Secure Bootstrapping Architecture Method based on Password-Based Digest Authentication

摘要

A method, apparatus, and computer program product, in which a password-based digest access authentication procedure is used for performing authentication between a client and a server, wherein the authentication procedure is secured by at least one of modifying a digest-response parameter with a user password and generating a bootstrapped key based on the user password and at least one fresh parameter not used in a previous protocol run between the client and the server.

主权项

1. An apparatus, comprising:
one or more processors; and one or more memories including computer program code, the one or more memories and the computer program code configured, with the one or more processors, to cause the apparatus to perform at least the following: a) authenticate at a bootstrapping server a user device to the bootstrapping server using a digest access authentication procedure based on a password; b) establish at the bootstrapping server a shared key between the user device and the bootstrapping server; c) secure the authentication procedure at the bootstrapping server using a key derivation function, wherein the key derivation function calculates a modified digest response parameter; and d) generate at the bootstrapping server a bootstrapped key to serve as the shared key based on the digest response parameter, wherein at the bootstrapping server the digest response parameter is determined to have not been used in a previous protocol run between the user device and the bootstrapping server.