PROCESS AND DEVICE FOR AUTHENTICATION

• US 20120166800A1
• Filed: 02/27/2012
• Published: 06/28/2012
• Est. Priority Date: 02/03/2006
• Status: Abandoned Application

• Current Assignee: Advanced Track & Trace
• Original Assignee: Advanced Track & Trace
• Inventors: MASSICOT, Jean-Pierre, FOUCOU, Alain, SAGAN, Zbigniew
• Application Number:
  US13/405,777
• Publication Number:
  US 20120166800A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: B41M 3/14 Security printing securities B42D25/29
• CPC Class Codes: B41M 5/24 Ablative recording, e.g. by burning marks; Spark recording marking by high energetic means, e.g. by laser otherwise than burning or ablative removal B41M5/26; materials or methods for recording or reproduction by optical means G11B7/00
• CPC Class Codes: G03H 1/0011 for security or authentication holograms on information-bearing cards B42D25/328; testing papers with holograms G07D7/0032
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07D 7/004 using digital security elements, e.g. information coded on a magnetic thread or strip
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H04L 2209/20 Manipulating the length of blocks of bits, e.g. padding or block truncation
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

The authentication process comprises:

• • a step of generating a random number (105),
  • a step of generating a time-stamp (115),
  • a step of generating a first secret key (120),
  • a step of truncating the message authentication code utilizing said first secret key (125),
  • a step of symmetrically encrypting the random number, time-stamp and truncation (135), utilizing a second secret key (130) to produce an authentication code (145). Preferably, during the step of generating a random number, a quantum generator (100) is utilized. Preferably, during the truncation step, a cryptographic message authenticator is generated utilizing the first secret key. Preferably, during the step of symmetrically encrypting the random number, time-stamp and truncation, by utilizing the second secret key, in addition a hash (140) is produced.

Claims

1. An authentication process, that comprises:

a step of generating a random number,

a step of generating a time-stamp,

a step of generating a first secret key,

a step of truncating the message authentication code utilizing said first secret key,

a step of symmetrically encrypting the random number, time-stamp and truncation, utilizing a second secret key to produce an authentication code.

2. An authentication method according to claim 1, wherein, during the step of generating a random number, a quantum generator is utilized.

3. An authentication method according to claim 1, wherein, during the truncation step, a cryptographic message authenticator is generated utilizing the first secret key.

4. An authentication method according to claim 1, wherein, during the step of symmetrically encrypting the random number, time-stamp and truncation by utilizing the second secret key, in addition a hash is produced.

5. An authentication method according to claim 1, that comprises a step of regularly modifying the first secret key and transmitting the new secret key to a production site.

6. An authentication method according to claim 1, wherein, during the symmetric encryption step, a code is generated comprising alphanumeric characters.

7. An authentication device, that comprises:

a means of generating a random number,

a means of generating a time-stamp,

a means of generating a first secret key,

a means of truncating the message authentication code utilizing said first secret key,

a means of symmetrically encrypting the random number, time-stamp and truncation, utilizing a second secret key to produce an authentication code.