Secure Router Authentication

摘要

Systems and methods involving secure device authentication using aspects of a zero-knowledge password proof approach are disclosed. In one example, a device may generate a self-authenticating message including its identity and/or its capabilities. The device may use a secret value, random nonce, public ephemeral value (PEV), session key, and/or other values to generate the self-authenticating message. The secret value may be unknown to device receiving the self-authenticating message. With the use of pre-loaded values, including a verifier, the receiving device may compare a host-HMAC with the router-HMAC to verify the authenticity of the message. Such authentication may be used, inter alia, on an Internet Protocol network utilizing Neighbor Discovery protocol.

主权项

1. A method comprising:
generating, by a computing device, a message comprising information relating to at least one of an identity attribute and capability attribute associated with the computing device; hashing, by the computing device using at least a secret value unknown to self-configurable host apparatuses, at least a portion of the message to generate a self-authenticating message; and sending, by the computing device over a network, the self-authenticating message to at least one of the self-configurable host apparatuses, wherein a pre-loaded verifier value is known to the at least one self-configurable host apparatuses.