Method for the protected transmission of data

Patent metadata

Field	Value
Publication number	US-9602487-B2
Application number	US-201414482278-A
Country	US
Kind code	B2
Filing date	Sep 10, 2014
Priority date	Sep 11, 2013
Publication date	Mar 21, 2017
Grant date	Mar 21, 2017

Abstract

A method for authenticating a transmitter to a receiver, as well as for the protected transmission of messages; both the transmitter, as well as the receiver at least having a first common key; a random number, as well as at least one first partial code of a first code calculated from the random number with the aid of the first key from the receiver to the transmitter being transmitted in a synchronization message; the first partial code being checked by the transmitter; a first counter being generated by the transmitter; useful data, as well as a first partial counter of first counter and at least one second partial code of a second code calculated with the aid of a second key being transmitted by the transmitter to the receiver in a message; and the receiver checking the second partial code to verify the transmitter, as well as the transmitted message.

First claim

What is claimed is:

1. A method of a communications network for authenticating a transmitter device of the network to a receiver device of the network for a protected transmission of messages by the transmitter device to the receiver device and over the communications network, the transmitter device and the receiver device, the method comprising:
generating, by the receiver device, a first code by applying a first common key to a random number;
transmitting, by the receiver device, to the transmitter device, and in a synchronization message, (a) the random number and (b) a first partial code, wherein the first partial code is composed of a first subsection of, and extracted from, the first code;
generating, by the transmitter device and using the first common key and the random number received from the receiver device, a second code, wherein a first subsection of the second code forms a second partial code and a second subsection of the second code forms a first counter;
determining, by the transmitter device, whether the second partial code matches the received first partial code;
generating, by the transmitter device and using the first counter and the first common key or a second common key, a third code, wherein a first subsection of the third code forms a third partial code;
conditional upon a result of the determination being that the first and second partial codes match, transmitting, by the transmitter device and to the receiver device, a data message that includes useful data, a first partial counter formed of a subsection of the first counter, and the third partial code;
generating, by the receiver device and using the first partial counter and the first common key or the second common key used by the transmitter device to generate the third code, a fourth code, wherein a first subsection of the fourth code forms a fourth partial code; and
comparing, by the receiver device, the fourth partial code to the third partial code to verify the transmitter device and the transmitted data message.

2. The method as recited in claim 1 , wherein the third code is generated by the transmitter device further based on the useful data and the first partial counter.

3. The method as recited in claim 1 , wherein a second subsection of the first code forms a second counter used by the receiver device for the verification.

4. The method as recited in claim 3 , wherein the second subsection of the first code is not transmitted in the synchronization message from the transmitter device to the receiver device.

5. The method as recited in claim 3 , wherein the generating of the fourth code includes adjusting the second counter to match the first counter using the transmitted first partial counter.

6. The method as recited in claim 3 , wherein the generation of the fourth code is further based on the useful data and the second counter.

7. The method as recited in claim 3 , wherein the second subsection of the first code and the second subsection of the second code are identical.

8. The method as recited in claim 1 , further comprising changing, by the transmitter device, the first counter following the transmission of the data message.

9. The method as recited in claim 8 , wherein the incrementing of the first counter is by one unit.

10. The method as recited in claim 8 , wherein the transmitter device and the receiver device are control units and the communications network is a Controller Area Network (CAN).

11. A method of a communications network for authenticating a transmitter device of the network to a receiver device of the network for a protected transmission of messages by the transmitter device to the receiver device and over the communications network, the method comprising:
transmitting, by the receiver device, to the transmitter unit, and in a synchronization message, a random number and a first partial code of a first code calculated from the random number using a first common key;
checking, by the transmitter unit, the first partial code;
generating, by the transmitter unit, a first counter;
transmitting, by the transmitter unit and to the receiver device, a data message that includes useful data, a first partial counter of the first counter, and a second partial code of a second code calculated using the first common key or a second common key;
generating, by the receiver device, a second counter from a portion of the first code;
checking, by the receiver device, the second partial code to verify the transmitter unit and the transmitted message, wherein the checking of the second partial code includes:
adjusting the second counter to the first counter using the transmitted first partial counter;
calculating a third code using the first common key or the second common key used for the calculation of the second code; and
comparing the second partial code transmitted by the transmitter device to a corresponding third partial code of the calculated third code.

12. The method as recited in claim 11 , wherein the receiver device calculates the third code from the useful data, the first partial counter, and the second counter.

13. A method of a communications network for authenticating a transmitter device of the network to a receiver device of the network for a protected transmission of messages by the transmitter device to the receiver device and over the communications network, the method comprising:
transmitting, by the receiver device, to the transmitter device, and in a synchronization message, a random number and a first partial code of a first code calculated from the random number using a first common key;
checking, by the transmitter device, the first partial code, wherein the checking of the first partial code includes:
calculating a second code from the transmitted random number, the calculation being performed using the first common key; and
comparing the first partial code to a corresponding second partial code of the calculated second code;
generating, by the transmitter device, a first counter;
transmitting, by the transmitter device and to the receiver device, a data message that includes useful data, a first partial counter of the first counter, and a third partial code of a third code calculated using the first common key or a second common key;
generating, by the receiver device, a second counter from a portion of the first code; and
checking, by the receiver device, the third partial code to verify the transmitter device and the transmitted message.

14. The method as recited in claim 13 , wherein the transmitter device uses a portion of the second code as a first counter.

15. The method as recited in claim 14 , wherein the portion of the second code is identical to the portion of the first code.

16. A transmitter unit, which is adapted for implementing a method for self-authenticating the transmitter unit to a receiver unit for a protected transmission of messages to the receiver unit over a communications network, the transmitter unit comprising:
processing circuitry; and
a network interface;
wherein:
the transmitter unit is configured to receive, via the network interface and from the receiver unit, a synchronization message that includes a random number and a first partial code;
the processing circuitry is configured to generate, using a first common key and the received random number, a first code;
a first subsection of the first code forms a second partial code and a second subsection of the first code forms a first counter;
the processing circuitry is configured to:
determine whether the second partial code, extracted from the first code, ma

Assignees

• Bosch Gmbh Robert

Inventors

• Kasper Bjoern
• Soenkens Andreas
• Schwepp Thorsten

Classifications

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L63/126

  the source of the received data · CPC title

• H04W56/001

  Synchronization between nodes · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title