Efficient authentication for mobile and pervasive computing

摘要

A method and system for authenticating messages is provided. A message authentication system generates an encrypted message by encrypting with a key a combination of a message and a nonce. The message authentication system generates a message authentication code based on a combination of the message and the nonce modulo a divisor. To decrypt and authenticate the message, the message authentication system generates a decrypted message by decrypting with the key the encrypted message and extracts the message and the nonce. The message authentication system then regenerates a message authentication code based on a combination of the extracted message and the extracted nonce modulo the divisor. The message authentication system then determines whether the regenerated message authentication code matches the original message authentication code. If the codes match, then the integrity and authenticity of the message are verified.

主权项

1. A method performed by a computing device to provide authentication for a message, the method comprising:
generating by the computing device an encrypted message by encrypting with an encryption key an encryption combination of the message and a nonce; generating by the computing device an authentication code based on a result of an authentication combination of the message and the nonce modulo a divisor; sending by the computing device the encrypted message and the authentication code to another computing device with access to the encryption key wherein upon receiving the encrypted message and the authentication code, the other computing device decrypts the received encrypted message with the encryption key and extracts the message and the nonce, regenerates the authentication code based on the authentication combination of the extracted message and the extracted nonce modulo the divisor, and when the generated authentication code matches the regenerated authentication code, verifies integrity and authenticity of the extracted message; and receiving the encrypted message and authentication code at the other computing device and verifying the integrity and authenticity of the encrypted message by decrypting the message, extracting the nonce, regenerating the authentication code, and comparing the regenerating authentication code to the generated authentication code.