Backup and invalidation of authentication credentials

• US 10,554,419 B2
• Filed: 07/17/2017
• Issued: 02/04/2020
• Est. Priority Date: 06/27/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Camenisch, Jan L., Krenn, Stephan, Lehmann, Anja, Neven, Gregory
• Primary Examiner(s): Turchen, James R
• Application Number:
  US15/651,365
• Publication Number:
  US 20170317839A1
• Time in Patent Office: 932 Days
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3218 using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A method for a re-issuance of an attribute-based credential of an issuer of the attribute-based credential for a user may be provided. The user is holding backup values derived from a first credential previously obtained from the issuer, wherein the first credential is built using at least a first value of at least one authentication pair. The method comprises receiving by the issuer from the user a set of values derived from the backup values comprising a second value of the at least one authentication pair, validating by the issuer that the second value is a valid authentication answer with respect to the first value and whether the set of values was derived from a valid first credential, and providing by the issuer a second credential to the user based on the first set of values.

Claims

1. A method for a re-issuance of an attribute-based credential of an issuer of the attribute-based credential for a user, wherein the user stores backup values in a private environment separated from the attribute-based credential of the user, wherein the backup values are derivable from a first credential previously obtained from the issuer and not disclosed to the issuer, wherein the first credential is built using at least a first value of at least one authentication pair, the method comprising:

receiving, by the issuer from the user, a set of values from the backup values comprising a second value of the at least one authentication pair; and

based on validating, by the issuer, that the second value is a valid authentication answer with respect to the first value and whether the set of values was derived from a valid first credential;

invalidating, by the issuer, the first credential; and

based on invalidating the first credential providing, by the issuer, a second credential to the user, wherein the second credential is based on the set of values.

2. The method according to claim 1, further comprising:

invalidating the first credential before the providing by the issuer a second credential is performed.

3. The method according to claim 1, wherein the backup values are built using the at least one authentication pair and attributes to be carried over to the second credential, and the method further comprises:

determining a cryptographic proof of possession of the first credential revealing the first value of the at least one authentication pair.

4. The method according to claim 3, wherein the backup values also comprise a second authentication pair, which is also used to build the first credential, and a presentation token revealing a first value of the second authentication pair for the first credential.

5. The method according to claim 3, wherein the determination of the backup values further comprises:

determining a cryptographic commitment to each attribute value to be carried over to the second credential; and

extending the cryptographic proof that these attribute values to be carried over to the second credential have also been used to build the first credential.

6. The method according to claim 1, wherein the second credential is built from the cryptographic commitments that is comprised in the backup values.

7. The method according to claim 1, wherein a re-issuance of the presentation token proves that the same first value of a second authentication pair is comprised in the invalidation commitment and has been used to build the first credential.

8. The method according to claim 1, wherein upon invalidating the first credential an invalidation authority sends a digital signature on the first value of the second authentication pair to the user.

9. The method according to claim 1, further comprising:

during running a re-issuance protocol and before providing by the issuer a second credential, receiving from the user proof in zero-knowledge that the user owns a digital signature on the same second value of the second authentication pair that is also comprised in the invalidation commitment.

10. The method according to claim 9, further comprising:

checking by the issuer that first value of the first authentication pair has never been used for a re-issuance session before.

11. The method according to claim 1, wherein an invalidation authority of the first credential and the issuer are identical.

12. A re-issuance system for an attribute-based credential of an issuer of the attribute-based credential for a user, wherein the user stores backup values in a private environment separated from the attribute-based credential of the user, wherein the backup values derivable from a first credential previously obtained from the issuer and not disclosed to the issuer, wherein the credential comprises a first value of at least one authentication pair, the re-issuance system comprising:

a computer device having a processor and a tangible storage device; and

a program embodied on the storage device for execution by the processor, the program having a plurality of program instructions to;

receive, by the issuer from the user, a set of values derived from the backup values comprising a second value of the at least one authentication pair; and

based on validating, by the issuer, that the second value is a valid authentication answer with respect to the first value and whether the set of values was derived from a valid first credential;

invalidate, by the issuer, the first credential; and

based on invalidation of the first credential provide, by the issuer, a second credential to the user, wherein the second credential is based on the set of values.

13. The system according to claim 12, wherein the program instructions further comprise instructions to:

invalidate the first credential before the providing by the issuer a second credential is performed.

14. The system according to claim 12, wherein the backup values are built using the at least one authentication pair and attributes to be carried over to the second credential, and the program instructions further comprise instructions to:

determine a cryptographic proof of possession of the first credential revealing the first value of the at least one authentication pair.

15. The system according to claim 12, wherein the backup values also comprise a second authentication pair, which is also used to build the first credential, and a presentation token revealing a first value of the second authentication pair for the first credential.

16. A computer program product for a re-issuance of an attribute-based credential of an issuer of the attribute-based credential for a user, wherein the user stores backup values in a private environment separated from the attribute-based credential of the user, wherein the backup values derivable from a first credential previously obtained from the issuer and not disclosed to the issuer, wherein the credential comprises a first value of at least one authentication pair, the computer program product comprising a tangible storage device having program code embodied therewith, the program code executable by a processor of a computer to perform a method, the method comprising:

receiving, by the issuer from the user, a set of values from the backup values comprising a second value of the at least one authentication pair;

based on validating, by the issuer, that the second value is a valid authentication answer with respect to the first value and whether the set of values was derived from a valid first credential;

invalidating, by the issuer, the first credential; and

based on invalidating the first credential providing, by the issuer, a second credential to the user, wherein the second credential is based on the set of values.

17. The computer program product according to claim 16, wherein the method further comprises:

invalidating, by the issuer, the first credential before the providing by the issuer a second credential is performed.

18. The computer program product according to claim 16, wherein the backup values are built using the at least one authentication pair and attributes to be carried over to the second credential, and the method further comprises:

determining, by the issuer, a cryptographic proof of possession of the first credential revealing the first value of the at least one authentication pair.

19. The computer program product according to claim 16, wherein the backup values also comprise a second authentication pair, which is also used to build the first credential, and a presentation token revealing a first value of the second authentication pair for the first credential.

20. The computer program product according to claim 18, wherein the determination of the backup values further comprises:

determining, by the issuer, a cryptographic commitment to each attribute value to be carried over to the second credential; and

extending, by the issuer, the cryptographic proof that these attribute values to be carried over to the second credential have also been used to build the first credential.