AUTHENTICATOR, AUTHENTICATEE AND AUTHENTICATION METHOD

• US 20140089675A1
• Filed: 11/26/2013
• Published: 03/27/2014
• Est. Priority Date: 08/31/2011
• Status: Active Grant

• Current Assignee: Kioxia Corporation
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Kato, Taku, Matsushita, Tatsuyuki, Nagai, Yuji, Zhao, Fangming
• Granted Patent: US 9,225,513 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

According to one embodiment, an authenticator which authenticates an authenticatee, which stores first key information (NKey) that is hidden, includes a memory configured to store second key information (HKey) which is hidden, a random number generation module configured to generate random number information, and a data generation module configured to generate a session key (SKey) by using the second key information (HKey) and the random number information. The authenticator is configured such that the second key information (HKey) is generated from the first key information (NKey) but the first key information (NKey) is not generated from the second key information (HKey).

Claims

1. An authentication method of authenticating an authenticatee which stores first key information (NKey) which is hidden, by an authenticator which stores source information (HC) and second key information (HKey) which is hidden, the method comprising:

generating, by the authenticatee, third key information (HKey′

), based on the source information (HC) and the first key information (NKey);

generating, by the authenticatee, a first session key (SKey), based on the third key information (HKey′

) and random number information; and

generating, by the authenticator, a second session key (SKey′

), based on the hidden second key information (HKey) and random number information.