Communication protocol and method for authenticating a system

Patent metadata

Field	Value
Publication number	US-9660808-B2
Application number	US-19450405-A
Country	US
Kind code	B2
Filing date	Aug 1, 2005
Priority date	Aug 1, 2005
Publication date	May 23, 2017
Grant date	May 23, 2017

Abstract

One aspect relates to a communication protocol for communicating between one or more entities, such as devices, hosts or any other system capable of communicating over a network. A protocol is provided that allows communication between entities without a priori knowledge of the communication protocol. In such a protocol, for example, information describing a data structure of the communication protocol is transferred between communicating entities. Further, an authentication protocol is provided for providing bidirectional authentication between communicating entities. In one specific example, the entities include a master device and a slave device coupled by a serial link. In another specific example, the communication protocol may be used for performing unbalanced transmission between communicating entities.

First claim

What is claimed is:

1. A method for using a computer system to authenticate an external system, the computer system including a memory and a processor coupled to the memory, the memory including a public memory area and a private memory area, the public memory area being readable and writeable and including a first portion of memory, the method comprising acts of:
denying, by the computer system, access to the private memory area;
providing, to the external system by the computer system, write access to the public memory area;
generating, by the computer system, a secret key having a value based at least in part on data stored in the first portion of the public memory area, and based at least in part on values indicating portions of data to be used in generating the secret key;
receiving, by the computer system, a key from the external system; and
providing, to the external system by the computer system, access to the private memory area in response to verification that the received key has a value that matches the value of the secret key to authenticate the external system to the computer system.

2. The method according to claim 1 , wherein the act of generating the secret key includes an act of determining, based at least in part on data starting with the serial number of the computer system, the value of the secret key.

3. The method according to claim 2 , wherein the act of determining further comprises an act of calculating a checksum of the first portion of the public memory area.

4. The method according to claim 3 , wherein the act of calculating further comprises an act of initializing the checksum with a value of the first portion of the public memory area.

5. The method according to claim 1 , wherein the act of providing access to the public memory area includes an act of sending, by a master, contents of the public memory area to a slave.

6. The method according claim 5 , further comprising an act of storing, by the slave, the contents of the public memory area in a memory of the slave.

7. The method according to claim 5 , wherein the act of sending the contents of the public memory area is performed in response to receiving a request from the slave.

8. The method according to claim 5 , further comprising an act of determining a value of the secret key using at least one portion of the contents of the public memory area.

9. The method according to claim 8 , further comprising an act of initializing a starting value of the secret key to the at least one portion.

10. The method according to claim 9 , wherein the at least one portion is indicative of a model number of the master.

11. The method according to claim 9 , wherein the at least one portion is indicative of a date of manufacture of the master.

12. The method according to claim 7 , further comprising an act of translating, by the slave, an access request received from an entity to the request sent to the master.

13. The method according to claim 12 , further comprising an act of determining, by the slave, whether the entity is authorized to access the master.

14. A computer system for authenticating an external system, the computer system comprising:
a memory; and
a processor coupled to the memory and configured to:
allocate the memory into a private memory area and a public memory area, the public memory area being readable and writeable and including a first portion of memory;
deny access to the private memory area;
provide, to the external system, write access to the public memory area;
generate a secret key having a value based at least in part on data stored in the first portion of the public memory area, and further based at least in part on values designating portions of data to be used in generating the secret key;
receive a key from the external system; and
provide, to the external system, access to the private memory area in response to verification that the received key has a value that matches the value of the secret key to authenticate the external system to the computer system.

15. The computer system according to claim 14 , wherein the processor configured to generate the secret key is further configured to determine, based at least in part on data starting with the serial number of the computer system, the value of the secret key.

16. The computer system according to claim 15 , wherein the processor configured to determine is further configured to calculate a checksum of the first portion of the public memory area.

17. The computer system according to claim 16 , wherein the processor configured to calculate is further configured to initialize the checksum with a value of the first portion of the public memory area.

18. The computer system according to claim 14 , wherein the processor configured to provide access to the public memory area is further configured to send contents of the public memory area to a slave.

19. The computer system according to claim 18 , wherein the processor configured to send the contents is further configured send the contents of the public memory area in response to receiving a request from the slave.

20. The computer system according to claim 18 , wherein the processor is further configured to determine a value of the secret key using at least one portion of the contents of the public memory area.

Assignees

• Cohen Daniel C
• Spitaels James S
• Smith David Joseph
• Schneider Electric It Corp

Inventors

• Cohen Daniel C
• Spitaels James S
• Smith David Joseph

Classifications

• H04L2209/76

  Proxy, i.e. using intermediary entity to perform cryptographic operations · CPC title

• H04L9/3226 Primary

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L2209/805

  Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor · CPC title

• H04L9/3236

  using cryptographic hash functions · CPC title

• H04L67/125

  involving control of end-device applications over a network · CPC title