Secure communications system for remotely located computers

• US 5,196,840 A
• Filed: 11/05/1990
• Issued: 03/23/1993
• Est. Priority Date: 11/05/1990
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Leith, Victor S., Stevens, James V.
• Primary Examiner(s): Yusko, Donald J.
• Assistant Examiner(s): Holloway, III, Edwin C.
• Application Number:
  US07/609,354
• Time in Patent Office: 869 Days
• Field of Search: 340/825.3, 340/825.31, 340/825.34, 380/3, 380/6, 380/21, 380/23, 380/46, 380/49, 379/62, 379/95
• US Class Current: 340/5.26
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/04 Masking or blinding
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0625 with splitting of the data block into left and right halves, e.g. Feistel based algorithms, DES, FEAL, IDEA or KASUMI
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A system for determining when a remote computer user is authorized to communicate with a host computer and to establish a ciphering key to be used for the communications session. A random number is generated at the host computer, ciphered under the user'"'"'s PIN, and sent to the remote user where it is deciphered under the PIN to provide a session key. In one embodiment, this key is reciphered under the PIN, sent to the host computer, and deciphered under the PIN. The deciphered value is equal to the generated random number when the correct PIN'"'"'s are used, thereby validating the user. In another embodiment, the deciphered random number at the remote user location is used as a key to cipher the PIN which is sent to the host, deciphered under the random number, and compared with the PIN existing at the host. Subsequent, ciphering can use the determined session key as a ciphering key. Additional security can be realized by adding random digits to the PIN, masking some of the developed keys, and sending the user ID to the host in ciphered form. This system does not require a stored key in the remote computer or the transfer in the clear of the PIN between computers.

Claims

1. A security system for validating the authority of a remote user to communicate with a host device, said system comprising:

means at the host device for storing user ID and personal identification number (PIN) information;

means for sending the ID information across a communications channel from the remote user to the host device;

means at the host device for providing a non-predetermined signature value;

means at the host device for ciphering the signature value under a first key value which is dependent upon at least a portion of the stored ID and PIN information;

means for sending the ciphered signature value across the communications channel to the remote user;

means at the remote user location for deciphering the ciphered signature value received from the host device under a second key value which is equal to said first key value and derived from the same information as said first key value;

means at the remote user location for ciphering the deciphered signature value under a third key value and for sending the ciphered signature value to the host device; and

validation means at the host device for deciphering the ciphered signature value received from the remote user location and for determining if the deciphered signature value is equal to the signature value originally provided by the host device.

2. The security system of claim 1 wherein the means at the remote user location for ciphering the deciphered signature value includes means for forming the third key value based upon at least a portion of ID and PIN information obtainable at the remote user location.

3. The security system of claim 1 wherein the signature value providing means comprises:

means at the host device for generating a random or pseudorandom number; and

means at the host device for adding masking and additional randomness information to the generated random or pseudorandom number to provide the signature value.

4. The security system of claim 3 wherein additional randomness information added to the generated random or pseudorandom number by the masking and additional randomness information means includes specifications for the inclusion of additional digits to the PIN at the remote user location.

5. The security system of claim 1 wherein an ID ciphering means is included at the remote user location for ciphering the user ID information before it is sent to the host device.

6. The security system of claim 5 wherein the ID ciphering means performs a one-way encryption of the ID before it is sent to the host device.

7. The security system of claim 5 wherein the storage means at the host device for storing the ID and PIN information is a look-up table (LUT), and the ID and PIN information is retrieved from the LUT by using the encrypted ID to identify a position in the LUT which contains corresponding and unencrypted ID and PIN information.

8. The security system of claim 1 wherein the signature value ciphering means at the host device includes means for forming the first key value by concatenation of the user ID and PIN information at the host device.

9. The security system of claim 1 wherein the signature value deciphering means at the remote user location includes means for forming the second key value by concatenation of the user ID and PIN information at the host device.

10. The security system of claim 1 wherein the deciphering means which functions with the second key value and the ciphering means which functions with the third key value perform Message Authentication Code (MAC) operations on the data processed by said means.

11. The security system of claim 3 wherein the signature value ciphering means at the remote user location includes means for forming the third key value from concatenated ID and PIN information which is masked according to the masking information contained in the signature value received from the host device.

12. The security system of claim 4 wherein the validation means includes means for deciphering the ciphered signature value under a fourth key value which is generated as a function of the ID and PIN information.

13. The security system of claim 12 further comprising means at the remote user location for creating modified PIN information based on randomness information incorporated into the signature value by the masking and randomness information means, the modified PIN information having at least one random digit incorporated therein in addition to the PIN information.

14. The security system of claim 13 wherein the validation means at the host device tests all of the possible combinations of the fourth key value for an equality in the signature values before rejecting a user as invalid.

15. The security system of claim 13 further comprising means at the remote user location for creating modified PIN information based upon masking information incorporated into the signature value by the masking and randomness information means.

16. A security system for validating the authority of a remote user to communicate with a host device, said system comprising:

means at the host device for storing user ID and personal identification number (PIN) information;

means at the host device for receiving ciphered user ID information and locating the corresponding user ID and PIN information in the storing means;

means at the host device for providing a random number;

means at the host device for adding randomness and masking information to the random number to provide a signature value, said randomness information specifying the degree of random digits to be added to the PIN at the location of the remote user and said masking information specifying a mask for processing a key value at the remote user location;

means at the host device for ciphering the signature value under a first key value which is dependent upon a combination of the stored user ID and PIN information;

means for sending the ciphered signature value across a communications channel to the remote user;

means at the remote user location for deciphering the ciphered signature value received from the host device under a second key value which is equal to said first key value and derived from similar information as said first key value, said deciphering being accomplished with a Message Authentication Code (MAC) function;

means at the remote user location for creating modified PIN information based on randomness information incorporated into the signature value by the masking and randomness information means, the modified PIN information having at least one random digit incorporated therein in addition to the PIN information;

means at the remote user location for ciphering the signature value with a MAC function under a third key value, said third key value being formed from a concatenated combination of the user ID and the PIN;

means at the remote user location for creating modified PIN information based upon masking information incorporated into the signature value by the masking and randomness information means;

means for sending the ciphered signature value to the host device;

means at the host device for deciphering the ciphered signature value received from the remote user location under a fourth key having a plurality of possible values, with the number of possible values being dependent upon the degree of randomness applied to the PIN at the remote user location; and

means for comparing the provided and deciphered-reciphered signature values to determine is they are equal when using one of the possible fourth key values for deciphering and, if an equality is determined, validating the authority of the user to communicate with the host device and using the signature value existing at both locations as a ciphering session key for the remainder of the communications session.

17. A method of establishing a common ciphering key at two different communicating locations, said method including the steps of:

generating a non-predetermined number at a first of said locations which is used to establish a session key at the location;

ciphering the session key at said first location under a first key dependent at least upon a confidential user code known at said first location;

transferring the ciphered session key to the second location;

deciphering the ciphered session key under a second key which is dependent at least upon said confidential user code which is also known at said second location;

reciphering the session key at the second location under a third key dependent at least upon the confidential user code known at said second location;

transferring the reciphered session key to the first location;

deciphering the reciphered session key under a fourth key dependent at least upon said confidential user code known at said first location; and

comparing the deciphered session key at the first location with the established session key at the same location and, when they are equal, using the session key existing at both locations as a common ciphering key in any subsequent ciphering functions during the remainder of the session.

18. The ciphering key establishing method of claim 17 including the step of

(a) applying masking and randomness information to the generated session key at the first location, said randomness information specifying the addition of one or more random digits to the confidential user code which influences the third key at the second location;

and

(b) creating modified PIN information at the remote user location based on randomness information incorporated into the signature value by the masking and randomness information means, the modified PIN information having at least one random digit incorporated therein in addition to the PIN information.

19. The ciphering key establishing method of claim 18 including the step of transferring user ID information from the second location to the first location.

20. The ciphering key establishing method of claim 19 wherein the transferred user ID information is in ciphered form.

21. The ciphering key establishing method of claim 20 wherein the user ID is ciphered with a one-way ciphering means.

22. The ciphering key establishing method of claim 21 including the step of addressing a look-up table according to the received ciphered user ID to ascertain a non-ciphered user ID and confidential user code.

23. The ciphering key establishing method of claim 22 including the step of concatenating the user ID and the confidential user code to form the first key.

24. The ciphering key establishing method of claim 22 including the step of concatenating a user ID and the confidential user code to form the second key.

25. The ciphering key establishing method of claim 19 including the step of adding at least one random digit to the confidential user code in the formation of the third key to produce a randomized confidential user code according to the randomness information included in the generated session key established at the first location.

26. The ciphering key establishing method of claim 20 including the step of concatenating the randomized confidential user code with the user ID in the formation of the third key.

27. The ciphering key establishing method of claim 26 including the step of masking the result of the concatenation according to the masking information included in the generated session key established at the first location.

28. The ciphering key establishing method of claim 19 including the step of forming the fourth key from a combination of the user ID and the confidential user code with the possible one or more random digits added.

29. The ciphering key establishing method of claim 28 including the step of masking the value used to form the fourth key according to the masking information included in the generated session key established at the first location.

30. The ciphering key establishing method of claim 25 including the step of forming additional fourth keys dependent upon at least all possible values of the randomized confidential user code.

31. A method of establishing a common ciphering key at two different communicating locations, said method including the steps of:

generating a random number at a first of said locations;

adding masking and randomness information to the random number to establish a session key at said first location;

ciphering an ID at the second location and sending the ciphered ID to the first location;

locating a corresponding ID and confidential user code in storage at the first location by using the ciphered ID received from the second location;

ciphering the session key at said first location under a first key dependent upon the located ID and confidential user code;

transferring the ciphered session key to the second location;

deciphering the ciphered session key at the second location with a Message Authentication Code (MAC) function under a second key which is dependent upon said ID and confidential user code which is also known at said second location;

creating a randomized confidential user code at said second location which includes generating and adding at least one additional digit to the confidential user code;

reciphering the session key with a MAC function at the second location under a third key dependent upon the ID and the randomized confidential user code;

transferring the reciphered session key to the first location;

deciphering the reciphered session key under a fourth key having a plurality of possible values, said values being dependent, at least in part, upon said confidential user code known at said first location and the degree of randomness specified in the established session key; and

comparing the deciphered session key at the first location with the established session key at the same location and, when there is an equality under one of the possible fourth keys, using the session key existing at both locations as a common ciphering key in any subsequent ciphering functions during the remainder of the session.

32. A method for a remote user to establish secure communications with a host device, said method including the steps of:

receiving a ciphered session key from the host device;

deciphering the ciphered session key to provide a session key, said deciphering being under a key formed from at least a confidential user code known by the remote user;

reciphering the session key under another key formed from at least the confidential user code; and

sending the reciphered session key to the host device for validation.

33. The secure communications method of claim 32 including the step of using the deciphered session key for subsequent ciphering functions by the remote user during the remainder of the session.

34. The secure communications method of claim 32 wherein the deciphering and reciphering steps are accomplished by using by Message Authentication Code (MAC) functions.

35. The secure communications method of claim 32 including the step of generating and adding at least one random digit to the confidential user code before forming said other key.

36. The secure communications method of claim 35 including the step of concatenating the randomized confidential user code with a user ID to form said other key.

37. The secure communications method of claim 35 including the step of ciphering a user ID with a one-way ciphering function and sending the ciphered user ID to the host device.

38. The secure communications method of claim 36 including the additional step of masking the concatenated combination of the randomized confidential user code and the user ID according to a predetermined masking criteria.

39. A method for a remote user to establish secure communications with a host device, said method including the steps of:

ciphering a user ID according to a one-way ciphering function;

sending the ciphered user ID to the host device;

receiving a ciphered session key from the host device;

deciphering the ciphered session key using a Message Authentication Code (MAC) function to provide a session key, confidential user code which is also known at said second location;

creating a randomized confidential user code at said second location which includes generating and adding at least one additional digit to the confidential user code;

reciphering the session key with a MAC function at the second location under a third key dependent upon the ID and the randomized confidential user code;

transferring the reciphered session key to the first location;

deciphering the reciphered session key under a fourth key having a plurality of possible values, said values being dependent, at least in part, upon said confidential user code known at said first location and the degree of randomness specified in the established session key; and

comparing the deciphered session key at the first location with the established session key at the same location and, when there is an equality under one of the possible fourth keys, using the session key existing at both locations as a common ciphering key in any subsequent ciphering functions during the remainder of the session.

40. A method for a host device to establish secure communications with a remote user, said method including the steps of:

generating a non-predetermined number which is used in forming a session key for the secure communications;

ciphering the session key under a key which is formed from at least a confidential user code for the remote user, said user code being known by the host device;

sending the ciphered session key to the remote user for processing;

receiving a reciphered session key from the remote user;

deciphering the reciphered session key under another key formed from at least said confidential user code known by the host device; and

determining if the formed and the deciphered-reciphered session key are equal.

41. The secure communications method of claim 40 including the step of using the formed session key for subsequent ciphering functions during the remainder of the session when the formed and the deciphered-reciphered session keys are determined to be equal.

42. The secure communications method of claim 40 including the steps of

(a) adding randomness and masking information to the number before forming the session key, said information defining to the remote user parameters for forming a ciphering key;

and

(b) creating a confidential user code which includes generating and adding at least one additional digit to the confidential user code.

43. The secure communications method of claim 40 including the steps of receiving a ciphered user ID from the remote user and locating a corresponding user ID and confidential user code stored in memory at the host device.

44. The secure communications method of claim 43 including the steps of concatenating the user ID and the confidential user code to form the key which is used to cipher the session key.

45. The secure communications method of claim 40 wherein the step of determining if the formed and the deciphered-reciphered session keys are equal includes the additional step of generating a plurality of possible trial keys used in deciphering the reciphered session key, with the number of possible trial keys being dependent upon the random information added to the generated number.

46. The secure communications method of claim 45 including the step of masking the trial keys according to a predetermined masking criteria.

47. A method for a host device to establish secure communications with a remote user, said method including the steps of:

generating a random number;

adding randomness and masking information to the random number to form a session key for the secure communications, said information defining to the remote user parameters for forming a ciphering key;

receiving a ciphered user ID from the remote user and locating a corresponding user ID and confidential user code stored in memory at the host device;

ciphering the session key under a key which is formed from at least the confidential user code and the user ID for the remote user;

sending the ciphered session key to the remote user for processing said ciphered session key into a reciphered session key dependent in part upon said randomness and masking information;

receiving the reciphered session key from the remote user;

generating a plurality of possible trial keys to decipher the reciphered session key, said trail keys being dependent at least upon the confidential user code known by the host device, and with the number of possible trial keys being dependent upon the random information added to the generated random number;

deciphering the reciphered session key under a trial key;

determining if the formed and the deciphered-reciphered session key are equal for one of the possible trial keys; and

if an equality exists, using the formed session key for subsequent ciphering functions at the host device during the remainder of the session.

48. A security system for validating the authority of a remote user to communicate with a host device, said system comprising:

means at the host device for storing user ID and personal identification number (PIN) information;

means at the host device for providing a non-predetermined random number;

means at the host device for ciphering the random number under a first key value which is dependent upon at least a portion of the stored ID and PIN information;

means for sending the ciphered random number across a communications channel to the remote user;

means at the remote user location for deciphering the ciphered random number received from the host device under a second key value which is equal to said first key value and derived from the same information as said first key value;

means at the remote user location for ciphering at least the PIN under the deciphered random number and for sending the ciphered PIN to the host device; and

validation means at the host device for deciphering, under the random number, the ciphered PIN received from the remote user location and for determining if the deciphered PIN is equal to the PIN stored at the host device for the corresponding user ID.

49. A method of establishing a common ciphering key at two different communicating locations, said method including the steps of:

generating a non-predetermined number at a first of said locations which is used to establish a session key at that location;

ciphering the session key at said first location under a first key dependent at least upon a confidential user code known at said first location;

transferring the ciphered session key to the second location;

deciphering the ciphered session key under a second key which is dependent at least upon said confidential user code which is also known at said second location;

ciphering the confidential user code at the second location under a key dependent upon the session key available at said second location;

transferring the ciphered confidential user code to the first location;

deciphering the ciphered confidential user code under the established session key known at said first location; and

comparing the deciphered confidential user code at the first location with the stored confidential user code at the same location and, when they are equal, using the session key existing at both locations as a common ciphering key in any subsequent ciphering functions during the remainder of the session.