Process for authentication, by an outside medium, of a portable object connected to that medium via a transmission line and system for carrying out the process

• US 5,253,295 A
• Filed: 12/16/1992
• Issued: 10/12/1993
• Est. Priority Date: 12/19/1991
• Status: Expired due to Fees

• Current Assignee: Bull CP8 (Schlumberger NV)
• Original Assignee: Bull Sas (Atos SE)
• Inventors: Saada, Charles, Oisel, Andre, Lasnier, Francois
• Primary Examiner(s): Cain, David C.
• Application Number:
  US07/991,198
• Time in Patent Office: 300 Days
• Field of Search: 380/23, 380/24, 380/25, 235/380, 235/382.5
• US Class Current: 713/159
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A process of authentication, by an outside medium, of a portable object connected to that medium via a transmission line and a system for carrying out the process. To authenticate a portable object (7) connected to a terminal linked to the outside medium by a transmission line, the outside medium (1) manages a control table (11) containing a non-secret piece of data (N₇) specific to each object that can be identified, as well as a parameter (E_a ) and a result (R_a) entered in the control table during the preceding authentication of the object. A new parameter (E_b), produced by the medium during authentication, is used to calculate a new result (R_b) in the object. The old result is recalculated. If it matches the one in the table (11), the object is authenticated, and the new parameter (E_b) and result (R_b) are entered in the control table in place of the preceding ones. The process is well suited for use in protecting computer networks.

Claims

1. A process for authentication of a portable object (7) by an outside medium (1), in which the portable object is connected to a terminal (4,5) linked to the outside medium (1) via a transmission line (2,3), and the portable object contains processing circuits and a memory with at least one secret piece of data (S_i, S_n, S₇);

and one non-secret piece of data (N_i, N_n, N₇) specific to that object, comprising the steps of;

having that object transmit the non-secret piece of data specific to that object to the outside medium;

having the processing circuits (10) in the medium use that piece of data and look in a control table (11) managed by the outside medium to find the result (Ra) of a calculation made during the last authentication of that object and a first parameter (Ea) taken into account to make that calculation;

having this first parameter (Ea) transmitted to the object;

having a second parameter (Eb) generated by a generator (101) of the outside medium and transmitted to the object;

having the processing circuits of the object calculate a first result (R'"'"'a) taking into account at least the first parameter (Ea) and the secret piece of data contained in the object;

having those same processing circuits calculate a second result (Rb) taking into account at least the second parameter (Eb) and the secret piece of data;

transmitting the first and second results to the terminal,

coding the unit composed of the first and second results in the terminal, so as to obtain a third result and transmitting this third result to the outside medium via the transmission line (2,3);

decoding this third result in the outside medium to find the first and second results;

comparing the first result of the decoding in the outside medium with the result of the calculation made during the last authentication of this object and stored in the control table (11); and

considering the object authentic if it matches and, in that case, replacing the result of the calculation made during the preceding authentication in the control table with the second result decoded by the outside medium, and replacing the first parameter with the second parameter generated during the authentication in progress.

2. A process according to claim 1, further comprising a preliminary phase step constituting an initial authentication of the object monitored by the service provider each time that a new object must be validated to authorize access to an application run by the outside medium, during which the processing circuits of the object are connected to the processing circuits of the outside medium, and during which the non-secret piece of data specific to the object is entered in the control table, and during which a parameter (En) is given to the object and a result is then calculated by the processing circuit of the object taking into account at least that parameter and the secret data stored in the object, and during which the parameter and the result thus calculated are stored in the control table, and matched with the non-secret piece of data specific to the object.

3. A process according to claim 2, wherein the preliminary phase is carried out by connecting the portable object directly to the outside medium.

4. A process according to claim 2, wherein the preliminary phase is carried out by connecting the portable object to one of the terminals (4,5) designed to receive objects and authenticate them;

the result calculated by the object is transmitted to the terminal, then coded in it;

the coded result is transmitted to the outside medium via the transmission line, then decoded in the outside medium, before being entered in the control table and matched with the non-secret data and the parameter produced by the processing circuits of the outside medium.

5. A process according to claim 1, further comprising the step of having the processing circuits of the terminal produce, according to a set rule, an image (R"a) of the first result (R'"'"'a), after this first result is received by these processing circuits and transmit that image to the outside medium (1) in combination with the third result (R'"'"'a/Rb)(c);

and after the outside medium (1) receives the unit composed of the third result and the image of the first result, it separates that image and the third result, and produces, according to the same set rule, the image (I(Ra)) of the result (Ra) contained in the control table since the last authentication of the object, then compares those two images and if they match authorizes at least temporary access to the application run by the outside medium, before it decodes the third result so as to confirm the authenticity of the object if the first result extracted from the decoding matches the result (Ra) contained in the control table since the preceding authentication of that object.

6. A process according to claim 5, wherein the image (R"a) of the first result (R'"'"'a) and the image (I(Ra)) of the result (Ra) stored in the control table during the last authentication are composed respectively of one part of those results, which are therefore identical if the object is authentic.

7. A process according to claim 5, wherein the image (R"a) of the first result (R'"'"'a) and the image (I(Ra)) of the result (Ra) stored during the previous authentication are obtained by converting those results respectively.

8. A process according to claim 7, wherein the conversion of either the first result (Ra) in order to obtain its image (R"a) or the result stored during the preceding authentication, is done by splitting up this result into at least two parts and by performing a logic operation, such as an EXCLUSIVE OR, an AND or an OR between these two parts.

9. A process according to claim 1 wherein the parameter (Ea,Eb) produced by the outside medium during the preliminary phase or during the authentication phases and then stored in the control table until the next authentication is a random number.

10. A process according to claim 1, wherein the non-secret piece of data (Ni) specific to each object entered in the control table (11) during the preliminary phase, then retransmitted during each authentication to find the information on the object in that table is the serial number of the object.

11. A process according to claim 1 wherein the non-secret piece of data (Ni) specific to each object is produced during the preliminary phase by the processing circuits of the outside medium, before being entered in the control table and into the memory of the object, upon request by the processing circuits of the outside medium (1).

12. A process according to claim 1, further comprising the step using first (R'"'"'a) and second (Rb) results for coding in the terminal, in order to obtain the third result ([R'"'"'a/Rb][c], and an asymmetrical or public key algorithm for decoding this third result in the processing circuits of the outside medium.

13. A process according to claim 1, wherein as soon as an object is connected to the outside medium, it has that medium organize a test phase, so as to recognize the mapping of that object and/or determine the type of program it contains, so as to establish later dialogues appropriately.

14. A system for authenticating a portable object, such as a microcircuit card containing processing circuits and a memory with at least one piece of secret data accessible only to the processing circuits of the object, and a non-secret piece of data specific to that object, characterized by the fact that it includes at least one terminal (4,5) connected to an outside medium (1) via any kind of transmission line, and by the fact that the terminal and the outside medium have means of carrying out the process according to claim 1.

15. A system according to claim 14, wherein the outside medium (1) comprises an information processing network, set up around a computer.