Secure component authentication system

• US 4,799,061 A
• Filed: 11/18/1985
• Issued: 01/17/1989
• Est. Priority Date: 11/18/1985
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Neckyfarow, Steven W., Abraham, Dennis G., Double, Glen P.
• Primary Examiner(s): Griffin, Robert L.
• Assistant Examiner(s): Smith, Ralph E.
• Application Number:
  US06/799,367
• Time in Patent Office: 1,156 Days
• Field of Search: 340/825.34, 340/825.3, 340/825.31, 340/825.33, 235/379, 235/380, 178/22.08, 178/22.09, 375/2.1, 380/23, 380/24, 380/25
• US Class Current: 340/5.26
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system for authenticating components in a communications system using cryptographic techniques to determine if each has the proper key without disclosing information which would be useful to an imposter in deriving the key. A random number generated at a first terminal is encrypted under its key for transmission as a first value to a second terminal whose identity is to be authenticated. The second terminal decrypts the transmitted first value using its key deriving a second value (which equals the random number if the keys are identical.) The second terminal then encrypts its key using the second value as the key, generating a third value which is transmitted back to the first terminal for verification. The first terminal then verifies the third value, either by decrypting it using the random number as the key to obtain its key or by encrypting its key using the random number as key to derive the third number (if the two keys are identical.) Optionally, roles of the two terminals are then reversed after the second terminal has been identified, allowing the second terminal to authenticate the first terminal.

Claims

1. A method whereby a first terminal may authenticate a second terminal wherein the terminals each possess an encryption key and the second terminal is authenticated if the encryption keys are equal, the steps of the method comprising:

generating a first number at the first terminal and creating a second number by encrypting the first number using the encryption key of the first terminal;

transmitting the second number to the second terminal;

generating a third number at the second terminal by decrypting the second number using the encryption key of the second terminal;

generating a fourth number at the second terminal by encrypting the encryption key of the second terminal using the third number as the key;

transmitting the fourth number to the first terminal; and

verifying at said first terminal that said fourth number equals the encryption of said encryption key of said first terminal using said first number as key to thereby authenticate said second terminal.

2. A method of authenticating a terminal including the steps of claim 1 wherein the step of verifying includes the step of generating at the first terminal a fifth number which is the encryption of its encryption key using the first number as key, and comparing said fifth number with the fourth number, thereby determining said second terminal used an encryption key equal to the encryption key of said first terminal.

3. A method of authenticating a terminal including the steps of claim 1 wherein the step of verifying includes the steps of decrypting the fourth number using the first number of the first terminal to obtain a fifth value, comparing said fifth value to the first number, and authenticating the second terminal if and only if said fifth number and said first number are equal.

4. A method of authenticating a terminal including the steps of claim 1 wherein the step of generating a first number includes generating a random number.

5. A method of terminal communication including the steps of claim 4 and further including the use of the random number in communication between terminals after authentication has been completed.

6. A method of authenticating components involved in communication wherein, after the first terminal authenticates the second terminal using the steps of claim 1, the second terminal authenticates the first terminal using the role of the first terminal while the first terminal assumes the role of the second terminal.

7. A method whereby a first terminal having a first encryption key determines whether a second encryption key in a second terminal is identical to said first encryption key, the steps of the method comprising:

transmitting from said first terminal to said second terminal a first value representing the encryption of a secret value under the said first encryption key;

deriving at said second terminal a second value by decrypting said first value using said second encryption key;

transmitting from said second terminal to said first terminal a third value representing said second encryption key encrypted using the second value as key; and

verifying at said first terminal that said third value is equal to the decryption of said first value using said first encryption key forming an intermediate result followed by encryption of said first encryption key using the intermediate result as an encryption key, to verify that the first and second terminal have the same keys, whereby authentication of the second terminal occurs if and only if the encryption keys used by said first and second terminals are equal.

8. A method of the type described in claim 7 wherein the intermediate result in the verifying step equals said secret value and said second value if said first and second encryption keys are equal.

9. A secure encryption system wherein a first terminal having a first encryption key challenges a second terminal having a second encryption key which responds with a response based upon the challenge, the improvement wherein the second terminal includes means for decrypting the challenge using said second encryption key and means for encrypting said second encryption key using the decrypted challenge as an encryption key to generate its response and the first terminal includes means for generating the challenge by encrypting a random number using said first encryption key, means for encrypting said first encryption key using said random number as key, and means for comparing the encrypted first encryption key to the challenge, in order to verify the response.