METHOD AND APPARATUS FOR VERIFYING CGA SIGNATURE

• US 20110197072A1
• Filed: 04/21/2011
• Published: 08/11/2011
• Est. Priority Date: 10/21/2008
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: SHEN, Shuo
• Granted Patent: US 8,589,692 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme
• CPC Class Codes: H04L 9/3252 using DSA or related signature schemes, e.g. elliptic based signatures, ElGamal or Schnorr schemes

Abstract

A method and apparatuses for verifying Cryptographically Generated Address (CGA) signature are provided. The method includes: receiving a message sent by a CGA address owner, wherein a RSA public key, a first RSA public key signature, a second public key, and a second public key signature are carried in the message, the first RSA public key binds one or more second public keys, and a part protected by the first public key signature includes the one or more second public keys; verifying the first RSA public key signature according to the message; extracting the second public key, and verifying the second public key signature. According to the method and apparatuses of the embodiment, the effect of supporting other public key can be achieved, the change of the IP address can be omitted, and public key deployment and computing resources are saved.

Claims

1. A method for verifying Cryptographically Generated Address (CGA) signature, comprising:

receiving a message sent by a CGA address owner, wherein a first Ron-Shamir-Adleman (RSA) public key, a first RSA public key signature, a second public key, and a second public key signature are carried in the message, the first RSA public key binds one or more second public keys, and a part protected by the first RSA public key signature includes the one or more second public keys;

verifying the first RSA public key signature according to the message;

extracting the second public key, and verifying the second public key signature.

2. The method according to claim 1, wherein the second public key is an RSA public key, and the corresponding second public key signature is an RSA public key signature.

3. The method according to claim 1, wherein the second public key is an Elliptic Curve Cryptography (ECC) public key, and the corresponding second public key signature is an ECC public key signature.

4. The method according to claim 1, wherein

a CGA interface identifier, which is generated according to a public key of the CGA address owner and auxiliary information by using a hash algorithm, is carried in the message.

5. The method according to claim 4, further comprising:

verifying the CGA address according to the CGA interface identifier contained in the message.

6. The method according to claim 5, wherein the verifying the CGA address according to the CGA interface identifier contained in the message comprises:

obtaining the public key of the CGA address owner and the auxiliary information by communicating with the CGA address owner;

computing another CGA interface identifier according to the public key of the CGA address owner and the auxiliary information by using the hash algorithm; and

verifying the CGA address by comparing the computed CGA interface identifier and the CGA interface identification contained in the message.

7. An apparatus for verifying Cryptographically Generated Address (CGA) signature, comprising:

a signature module, configured to add a first Ron-Shamir-Adleman (RSA) public key, a first RSA public key signature, a second public key, and a second public key signature to a message to be sent, wherein the first RSA public key binds one or more second public keys, and a part protected by the first RSA public key signature comprises the one or more second public keys; and

a sending module, configured to send the message.

8. An apparatus for verifying Cryptographically Generated Address (CGA) signature, comprising:

a receiving module, configured to receive a message sent by a CGA address owner, wherein a first Ron-Shamir-Adleman (RSA) public key, a first RSA public key signature, a second public key, and a second public key signature are carried in the message, the first RSA public key binds one or more second public keys, and a part protected by the first RSA public key signature includes the one or more second public keys; and

a verifying module, configured to verify the first RSA public key signature according to the message, extract the second public key, and verify the second public key signature.

9. The apparatus according to claim 8, wherein a CGA interface identifier, which is generated according to the public key of the CGA address owner and auxiliary information by using a hash algorithm, is carried in the message received by the receiving module.

10. The apparatus according to claim 9, wherein the verifying module is further configured to verify the CGA address according to the CGA interface identifier contained in the message.

11. The apparatus according to claim 8, wherein

the second public key is an RSA public key, and the corresponding second public key signature is an RSA public key signature.

12. The apparatus according to claim 8, wherein

the second public key is an Elliptic Curve Cryptography (ECC) public key, and the corresponding second public key signature is an ECC public key signature.