Communication method and related apparatus

Patent metadata

Field	Value
Publication number	US-2025088847-A1
Application number	US-202418960141-A
Country	US
Kind code	A1
Filing date	Nov 26, 2024
Priority date	May 31, 2022
Publication date	Mar 13, 2025
Grant date	—

Abstract

A method includes: receiving a first message from a first node, where the first message includes a first key agreement parameter, the first key agreement parameter is obtained based on a first private key and an intermediate parameter, the intermediate parameter is obtained based on a security parameter and a common parameter, and the security parameter is a first password or a PSK; determining a first key based on the first key agreement parameter and a second private key; sending a second message to the first node, where the second message includes a second key agreement parameter, and the second key agreement parameter is obtained based on the second private key and the intermediate parameter; and obtaining the first key based on the first key agreement parameter and the second private key.

First claim

1 . A communication method, comprising:
receiving a first message from a first node, wherein the first message comprises a first key agreement parameter associated with a first private key and an intermediate parameter, the intermediate parameter is associated with a security parameter and at least one common parameter, the security parameter is a first password or a pre-shared key (PSK) between the first node and a second node, and the first password is an agreed access password between the first node and the second node; sending a second message to the first node, wherein the second message comprises a second key agreement parameter associated with a second private key and the intermediate parameter; and obtaining a first key based on the first key agreement parameter and the second private key.

2 . The method according to claim 1 , wherein the first key is used to obtain one or more of an encryption key, an integrity key, or an identity authentication key.

3 . The method according to claim 1 , further comprising:
receiving a third message from the first node, wherein the third message comprises first authentication information associated with a second key, and the second key is associated with the second key agreement parameter and the first private key; and verifying the first authentication information based on the first key.

4 . The method according to claim 3 , further comprising:
when verification on the first authentication information and integrity of the third message succeeds, sending an association establishment message to the first node.

5 . The method according to claim 1 , wherein the at least one common parameter comprises a first common parameter and a second common parameter that are related to a first elliptic curve, the first elliptic curve is an elliptic curve corresponding to a first key agreement algorithm, and the first key agreement algorithm is a two-basis password exponential key exchange (TBPEKE) algorithm.

6 . The method according to claim 5 , wherein the intermediate parameter satisfies the following formula:

b
=

U
+

s
*
V

,

wherein
b is the intermediate parameter, U and V are the at least one common parameter, s is the security parameter, * is an elliptic curve point multiplication operation, and + is an elliptic curve point addition operation.

7 . The method according to claim 5 , wherein the at least one common parameter comprises a cyclic group whose order is a prime number p, and two independent basis points U and V in the cyclic group.

8 . The method according to claim 6 , wherein the first key agreement parameter KEt satisfies the following formula:

KEt
⁢

=

SKt
*
b

,

the first key satisfies the following formula:

first
⁢

key
⁢

=

SKg
*
KEt

,

the second key agreement parameter KEg satisfies the following formula:

KEg
=

SKg
*
b

,

 and
the second key satisfies the following formula:

second
⁢

key

=

SKt
*
KEg

,

 wherein
SKt is the first private key, and SKg is the second private key.

9 . The method according to claim 5 , wherein a value range of the first private key is [1, p), and a value range of the second private key is [1, p), wherein p is an order of an elliptic curve used by the TBPEKE algorithm.

10 . The method according to claim 1 , wherein before receiving the first message from the first node, the method further comprises:
broadcasting a key agreement algorithm capability of the second node, wherein the key agreement algorithm capability of the second node represents a key agreement algorithm supported by the second node.

11 . The method according to claim 10 , wherein key agreement algorithms supported by the second node are sorted according to a priority sequence.

12 . The method according to claim 3 , wherein the first message further comprises a first fresh parameter;
the first authentication information is associated with the PSK, the second key, the second message, the first fresh parameter, and a key agreement algorithm capability of the second node; and the verifying the first authentication information based on the first key comprises: verifying the first authentication information based on the PSK, the first key, the second message, the first fresh parameter, and the key agreement algorithm capability of the second node.

13 . The method according to claim 1 , wherein the second message further comprises second authentication information and a second fresh parameter; and the method further comprises:
obtaining the second authentication information based on the PSK, the first key, the second fresh parameter, and the first message.

14 . A communication apparatus, comprising:
a communication interface configured to send and/or receive data; and at least one processor configured to invoke a computer program stored in at least one memory to perform operations, the operations including: receiving a first message from a first node, wherein the first message comprises a first key agreement parameter associated with a first private key and an intermediate parameter, the intermediate parameter is associated with a security parameter and at least one common parameter, the security parameter is a first password or a pre-shared key (PSK) between the first node and a second node, and the first password is an agreed access password between the first node and the second node; sending a second message to the first node, wherein the second message comprises a second key agreement parameter associated with a second private key and the intermediate parameter; and obtaining a first key based on the first key agreement parameter and the second private key.

15 . The communication apparatus according to claim 14 , wherein the first key is used to obtain one or more of an encryption key, an integrity key, or an identity authentication key.

16 . The communication apparatus according to claim 1

Assignees

• Huawei Tech Co Ltd

Inventors

• Wang Yong
• Yang Yanjiang

Classifications

• H04L9/3066

  involving algebraic varieties, e.g. elliptic or hyper-elliptic curves · CPC title

• H04W12/0431 Primary

  Key distribution or pre-distribution; Key agreement · CPC title

• H04W12/041

  Key generation or derivation · CPC title

• H04W12/06

  Authentication · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title