Method for checking the integrity of data, system and mobile terminal

• US 20100191966A1
• Filed: 03/29/2010
• Published: 07/29/2010
• Est. Priority Date: 02/01/2000
• Status: Active Grant

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Immonen, Olli
• Granted Patent: US 8,171,291 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04W 12/106 Packet or message integrity

Abstract

The invention relates to a method for checking the integrity of a message transmitted between a sender in a transmitting end and a recipient in a receiving end, in which method an authentication value is calculated for the first message and a random string is generated.

According to a method in the transmitting end an authentication value is generated from a message to be sent and the random string. A check code is formed from the authentication value and the random sting. The first message is transferred from a sender to a recipient through a first channel, and the check code is transferred through a second secure channel. In the receiving end a message is received through a first channel and the check code is received through a second secure channel. In the receiving end an authentication check formed at least based of the received message. The integrity of the received message is checked by comparing the predetermined check values in the receiving end.

Claims

1. A method, comprising:

generating a random string,

calculating an authentication value,

combining the authentication value and the random string to produce a check code,

transmitting a message through a first channel, and

transmitting the check code through a second channel,

wherein the second channel is a secure channel, and

wherein the check code is configured for use in verifying that a received message is the message transferred through the first channel.

2. The method according to claim 1, wherein the authentication value is calculated using the message and the random string.

3. The method according to claim 1, wherein the second channel is out-of-band.

4. The method according to claim 1, wherein the message contains bootstrap information.

5. An apparatus, comprising:

a generator configured to generate a random string;

a calculator configured to calculate an authentication value;

a combiner configured to combine the authentication value and the random string to produce a check code; and

a transmission block configured to transmit a message through a first channel, and further configured to transmit the check code through a second channel,

wherein the second channel is a secure channel, and

wherein the check code is configured for use in verifying that a received message is the message transferred through the first channel.

6. The apparatus according to claim 5, wherein the calculator is configured to calculate the authentication value using the message and the random string.

7. The apparatus according to claim 5, wherein the second channel is out-of-band.

8. The apparatus according to claim 5, wherein the apparatus comprises a wireless application protocol terminal.

9. A computer program product comprising computer program code embodied on a computer readable medium, the computer program code comprising instructions when executed by a processor for:

generating a random string,

calculating an authentication value,

combining the authentication value and the random string to produce a check code,

transmitting a message through a first channel, and

transmitting the check code through a second channel,

wherein the second channel is a secure channel, and

wherein the check code is configured for use in verifying that a received message is the message transferred through the first channel.

10. The computer program product according to claim 9, wherein the second channel is out-of-band.

11. A method, comprising:

receiving a message through a first channel,

receiving a check code through a second channel,

separating a first value and a second value from the check code,

generating an authentication check from the first value and the message, and

comparing the authentication check with the second value to determine whether the message received through the first channel is an authentic message used to produce the check code.

12. The method according to claim 11, wherein the first value is an authentication value calculated using the authentic message and a random string, and the second value is the random string.

13. The method according to claim 11, wherein the first value is a random string, and the second value is an authentication value calculated using the authentic message and the random string.

14. The method according to claim 11, wherein the second channel is a secure out-of-band channel.

15. An apparatus, comprising:

a receiver configured to receive a message through a first channel, and further configured to receive a check code through a second channel;

a control unit configured to separate a first value and a second value from the check code,

a generator configured to generate an authentication check from the first value and the message, and

a comparator configured to compare the authentication check with the second value to determine whether the message received through the first channel is an authentic message used to produce the check code.

16. The apparatus according to claim 15, wherein the first value is an authentication value calculated using the authentic message and a random string, and the second value is the random string.

17. The apparatus according to claim 15, wherein the first value is a random string, and the second value is an authentication value calculated using the authentic message and the random string.

18. The apparatus according to claim 15, wherein the second channel is a secure out-of-band channel.

19. A computer program product comprising computer program code embodied on a computer readable medium, the computer program code comprising instructions when executed by a processor for:

receiving a message through a first channel,

receiving a check code through a second channel,

separating a first value and a second value from the check code,

generating an authentication check from the first value and the message, and

comparing the authentication check with the second value to determine whether the message received through the first channel is an authentic message used to produce the check code.

20. The computer program product according to claim 19, wherein the first value is an authentication value calculated using the authentic message and a random string, and the second value is the random string.