Implicitly certified digital signatures

• US 10,652,026 B2
• Filed: 10/03/2018
• Issued: 05/12/2020
• Est. Priority Date: 06/10/2011
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Zaverucha, Gregory Marc, Kravitz, David William, Brown, Daniel Richard L.
• Primary Examiner(s): Henning, Matthew T
• Application Number:
  US16/150,930
• Publication Number:
  US 20200028694A1
• Time in Patent Office: 587 Days
• CPC Class Codes: H04L 9/3252 using DSA or related signature schemes, e.g. elliptic based signatures, ElGamal or Schnorr schemes
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

In some aspects, a message and an implicit certificate are accessed. The implicit certificate is associated with an entity. A modified message is generated by combining the message with a value based on the implicit certificate. A digital signature can be generated based on the modified message and transmitted to a recipient. In some aspects, a digital signature from an entity and a message to be verified based on the digital signature are accessed. An implicit certificate associated with the entity is accessed. A modified message is generated by combining the message with a value based on the implicit certificate. The message is verified based on the digital signature and the modified message.

Claims

1. A first terminal, comprising:

at least one hardware processor; and

a non-transitory computer-readable storage medium coupled to the at least one hardware processor and storing programming instructions for execution by the at least one hardware processor, wherein the programming instructions, when executed, cause the at least one hardware processor to perform operations comprising;

receiving, by the first terminal, a first modified message and a digital signature from a second terminal over a data communication network;

obtaining, by the first terminal, an unmodified message associated with the first modified message;

obtaining, by the first terminal, an implicit certificate associated with the second terminal, wherein the implicit certificate includes a public key reconstruction value of the second terminal, the public key reconstruction value of the second terminal is different than a public key of the second terminal, and the public key of the second terminal is reconstructed using the public key reconstruction value of the second terminal and a public key of a certificate authority;

generating, by the first terminal, a hash value based on the implicit certificate;

generating, by the first terminal, a second modified message by combining the unmodified message with the hash value and the public key reconstruction value of the second terminal; and

verifying, by the first terminal, the unmodified message based on the digital signature and the second modified message.

2. The first terminal of claim 1, wherein verifying the unmodified message comprises:

comparing the first modified message to the second modified message.

3. The first terminal of claim 1, wherein obtaining the unmodified message comprises deriving the unmodified message from the first modified message.

4. The first terminal of claim 1, wherein the second modified message is generated by combining the unmodified message with a value based on additional information included in the implicit certificate.

5. The first terminal of claim 1, wherein obtaining the implicit certificate comprises accessing an implicit certificate issued by the certificate authority, and the second modified message is generated by combining the unmodified message with a value based on the public key of the certificate authority.

6. The first terminal of claim 1, wherein obtaining the implicit certificate comprises accessing an implicit certificate issued by a first certificate authority that is subordinate to a second certificate authority, and the second modified message is generated by combining the unmodified message with at least one of:

a public key of the first certificate authority;

a public key of the second certificate authority;

an implicit certificate of the first certificate authority;

or

an implicit certificate of the second certificate authority.