DATA CIPHER AND DECIPHER BASED ON DEVICE AND DATA AUTHENTICATION

• US 20170063853A1
• Filed: 07/10/2015
• Published: 03/02/2017
• Est. Priority Date: 07/10/2015
• Status: Abandoned Application

• Current Assignee: Infineon Technologies AG
• Original Assignee: Infineon Technologies AG
• Inventors: Lim, Cheow Guan
• Application Number:
  US14/796,892
• Publication Number:
  US 20170063853A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

A device is described that determines a session key for generating a message authentication code (MAC) tag associated with a communication session between the device and a second device. The device determines, based at least in part on the session key, a crypto key for encoding or decoding a message associated with the second device. The device then encodes or decodes the message based on the crypto key.

Claims

1. A method comprising:

determining, by a first device, a session key for generating a message authentication code (MAC) tag associated with a communication session between the first device and a second device;

determining, by the first device, based at least in part on the session key, a crypto key for coding a message associated with the second device; and

coding, by the first device, based on the crypto key, the message.

2. The method of claim 1, wherein coding the message comprises at least one of:

encoding, by the first device, based on the crypto key, the message;

or decoding, by the first device, based on the crypto key, the message.

3. The method of claim 1, further comprising:

determining, by the first device, based on the session key, an instance of the MAC tag associated with the communication session; and

prior to encoding the message, generating, by the first device based on the MAC tag associated with the communication session, the message.

4. The method of claim 3, further comprising:

generating, by the first device, the message, wherein the message in an indication of the MAC tag associated with the communication session and additional information.

5. The method of claim 1 further comprising:

after encoding the message based on the crypto key, transmitting, by the first device, to the second device, the message.

6. The method of claim 1, further comprising:

receiving, by the first device, from the second device, the message; and

subsequent decoding the message based on the crypto key, storing, by the first device, information contained in the message.

7. The method of claim 1, further comprising:

determining, by the first device, based on the session key, an instance of the MAC tag associated with the communication session;

receiving, by the first device, from the second device, the message; and

subsequent to decoding the message, authenticating, by the first device, based on the MAC tag associated with the communication session, the message.

8. The method of claim 7, wherein the instance of the MAC lag associated with the communication session is a first instance of the MAC tag associated with the communication session, the further comprising:

determining, by the first device, based on the message, a second instance of the MAC tag associated with the communication session, wherein authenticating the message includes determining whether the first instance of the MAC tag associated with the communication session corresponds to the second instance of the MAC tag associated with the communication session.

9. The method of claim 8, further comprising:

responsive to determining that the first instance of the MAC tag associated with the communication session corresponds to the second instance of the MAC tag associated with the communication session, determining, by the first device, that the message received from the second device is authentic; and

responsive to determining that the first instance of the MAC tag associated with the communication session does not correspond to the second instance of the MAC tag associated with the communication session, determining, by the first device, that the message received from the second device is not authentic.

10. The method of claim 1, wherein:

encoding the message based on the crypto key comprises performing an exclusive-or operation between an unencoded portion of the message and the crypto key; and

decoding the message based on the crypto key comprises performing the exclusive-or operation between an encoded portion of the message and the crypto key.

11. The method of claim 1, further comprising:

receiving, by the first device, from the second device, an indication of a seed value for determining the crypto key, wherein the crypto key is determined further based at least in part on the seed value.

12. The method of claim 1, wherein:

the session key is a first session key,

the first session key is determined by at least receiving, by the first device, from the second device, the first session key, wherein the first session key is generated by at least one processor of the second device,

the message is coded by at least decoding, with at least one processor of the first device, the message with the first session key, and

the method further comprising;

processing, by the first device, the message, wherein processing the message includes modifying at least a portion of information contained in the message;

encoding, by the first device, the processed message with a different session key generated by the at least one processor of the second device; and

outputting, by the first device, to the second device, the processed message.

13. The method of claim 1, wherein the message comprises information used by a program executing at the first device to perform a task.

14. The method of claim 13, wherein the information is required by the program executing at the first device to complete the task.

15. The method of claim 13, wherein the message is a first message from a plurality of messages that each include information used by a program executing at the first device to perform a task.

16. The method of claim 15, further comprising:

executing, by the first device, the program in response to decoding the message based on the crypto key.

17. The method of claim 13, further comprising:

responsive to determining that the communication session between the first device and the second device ended, clearing, by the first device, from a memory of the first device, the message.

18. A first device comprising at least one processor operable to:

determine a session key for generating a message authentication code (MAC) tag associated with a communication session between the first device and a second device;

determine, based at least in part on the session key, a crypto key for encoding or decoding a message associated with the second device; and

code, based on the crypto key, the message.

19. The first device of claim 18, wherein the at least one processor is further operable to:

determine, based on the session key, an instance of the MAC lag associated with the communication session; and

prior to encoding the message, generate, based on the MAC tag associated with the communication session, the message.

20. The first device of claim 19, wherein the at least one processor is further operable to generate the message, wherein the message includes an indication of the MAC tag associated with the communication session and additional information.

22. The first device of claim 18, wherein the at least one processor is further operable to:

receive, from the second device, the message; and

subsequent decoding the message based on the crypto key, store, information contained in the message.

23. The first device of claim 18, wherein the at least one processor is further operable to:

determine, based on the session key, an instance of the MAC tag associated with the communication session;

receive, from the second device, the message; and

subsequent to decoding the message, authenticate, based on the MAC tag associated with the communication session, the message. 24, The first device of claim 18, wherein the at least one processor comprises an application specific integrated circuit (ASIC).

25. The first device of claim 18, wherein the first device and the second device comprise an unmanned air vehicle and a control device configured to control the unmanned air vehicle.

21. The first device of claim IS, wherein the at least one processor is further operable to after encoding the message based on the crypto key, transmit, to the second device, the message.

26. A system comprising:

means for determining a session key for generating a message authentication code (MAC) tag associated with a communication session between a first device and a second device;

means for determining, based at least in part on the session key, a crypto key for encoding or decoding a message associated with the second device; and

means for coding, based on the crypto key, the message.