Brevet : EP2289220 - Auxiliaire de réseau pour authentification entre un jeton et des vérificateurs

Titre

Auxiliaire de réseau pour authentification entre un jeton et des vérificateurs

N° et date de publication de la demande

EP2289220 - 02/03/2011

Type de la demande

A1

N° et date de dépôt

EP09743607.5 - 06/05/2009

N° et date de priorité

US11859308 - 09/05/2008

Famille de brevets

ATE542351T1 ; TW200952440A ; EP2289220A1 ; WO2009137621A1 ; KR20110009222A ; JP2011521548A ; US2009282243A1 ; CN102017578A

Abrégé

A puzzle-based protocol is provided that allows a token and verifier to agree on a secure symmetric key for authentication between the token and verifier. A token stores a secret key and one or more puzzle-generating algorithms. The verifier independently obtains a plurality of puzzles associated with the token, pseudorandomly selects at least one of the puzzles, and solves it to obtain a puzzle secret and a puzzle identifier. The verifier generates a verifier key based on the puzzle secret. The verifier sends the puzzle identifier and an encoded version of the verifier key to the token. The token regenerates the puzzle secret using its puzzle-generating algorithms and the puzzle identifier. The token sends an encoded response to the verifier indicating that it knows the verifier key. The token and verifier may use the verifier key as a symmetric key for subsequent authentications.