METHOD AND APPARUTUS FOR PROVIDING CROSS-AUTHENTICATION BASED ON SECRET INFORMATION

摘要

The present invention relates to a method and apparatus for mutual authentication based on confidential information. A method for mutual authentication in a vehicle controller operating in conjunction with an external device according to an embodiment of the present invention may comprise: a first step of transmitting random number S to the external device in response to an authentication request message received from the external device; a second step of generating variable i by using a first function employing random number S as a parameter; a third step of generating first session key Ks by using a second function employing variable i and previously stored secret key K as parameters; a fourth step of receiving a first response key from the external device; a fifth step of generating a second response key by using a third function employing random number S, variable i, and first session key Ks as parameters; and a sixth step of authenticating the external device based on whether the first response key is identical to the second response key. Accordingly, provided is an advantage in which the external device and the vehicle controller can be mutually authenticated based on confidential information.