Message authentication apparatus and method based on public-key cryptosystems

Patent metadata

Field	Value
Publication number	US-10659232-B2
Application number	US-201515302947-A
Country	US
Kind code	B2
Filing date	Apr 9, 2015
Priority date	Apr 9, 2014
Publication date	May 19, 2020
Grant date	May 19, 2020

Abstract

Disclosed is an authentication apparatus using a public key encryption algorithm. An apparatus according to an embodiment generates a first instant public key through a random number generation process in response to an electronic signature generation request corresponding to a message. Further, the apparatus calculates and uses a first instant private key making a pair with the first instant public key, using the first instant public key.

First claim

The invention claimed is:

1. An authentication apparatus comprising at least one processor, the authentication apparatus for performing an authentication process based on an algorithm of public-key cryptosystems, and the authentication apparatus at least temporarily implemented through the at least one processor, the authentication apparatus comprising:
a generator storing instructions executable by the at least one processor to generate a random first instant public key for a message in response to a request for an electronic signature corresponding to the algorithm;
a calculator storing instructions executable by the at least one processor to calculate a first instant private key based on the first instant public key and the algorithm, the first instant private key to be paired with the first instant public key in the algorithm; and
a processing unit storing instructions executable by the at least one processor to generate the electronic signature based on the algorithm using the first instant private key and further based on the message;
wherein the first instant public key is instantly and temporarily generated for the authentication process such that a second instant public key will be different from the first instant public key, and each instant private key is calculated based on a correspondingly generated instant public key.

2. The authentication apparatus of claim 1 , further comprising:
a communicator storing instructions executable by the at least one processor to transmit the message in addition to the electronic signature and the first instant public key to a counterpart apparatus.

3. The authentication apparatus of claim 2 , wherein, in response to a request of retransmission being received from the counterpart apparatus, the generator generates the second instant public key based on a verification that a communication error is absent in response to a communication acknowledgement (ACK) being received.

4. The authentication apparatus of claim 1 , wherein the generator generates the first instant public key based on a random number generating process.

5. The authentication apparatus of claim 4 , further comprising:
a physically unclonable function (PUF) to provide a hardware fingerprint using a randomly occurring process variation;
wherein the random number generating process includes a random number generating algorithm using the hardware fingerprint as an original value.

6. The authentication apparatus of claim 4 , wherein, based on a verification that the first instant private key to be paired with the first instant public key is absent in response to a result of the calculating, the generator generates the second instant public key and the calculator calculates a second instant private key to be paired with the second instant public key in the algorithm.

7. The authentication apparatus of claim 6 , wherein the generator provides and determines a number obtained by adding an integer of 2 to the first instant public key as the second instant public key instead of performing the random number generating process to generate the second instant public key.

8. The authentication apparatus of claim 6 , wherein the first instant private key calculated by the calculator includes a first dP value and a first dQ value when the algorithm is a Rivest Shamir Adleman-Chinese remainder theorem (RSA-CRT) algorithm and, based on a verification that either one of the first dP value and the first dQ value is absent in response to the result of the calculating, the generator generates the second instant public key differing from the first instant public key and the calculator calculates a second dP value and a second dQ value to be paired with the second instant public key in the algorithm.

9. An authentication apparatus, the authentication apparatus including at least one processor, the authentication apparatus for authenticating an electronic signature transmitted by a counterpart apparatus based on an algorithm of public-key cryptosystems, and the authentication apparatus at least temporarily implemented through the at least one processor, the authentication apparatus comprising:
a processing unit storing instructions executable by the at least one processor to authenticate the electronic signature of a message using a pre-stored fixed public key of the counterpart apparatus and a first instant public key that is instantly generated by the counterpart apparatus responsive to a request for the electronic signature for the message and transmitted with the electronic signature;
wherein the processing unit stores further instructions to calculate instant private keys based on each generated instant public key;
wherein the first instant public key is instantly and temporarily generated for an authentication process such that a second instant public key will be different from the first instant public key.

10. The authentication apparatus of claim 9 , further comprising:
a verifier storing instructions executable by the at least one processor to verify that the first instant public key is an invalid value when the first instant public key is not an odd number greater than or equal to 3.

11. The authentication apparatus of claim 9 , further comprising:
a verifier storing instructions executable by the at least one processor to verify that the first instant public key is an invalid value when the first instant public key is repeatedly generated.

12. An authentication apparatus comprising at least one processor, the authentication apparatus at least temporarily implemented through at the least one processor, the authentication apparatus comprising:
a verifier storing instructions executable by the at least one processor to verify whether a first instant public key received from a counterpart apparatus is a valid value, wherein the first instant public key is generated for a message by the counterpart apparatus in response to a request for an electronic signature; and
a processing unit storing instructions executable by the at least one processor to encode data to be transmitted using the first instant public key and a fixed public key of the counterpart apparatus when the first instant public key is the valid value, and the processing unit storing further instructions to calculate instant private keys based on each generated instant public key;
wherein the first instant public key is instantly and temporarily generated for an authentication process such that a second instant public key will be different from the first instant public key.

13. The authentication apparatus of claim 12 , wherein the first instant public key is generated in the counterpart apparatus based on a random number generating process.

14. The authentication apparatus of claim 12 , wherein the verifier verifies that the first instant public key is an invalid value when the first instant public key is not an odd number greater than or equal to 3.

15. The authentication apparatus of claim 12 , wherein the verifier verifies that the first instant public key is an invalid value when the first instant public key is repeatedly used a number of times greater than or equal to a predetermined number of reuse times.

Assignees

• Ictk Holdings Co Ltd
• Iucf Hyu

Inventors

• Kim Dong Kyue
• Choi Byong Deok
• Kim Dong Hyun
• Park Sang Seon

Classifications

• H04L9/30

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L9/3249 Primary

  using RSA or related signature schemes, e.g. Rabin scheme · CPC title

• H04L9/0866

  involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics · CPC title

• H04L9/302

  involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes · CPC title