SECURE AUTHENTICATED CHANNEL

摘要

A protocol (i.e. method) and corresponding apparatuses for calculating a session key. Two peers with knowledge of a common Diffie-Hellman permanent key, K_perrn, and the identity and public key of the other peer. A first peer chooses a first ephemeral private key x and calculates the first corresponding ephemeral public key g^x, which is sent to the second peer. The second peer calculates a second ephemeral public key g^y in the same manner, and an ephemeral shared key K_eph, hashes g^y, K_eph, K_perm, and its identity, and sends g^y and the hash to the first peer. The first peer calculates K_eph, verifies the hash, and hashes g^x, K_eph, K_pem, and its identity, and sends it to the second peer that verifies this hash. Thereafter, both peers obtain a session key by hashing K_eph. The apparatuses may then use the session key to establish a secure authenticated channel (SAC).