Communicating an identity to a server

摘要

An identity is communicated by a client device to a server without requiring the identity to be disclosed to eavesdroppers and without requiring the use of symmetric or asymmetric cryptography. In one example, the identity is an identity of the client device, where the identity has been assigned to the client device by the server through the provisioning of a unique subset of client-identifying keys. In another example, the identity is an identity of a group shared secret that has been provisioned by the server to the client device.

主权项

1. A method to be performed by a client device, the method comprising:
receiving, via a hardware-implemented communication interface of the client device, a unique subset of M client-identifying keys from a provisioning server; upon determining a need to communicate an identity of the client device to a server, calculating for each of the M client-identifying keys a hash of a combination comprising the client-identifying key and a current instance of a modulating value; and communicating the identity of the client device to the server by communicating to the server, via the communication interface, a message comprising a hash-dependent value for each hash, where each hash-dependent value comprises one of the respective hash, a portion of the respective hash, or a value dependent on the respective hash, wherein the need is determined in response to the client device requesting access to one or more services from the server, the server requiring identification of the client device.