SYSTEM AND METHOD FOR AUTHENTICATING DATA

• US 20130132722A1
• Filed: 11/21/2011
• Published: 05/23/2013
• Est. Priority Date: 11/21/2011
• Status: Active Grant

• Current Assignee: Combined Conditional Access Development & Support LLC
• Original Assignee: Combined Conditional Access Development & Support LLC
• Inventors: Bennett, Christopher J., Petty, Douglas M., Miller, Kenneth P., Medvinsky, Alexander
• Granted Patent: US 9,553,725 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

Systems and methods for authenticating data and timeliness are disclosed. A method for authentication can comprise processing a data block to determine a first secret element, generating a second secret element based upon the first secret element, generating a non-secret element based upon the second secret element, and comparing the non-secret element to a nonce associated with the first secret element to determine authentication.

Claims

1. A method for authentication comprising:

processing a data block to determine a first secret element;

generating a second secret element based upon the first secret element;

generating a non-secret element based upon the second secret element; and

comparing the non-secret element to a comparator element associated with the first secret element to determine authentication.

2. The method of claim 1, wherein the first secret element is a shared key.

3. The method of claim 1, wherein determining the first secret element comprises decrypting the first secret element using a protection key.

4. The method of claim 3, wherein the first secret element is decrypted using an advanced encryption standard algorithm.

5. The method of claim 1, wherein the second secret element is an authentication key.

6. The method of claim 1, wherein the second secret element is generated as a function of the first secret element and a pre-defined generator value.

7. The method of claim 6, wherein the function is an advanced encryption standard decryption algorithm using the first secret element as a key and the pre-defined generator value as data.

8. The method of claim 1, wherein the non-secret element is an authentication nonce.

9. The method of claim 1, wherein the non-secret element is generated by processing at least a portion of an authentication key using the second secret element.

10. The method of claim 9, wherein the authentication key is an asymmetric key.

11. The method of claim 9, wherein the authentication key is an RSA key.

12. The method of claim 1, wherein the non-secret element is generated by processing a modulus of an authentication key using the second secret element.

13. The method of claim 1, wherein the comparator element is a nonce and is a function of the first secret element.

14. A method for authentication comprising:

processing a data block to determine a comparator element associated with a first identifier;

processing the data block to determine a shared key associated with a second identifier;

generating a first authentication key based upon the shared key;

generating an authentication element using the first authentication key; and

comparing the authentication element to the comparator element to determine authentication.

15. The method of claim 14, wherein processing the comparator element comprises decrypting the comparator element using an RSA level 2 public key.

16. The method of claim 15, wherein the comparator element is a shared key nonce and is a function of the shared key and the RSA level 2 public key.

17. The method of claim 14, wherein processing the shared key comprises decrypting the shared key using a protection key.

18. The method of claim 14, wherein the first authentication key is generated as a function of the shared key and a pre-defined generator value.

19. The method of claim 14, wherein the authentication element is generated by processing a modulus of a level 2 authentication key using the first authentication key.

20. The method of claim 14, wherein the first identifier is a shared key identifier associated with the shared key.

21. The method of claim 14, wherein the second identifier is a type identifier associated with a recipient of the data block.

22. A system comprising:

a memory for storing an public key;

a processor in communication with the memory, the processor configured to;

process a data block using the public key to determine a first secret element,

generate a second secret element based upon the first secret element,

generate a non-secret element based upon the second secret element, and

compare the non-secret element to a comparator element associated with the first secret element to determine authentication.

23. The system of claim 22, wherein the first secret element is a shared key.

24. The system of claim 22, wherein determining the first secret element comprises decrypting the first secret element using a protection key.

25. The system of claim 22, wherein the second secret element is a global authentication key.

26. The system of claim 22, wherein the second secret element is generated as a function of the first secret element and a pre-defined generator value.

27. The system of claim 22, wherein the non-secret element is an authentication nonce.

28. The system of claim 22, wherein the non-secret element is generated by processing a modulus of the authentication key using the second secret element.

29. The system of claim 22, wherein the comparator element is a shared key nonce.