Privacy preserving authentication and key agreement protocol for apparatus-to-apparatus communication

Patent metadata

Field	Value
Publication number	US-10757569-B2
Application number	US-201616323204-A
Country	US
Kind code	B2
Filing date	Aug 5, 2016
Priority date	Aug 5, 2016
Publication date	Aug 25, 2020
Grant date	Aug 25, 2020

Abstract

A method is disclosed, comprising obtaining, by a first apparatus, a first identifier associated with the first apparatus, wherein the first identifier is different from a second identifier associated with the first apparatus, providing, by the first apparatus, at least one message to at least one further apparatus of at least one further apparatus, wherein each of the at least one message comprises a key information of the first apparatus and is associated with the first identifier associated with the first apparatus, and determining, by the first apparatus, a session key of a communication session associated with the first apparatus and the at least one further apparatus, based on at least one message received, by the first apparatus, provided by at least one further apparatus of the at least one further apparatus, wherein each of the at least one message comprises a key information of the respective further apparatus and is associated with a first identifier associated with the respective further apparatus.

First claim

What is claimed is:

1. An apparatus comprising:
at least one processor; and
at least one memory including computer program code;
the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus at least to perform:
obtaining a first identifier associated with the apparatus, wherein the first identifier is different from a second identifier associated with the apparatus;
providing one or more messages to at least one further apparatus of a set of one or more apparatuses, wherein at least of the one or more messages comprises key information of the apparatus and is associated with the first identifier associated with the apparatus; and
determining a session key of a communication session associated with the apparatus and at least one further apparatus, based on one or more messages received from at least one further apparatus of the set of one or more apparatuses, wherein at least one of the messages comprises key information of the respective further apparatus and is associated with a first identifier associated with the respective further apparatus,
wherein the apparatus is associated with a public key and the public key can be determined based on the first identifier associated with the apparatus and a first hash function,
wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to perform at least one message of the one or more messages provided to at least one further apparatus of the set of one or more apparatuses:
determining a hash value based on the respective message and a second hash function;
determining a signature based on the hash value, the public key and a private key associated with the apparatus; and
providing the signature to the further apparatus associated with the respective message.

2. The apparatus according to claim 1 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to perform verifying at least one message of the one or more received messages.

3. The apparatus according to claim 2 , wherein said verifying comprises:
verifying the respective message based on a signature associated with the message and based on the hash value and a public key associated with the further apparatus associated with the message; wherein the public key can be determined based on the first identifier associated with the apparatus and a first hash function.

4. The apparatus according to claim 1 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to perform determining a first key hint, wherein the key information of a first message of the one or more messages by the apparatus comprises said first key hint.

5. The apparatus according to claim 1 , wherein a first received message of the one or more messages comprises a first key hint of the further apparatus associated with the first received message.

6. The apparatus of claim 5 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to perform determining a first key based on the first key hint of the further apparatus associated with the first received message, and, optionally, a second key based on the first key hint of the further apparatus associated with the second received message.

7. The apparatus according to claim 5 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to perform determining, based on the first key hint of the first received message, and, optionally, based on the first key hint of the second received message, a second key hint.

8. The apparatus of claim 1 , wherein said one or more messages received by the apparatus are a plurality of received messages, wherein at least one message of the plurality of received messages comprises at least one second key hint associated with at least one further apparatus of the set of one or more apparatuses.

9. The apparatus of claim 1 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to perform receiving information provided by a central network instance, the information comprising at least one of:
the first identifier associated with the apparatus, and/or
a first hash function, and/or
a second hash function, and/or
a third hash function, and/or
a generator g, and/or
a function e associated with bilinear pairing, and/or
a system public key, and/or
a public key associated with the apparatus, wherein the public key can be determined based on the first hash function and the first identifier associated with the apparatus, and/or
a private key associated with the apparatus corresponding to the public key associated with the apparatus, provided by the central network instance.

10. The apparatus of claim 1 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to perform:
communicating securely with one or more apparatuses of the at least one further apparatus during the communication session based on the determined session key, wherein the apparatus and the at least one further apparatus represent a group associated with the communication session; and revoking the group based on at least one of an expiration date associated with the session key of the communication session, and/or a change of membership in the group, wherein said revoking the group comprises determining a new session key.

11. The apparatus of claim 10 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to perform, if the expiration date associated with the session key is expired and there are changes of the membership in the group:
providing one or more messages to at least one further apparatus of the set of one or more apparatuses, wherein at least one of the one or more messages comprises key information of the apparatus and is associated with the first identifier associated with the apparatus; and
determining the new session key of the communication session associated with the apparatus and the at least one further apparatus, based on one or messages received from at least one further apparatus of the set of one or more apparatuses, wherein at least one of the one or more messages comprises key information of the respective further apparatus and is associated with a first identifier associated with the respective further apparatus, wherein the apparatus and the at least one further apparatus are members of the group after the membership in the group has changed.

12. A non-transitory computer readable medium comprising program instructions for causing an apparatus to perform at least the following:
obtaining a first identifier associated with the apparatus, wherein the first identifier is different from a second identifier associated with the apparatus;
providing one or more messages to at least one further apparatus of a set of one or more apparatuses, wherein at least one of the one or more messages comprises key information of the apparatus and is associated with the first identifier associated with the apparatus; and
determining a session key of a communication session associated with the apparatus and at least one further apparatus, based on one or more messages received from at least one further app

Assignees

• Nokia Technologies Oy

Inventors

• Wang Mingjun
• Yan Zheng

Classifications

• H04W12/047

  without using a trusted network node as an anchor · CPC title

• H04W12/71

  Hardware identity · CPC title

• H04W12/0471

  Key exchange · CPC title

• H04W12/50

  Secure pairing of devices · CPC title

• H04W12/041

  Key generation or derivation · CPC title