Token for securing communication

摘要

In general, the invention relates to a method for performing a command on a token. The method includes receiving a first command authentication message digest (CAMD), a command, and scrambled data from a sender, and making a first determination that the sender is allowed to send commands to the token. The method further includes, based on the first determination, generating a second CAMD on the token using the command, the scrambled data, and an Administrative Command Authentication Secret (ACAS), making a second determination that the first CAMD and the second CAMD match, and based on the second determination, performing the command by the token.

主权项

1. A method for performing a command on a token, comprising:
receiving a first command authentication message digest (CAMD), a command, and scrambled data from a sender; making a first determination that the sender is allowed to send commands to the token; based on the first determination:
generating a second CAMD on the token using the command, the scrambled data, and an Administrative Command Authentication Secret (ACAS);making a second determination that the first CAMD and the second CAMD match; and based on the second determination, performing the command by the token, wherein making the first determination comprises determining whether the sender provided the token a first one-time password (OTP) that matches a second OTP on the token and wherein the second OTP is obtained from a portion of a message digest generated using a challenge, and an administrator secret, and an n-bit generator, wherein the token generates the challenge.