Recipient and message authentication method and system

• US 4,349,695 A
• Filed: 06/25/1979
• Issued: 09/14/1982
• Est. Priority Date: 06/25/1979
• Status: Expired due to Term

• Current Assignee: Datotek Incorporated
• Original Assignee: Datotek Incorporated
• Inventors: Abmayr, David W., Morgan, Barrie O.
• Primary Examiner(s): Birmiel, Howard A.
• Application Number:
  US06/051,903
• Time in Patent Office: 1,177 Days
• Field of Search: 178/22, 178/22.08, 178/22.09, 235/379, 235/380, 235/382, 375/2, 340/149 R, 340/149 A, 340/825.34
• US Class Current: 713/170
• CPC Class Codes: H04L 2209/043 of tables, e.g. lookup, substitution or mapping
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

The specification discloses a system and method for authenticating a message recipient prior to transmission of a message and for authenticating the message content after receipt of the message. A randomized character or character sequence is initially enciphered at the authenticator station and stored. The enciphered character is transmitted to the message recipient. The enciphered character is deciphered by the message recipient to reproduce the randomized character. The randomized character is reenciphered by the message recipient and transmitted back to the authenticator station. The reenciphered character is deciphered and the stored randomized character is compared with the deciphered character. The message recipient is authenticated if the stored randomized character exactly compares with the deciphered character. In order to authenticate the message after receipt, polynomial block check characters are accumulated from the message. The block check characters are enciphered according to a predetermined enciphering scheme and transmitted to a remote location, along with the message. The message is received at the remote location and polynomial block check characters are accumulated in response to the received message. Enciphered block check characters are received and deciphered according to the reverse of the predetermined enciphering scheme. The accumulated block check characters are compared with the deciphered block check characters and the message is authenticated if the compared characters are the same.

Claims

1. A system for authenticating a message recipient prior to transmission of a message between an authenticator station and the message recipient comprising:

means for transmitting a user identification signal from said message recipient to said authenticator station,

means for producing an enciphered user key and a message key in response to said user identification signal,

means for deciphering the enciphered user key using a predetermined master key,

means for generating a random character,

means for enciphering said random character in response to said deciphered user key,

means for storing said message key and said enciphered random character,

means for transmitting said message key and said enciphered random character to said message recipient,

means for receiving said enciphered random character and said message key at said message recipient location,

means for deciphering said enciphered random character in response to said user key,

means for varying said random character in a predetermined manner,

means for enciphering said varied random character,

means for transmitting said enciphered varied random character to said authenticator station,

means for deciphering said enciphered varied random character in response to said user key,

means for varying said deciphered varied random character in the inverse as said predetermined manner, to provide a first random number,

means for deciphering said stored enciphered random character to provide a second random number,

means for comparing said first and second random numbers, and

means for generating an authenticate indication if said first and second

2. The system of claim 1 and further comprising a system for authenticating said message after transmission to said message recipient comprising:

means responsive to said message for accumulating polynomial block check characters,

means for enciphering said block check characters according to a predetermined enciphering scheme,

means for transmitting said enciphered block check characters according t a predetermined enciphering scheme,

means for transmitting said enciphered block check characters along with said message to said message recipient,

means at the location of said message recipient for receiving said message and for accumulating polynomial block check characters in response thereto,

means for deciphering said enciphered block check characters according to the reverse of said predetermined enciphering scheme,

means for comparing said accumulated block check characters and said deciphered block check characters, and

means responsive to said comparing means for generating an authentication indication if said accumulated and deciphered block check characters are

3. The system of claim 2 and further comprising:

transmitting a user identification signal from said message recipient,

in response to said user identification signal, producing an enciphered user key and message key,

deciphering the enciphered user key using a predetermined master key, and

enciphering said block check characters in dependence upon said deciphered

4. The system of claim 2 wherein said polynomial block check characters have the property of being able to determine errors with a high degree of

5. A method for authenticating a message recipient prior to transmission of a message comprising:

establishing communication between an authenticator station and the message recipient,

transmitting a user identification signal from said message recipient to said authenticator station,

in response to said user identification signal, generating an enciphered user key and a message key,

deciphering the enciphered user key using a predetermined master key,

generating a random character,

in response to said deciphered user key, enciphering said random character,

storing said message key and said enciphered random character,

transmitting said message key and said enciphered random character to said message recipient,

receiving said enciphered random character and said message key at said message recipient location,

deciphering said enciphered random character in response to said user key,

varying said random character in a predetermined manner,

enciphering said varied random character,

transmitting said enciphered varied random character to said authenticator station,

deciphering said enciphered varied random character in response to said user key,

varying said deciphered varied random character in the inverse as said predetermined manner, to provide a first random number,

deciphering said stored enciphered random character to provide a second random number,

comparing said first and second random numbers, and

generating an authenticate indication if said first and second random

6. The method of claim 5 and further comprising:

generating a personal identification signal in response to said user identification signal,

enciphering said personal identification signal and storing same with said enciphered random character,

appending said personal identification signal to said varied random character at said message recipient location,

enciphering said personal identification signal,

transmitting said personal identification signal to said authenticator station,

receiving and deciphering said personal identification signal at said authenticator station to produce a first personal identification signal,

retrieving and deciphering said stored enciphered personal identification signal to produce a second personal identification signal,

comparing said first and second personal identification signals, and

allowing the generation of said authenticate indication only if said

7. The method of claim 5 and further comprising:

transmitting a message to said message recipient,

in response to said message, accumulating polynomial block check characters,

enciphering said block check characters according to a predetermined enciphering scheme,

transmitting said enciphered block check characters along with said message to said message recipient,

receiving said message and accumulating polynomial block check characters in response thereto,

deciphering said enciphered block check characters according to the reverse of said predetermined enciphering scheme,

comparing said accumulated block check characters and said deciphered block check characters, and

generating an authentication indication in response to said comparison if said accumulated and deciphered block check characters are identical.