Communicating an identity of a group shared secret to a server

摘要

An identity is communicated by a client device to a server without requiring the identity to be disclosed to eavesdroppers and without requiring the use of symmetric or asymmetric cryptography. In one example, the identity is an identity of the client device, where the identity has been assigned to the client device by the server through the provisioning of a unique subset of client-identifying keys. In another example, the identity is an identity of a group shared secret that has been provisioned by the server to the client device.

主权项

1. A method to be performed by a provisioning server, the method comprising:
assigning to each of L group shared secrets {gssq} its own unique subset of Mq of N group shared secret identifying keys; storing information from which it is determinable which unique subset of Mq of the N group shared secret identifying keys was assigned to each group shared secret gssq; provisioning one or more client devices {j} by:
assigning to each client device j its own subset of Pj of the L group shared secrets {gssq};providing to each client device j the Pj group shared secrets that were assigned thereto; andfor each of the Pj group shared secrets assigned to each client device j, providing to the client device j the Mq group shared secret identifying keys that were assigned to that group shared secret, wherein L, Pj, N, and Mq are positive integers, Pj is less than L, and Mq is less than N.