Authenticator, authenticatee and authentication method

Patent metadata

Field	Value
Publication number	US-9544138-B2
Application number	US-201213985431-A
Country	US
Kind code	B2
Filing date	Feb 17, 2012
Priority date	Jun 17, 2011
Publication date	Jan 10, 2017
Grant date	Jan 10, 2017

Abstract

According to one embodiment, an authentication method between an authenticatee which stores key information having a data structure composed of a key transition record, secret information XY of a matrix form, and secret information XYE which is created by encrypting the secret information XY, and an authenticator which authenticates the authenticatee, includes selecting, by the authenticator, a record corresponding to a device index of the authenticator from the key information which is received from the authenticatee, and decrypting the record by a device key, thereby taking out a key transition, and executing, by the authenticator, a decryption process on the secret information XYE, which is received from the authenticatee, by using the corresponding key transition, and sharing the secret information XY.

First claim

The invention claimed is:

1. An authentication method between an authenticatee device having a first memory which stores key information having a data structure composed of encrypted slot key sequences, secret information of a matrix form, and encrypted secret information which is created by encrypting the secret information, and an authenticator device having a second memory which authenticates the authenticatee device, comprising:
receiving, by the authenticator device, the encrypted secret information and the key information;
selecting an encrypted slot key sequence corresponding to a device index stored in the second memory of the authenticator device from the encrypted slot key sequences in the key information received from the authenticatee device, the device index corresponding to the authenticator device;
decrypting the encrypted slot key sequence by a device key stored in the second memory, to produce a sequence of a slot index and a slot key;
selecting, by the authenticator device, an element corresponding to the slot index from the encrypted secret information;
executing, by the authenticator device, a decryption process on the element of the encrypted secret information by using the slot key to produce an element of the secret information;
using a compression arithmetic circuit in the authenticatee device to perform an arithmetic operation on the element and produce an authentication value; and
authenticating the authenticatee device using the authentication value.

2. The method of claim 1 , further comprising:
receiving, by the authenticatee device, a random number B which is generated by the authenticator;
generating, by the authenticatee device, a random number A and data ν;
generating, by the authenticatee device, a random number D which is composed of at least a part of both of the generated random number A and the received random number B; and
generating, by the authenticatee device, data C by executing a compression operation using the random number D and the secret information.

3. The method of claim 2 , further comprising:
transmitting a calculated result Z, which is obtained from the data C and the data ν, to the authenticator device;
generating, by the authenticator device, a random number D which is composed of at least a part of both of the generated random number A and the received random number B;
generating, by the authenticator device, data C by executing a compression operation using the random number D and the secret information; and
executing, by the authenticator device, a determination process by using the received calculated result Z and the generated data C.

4. An authenticatee device comprising:
a memory configured to store key information having a data structure composed of encrypted slot key sequences which are created by encrypting sequences of a slot index and a slot key, secret information of a matrix form corresponding to the slot index, and encrypted secret information which is created by encrypting the secret information based on the slot key;
circuitry configured to
generate a random number A; and
generate a random number D which is composed of at least a part of both of the generated random number A and a random number B which is received;
a compression arithmetic circuit configured to generate data C by executing a compression operation with respect to the random number D and the secret information loaded from the memory;
the circuitry being further configured to generate data ν; and
an addition circuit configured to generate a value Z from the data ν and the data C.

5. The authenticatee device of claim 4 , wherein the secret information having the data structure of the matrix form is composed of first and second secret information, and
the encrypted secret information having the data structure of the matrix form is composed of encrypted first secret information and encrypted second secret information (data size: the second secret information <the first secret information, and the encrypted second secret information <the encrypted first secret information).

6. The authenticatee device of claim 5 , wherein the first secret information is identical in a group comprising a plurality of authenticatee devices, and
the second secret information is different between the authenticatee devices.

7. An authenticator device which authenticates an authenticatee device and includes a memory which stores key information having a data structure composed of encrypted slot key sequences, secret information of a matrix form, and encrypted secret information which is created by encrypting the secret information, the authenticator device comprising:
processing circuitry configured to:
select an encrypted slot key sequence corresponding to a device index of the authenticator from the encrypted slot key sequences which is received from the authenticatee device;
decrypt the encrypted slot key sequence by a device key, thereby producing a sequence of a slot index and a slot key;
select an element of corresponding to the slot index from the encrypted secret information which is received from the authenticatee device;
execute a decryption process on the element of the encrypted secret information, by using the slot key, to produce an element of the secret information;
generate a random number B;
generate a random number D which is composed of at least a part of both of the generated random number B and a random number A which is received from the authenticatee device;
generate data C by executing a compression operation using the random number D and the secret information;
select, from calculated results received from the authenticatee device, a calculated result Z corresponding to the slot index; and
execute a determination process by using the generated data C and the selected calculated result Z.

8. The authenticator device of claim 7 , wherein the secret information having the data structure of the matrix form is composed of first and second secret information, and
the encrypted secret information having the data structure of the matrix form is composed of encrypted first secret information and encrypted second secret information (data size: the second secret information <the first secret information, and the encrypted second secret information <the encrypted first secret information).

9. The authenticator device of claim 8 , wherein the first secret information is identical in a group comprising a plurality of authenticatee devices, and
the second secret information is different between the authenticatee devices.

10. An authentication method between an authenticatee device having a first memory which stores an authenticatee ID and secret information and an authenticator device having a second memory which stores an authenticator ID and unique secret information, comprising:
transmitting, by the authenticatee device, the authenticatee ID, which is requested, to the authenticator device;
executing, by the authenticator device, a non-linear process on the authenticatee ID, which has been acquired, and the unique secret information possessed by the authenticator device, thereby obtaining a unique value; and
executing, by the authenticatee device, a one-way function process on the authenticator ID, which has been transmitted, and the secret information possessed by the authenticatee device, thereby sharing the unique secret information;
receiving, by the authenticatee device, a random number B which is generated by the authenticator;
generating, by the authenticatee device, a random number A and data ν;
generating, by the authenticatee device, a random number D using the generated random number A and the received random number B;
generatin

Assignees

• Nagai Yuji
• Kato Taku
• Matsushita Tatsuyuki
• Toshiba Kk

Inventors

• Nagai Yuji
• Kato Taku
• Matsushita Tatsuyuki

Classifications

• H04L9/085 Primary

  Secret sharing or secret splitting, e.g. threshold schemes · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• H04L9/3271

  using challenge-response · CPC title

• H04L9/0819 Primary

  Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062) · CPC title