METHOD AND DEVICE FOR EMITTING MESSAGES FOR GUARANTEEING THE AUTHENTICITY OF A SYSTEM AND METHOD AND DEVICE FOR VERIFYING THE AUTHENTICITY OF SUCH A SYSTEM

• US 20110216903A1
• Filed: 05/04/2009
• Published: 09/08/2011
• Est. Priority Date: 05/19/2008
• Status: Abandoned Application

• Current Assignee: Cassidian Limited (Airbus SE)
• Original Assignee: Cassidian Limited (Airbus SE)
• Inventors: Curabet, Dominique, Rousseau, Frédéric
• Application Number:
  US12/993,327
• Publication Number:
  US 20110216903A1
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G01S 19/03 Cooperating elements; Interaction or communication between different cooperating elements or between cooperating elements and receivers
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3255 using group based signatures, e.g. ring or threshold signatures

Abstract

The invention relates to a method for emitting messages in order to guarantee the authenticity of the system that emitted said messages. The method includes the following steps, namely: a step comprising the selection of a threshold value used in a threshold-based cryptographic scheme, which value is greater than or equal to 1;—a step comprising the generation of a set of partial information items, such that knowledge of a number i, greater than or equal to the threshold value K, of partial information items can be used to verify a signature of at least part of the messages; and a fourth step comprising the sending of each partial information item separately in a distinct message. The invention also relates to a device for emitting messages for guaranteeing the authenticity of the system that emitted the messages, as well as to a method and a device for verifying the authenticity of such a system. In particular, the invention is suitable for global satellite-based radiocommunication and radionavigation systems.

Claims

1. A method for transmitting messages (MSG) to guarantee the authenticity of the system that transmitted said messages (MSG), comprising:

selecting a threshold value (K) greater than or equal to 1;

generating a set of partial information items (132), such that knowledge of a number (i) of partial information items greater than or equal to the threshold value (K) makes it possible to verify a signature (133) of at least part of the messages (MSG); and

sending each partial information item separately in one of the distinct messages (MSG).

2. The method according to claim 1, in which the partial information items are partial keys generated such that knowledge of a number (i) of partial keys greater than or equal to the threshold value (K) enables a public key to be reconstructed, the signature being produced to be verifiable in relation to said public key, each message (MSG) including the signature of at least part of the said message (MSG).

3. The method according to claim 1, in which the partial information items are parts of the signature, such that knowledge of a number (i) of parts of the signature greater than or equal to the threshold value (K) enables the signature to be reconstructed, the signature being linked to the system and/or to at least part of the messages (MSG) common to the set of messages (MSG) over a given period.

4. The method according to claim 1, each partial information item including redundant data to detect and/or suppress transmission errors.

5. The method of verifying the authenticity of a system that transmitted messages (MSG) liable to be obtained by the method according to claim 1 further comprising:

receiving messages (MSG) including partial information items;

using the number (j) of partial information items received during the course of the step of receiving messages to reconstruct information items, enabling a signature of at least part of the messages (MSG) to be verified; and

if it has been possible to complete the step of reconstructing information items, verifying the signature of the messages (MSG).

6. A transmission device adapted to the implementation of the method according to claim 1, wherein it includes means of constructing and sending messages (MSG), each message (MSG) including at least a partial information item of a set generated so that knowledge of a number (i) of partial information items greater than or equal to a threshold value (K) makes it possible to verify a signature of at least part of the messages (MSG).

7. The device according to claim 6, in which the partial information items are partial keys, for which knowledge of a number (i) greater than or equal to the threshold value (K) makes it possible to reconstruct a public key, the signature being verifiable in relation to said public key, each message (MSG) including the signature of at least part of said message (MSG).

8. The device according to claim 6, in which partial information items are parts of the signature, for which knowledge of a number (i) greater than or equal to the threshold value (K) makes it possible to reconstruct the signature, the signature being linked to the system and/or to at least part of the messages (MSG) common to the set of messages over a given period.

9. A device for verifying the authenticity of a system adapted to the implementation of the method according to claim 5, wherein said device comprises:

decoding means adapted to receive messages (MSG) and extract partial information items from said messages (MSG) received;

means of reconstructing information items enabling at least one signature of at least part of the messages (MSG) to be verified from partial information items; and

validation means adapted to verifying the validity of each signature extracted in relation to messages (MSG) received.

10. A satellite radio navigation system including transmission devices according to claim 6 and at least one verification device.

11. The satellite radio navigation system according to claim 10, wherein the at least one verification device comprises:

decoding means adapted to receive messages (MSG) and extract partial information items from said messages (MSG) received;

means of reconstructing information items enabling at least one signature of at least part of the messages (MSG) to be verified from partial information items; and

validation means adapted to verifying the validity of each signature extracted in relation to messages (MSG) received.