenge data to the second device, wherein the second authentication proof is based on the challenge data.

3. The method of claim 1 , further comprising:
receiving a request from the second device to authenticate with the first device, wherein the request provides an identification of the second device; and
transmitting, to the server, the identification of the second device, wherein the pairing data is based on the identification of the second device.

4. The method of claim 1 , wherein the authentication of the second device corresponds to the first device interacting with the second device.

5. The method of claim 1 , further comprising:
generating a challenge value at the first device; and
transmitting the challenge value to the second device, wherein the first authentication proof and the second authentication proof are based on the challenge value.

6. The method of claim 1 , further comprising:
in response to authenticating the second device, transmitting, to the server, information identifying an authentication status of the second device with the first device.

7. A system comprising:
a memory; and
a processing device, operatively coupled with the memory, to:
receive, at a first device and from a server, pairing data associated with a second device, wherein the pairing data includes a value that is associated with an output value of an operation to be performed by the second device to generate the output value based on a key of the second device;
generate a first authentication proof based on the value of the pairing data received from the server;
receive, from the second device, a second authentication proof; and
authenticate the second device based on a comparison of the first authentication proof that is based on the value of the pairing data received from the server and the second authentication proof that is received from the second device.

8. The system of claim 7 , wherein the pairing data further includes a challenge data, and wherein the processing device is further to:
transmit the challenge data to the second device, wherein the second authentication proof is based on the challenge data.

9. The system of claim 7 , wherein the processing device is further to:
receive a request from the second device to authenticate with the first device, wherein the request provides an identification of the second device; and
transmit, to the server, the identification of the second device, wherein the pairing data is based on the identification of the second device.

10. The system of claim 7 , wherein the authentication of the second device corresponds to the first device interacting with the second device.

11. The system of claim 7 , wherein the processing device is further to:
generate a challenge value at the first device; and
transmit the challenge value to the second device, wherein the first authentication proof and the second authentication proof are based on the challenge value.

12. The system of claim 7 , wherein the processing device is further to:
in response to authenticating the second device, transmit, to the server, information identifying an authentication status of the second device with the first device.

13. A non-transitory computer readable medium comprising instructions, which when executed by a processing device, cause the processing device to perform operations comprising:
receiving, at a first device and from a server, pairing data associated with a second device, wherein the pairing data includes a value that is associated with an output value of an operation to be performed by the second device to generate the output value based on a key of the second device;
generating a first authentication proof based on the value of the pairing data received from the server;
receiving, from the second device, a second authentication proof; and
authenticating the second device based on a comparison of the first authentication proof that is based on the value of the pairing data received from the server and the second authentication proof that is received from the second device.

14. The non-transitory computer readable medium of claim 13 , wherein the pairing data further includes a challenge data, and wherein the operations further comprise:
transmitting the challenge data to the second device, wherein the second authentication proof is based on the challenge data.

15. The non-transitory computer readable medium of claim 13 , wherein the operations further comprise:
receiving a request from the second device to authenticate with the first device, wherein the request provides an identification of the second device; and
transmitting, to the server, the identification of the second device, wherein the pairing data is based on the identification of the second device.

16. The non-transitory computer readable medium of claim 13 , wherein the authentication of the second device corresponds to the first device interacting with the second device.

17. The non-transitory computer readable medium of claim 13 , wherein the operations further comprise:
generating a challenge value at the first device; and
transmitting the challenge value to the second device, wherein the first authentication proof and the second authentication proof are based on the challenge value.

Assignees

• Cryptography Res Inc

Inventors

• Jun Benjamin Che-Ming
• Orzen Matthew Evan
• Wittenauer Joel Patrick
• Woo Steven C

Classifications

• H04L9/3271

  using challenge-response · CPC title

• H04L9/321

  involving a third party or a trusted authority · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F21/44 Primary

  Program or device authentication · CPC title