发明名称 |
One way authentication |
摘要 |
A cryptosystem prevents replay attacks within existing authentication protocols, susceptible to such attacks but containing a random component, without requiring modification to said protocols. The entity charged with authentication maintains a list of previously used bit patterns, extracted from a portion of the authentication message connected to the random component. If the bit pattern has been seen before, the message is rejected; if the bit pattern has not been seen before, the bit pattern is added to the stored list and the message is accepted. |
申请公布号 |
US8938617(B2) |
申请公布日期 |
2015.01.20 |
申请号 |
US201213618358 |
申请日期 |
2012.09.14 |
申请人 |
Certicom Corp. |
发明人 |
Vanstone Scott A.;Vanstone Sherry E. |
分类号 |
G06F21/00;H04L9/32;H04L9/00;H04L29/06 |
主分类号 |
G06F21/00 |
代理机构 |
Dimock Stratton LLP |
代理人 |
Villiers Etienne de;Dimock Stratton LLP |
主权项 |
1. A method for a correspondent confirming originality and authenticity of a signed message generated and signed by another correspondent, the method comprising:
said correspondent receiving from said other correspondent said signed message, said signed message comprising information I, and a signature comprising a first signature component r, and a second signature component s; a cryptographic processor of said correspondent:
computing an ephemeral public key kP using said information I, said first signature component r, said second signature component s, and a long term public key A of said other correspondent;converting a first co-ordinate of kP into an integer;comparing said integer with said first signature component r;obtaining a subset f(r) from said first signature component r;comparing said subset f(r) with a list of subsets previously stored by said correspondent; and,verifying said signature and accepting said verification when said integer matches said first signature component r and said subset f(r) is not in the list. |
地址 |
Mississauga, Ontario CA |