Method for the authentication of data

• US 5,343,530 A
• Filed: 08/27/1992
• Issued: 08/30/1994
• Est. Priority Date: 09/03/1991
• Status: Expired due to Term

• Current Assignee: Gemplus International SA (Thales SA)
• Original Assignee: Gemplus International SA (Thales SA)
• Inventors: Viricel, Gilles
• Primary Examiner(s): Swann, Tod R.
• Application Number:
  US07/936,595
• Time in Patent Office: 733 Days
• Field of Search: 379/379, 379/380, 380/3, 380/4, 380/23, 380/24, 380/25, 380/28, 380/29, 380/49, 380/50
• US Class Current: 705/67
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

Disclosed is a method of authentication of data elements of the type that may be needed, for example, to authenticate a chip card before permitting a transaction instrument to deliver a service to the holder of this card. Should the authentication consist in ascertaining that an information content is truly present in the card at a determined address of a memory of the card, it is proposed to make the length of the block of information elements parametrizable and to include, in the algorithm for the encryption of this block, data relating to this length; the logic address of the file that contains the block and the position of the block in the file are also used. Furthermore, preferably a recursive algorithm is performed in N steps: the block to be authenticated is sliced into slices of fixed length and, at each step, the Exclusive-OR function of a slice considered and of the result of the preceding step is used as the data to be encrypted. FIG. 1.

Claims

1. A method of encryption that uses data elements to be authenticated in the form of a block of data elements contained at a determined location of a determined file of a memory, and an encryption program that brings into play, as data to be encrypted, logic address of the file, position and length of the block, as well as the contents of the block said length being variable.

2. A method according to claim 1, wherein the encryption program sets up a slicing, into N slices, of the set of information elements comprising, firstly, the block of data elements to be authenticated and, secondly, other information elements such as said length of the block and its position, then it carries out an encryption program taking into account the number N of slices.

3. A method according to one of the claims 1 or 2, wherein the encryption program uses an algorithm C(D, K) with a secret key K, which is carried out iteratively in the following way:

the block of information elements to be authenticated is split up into slices of determined size, the nth order slice being designated by d_n ;

the encryption algorithm C(D, K) is carried out iteratively on data elements which, at a step n, bring into play the slice d_n and the result P_n-1 of the execution of the algorithm at the previous step n-1.

4. A method according to claim 3 wherein, at each step, the encryption algorithm is carried out on a piece of data which is a simple logic combination, preferable an Exclusive-OR combination, of the slice d_n and of the result P_n-1 of the execution of the algorithm at the previous step.

5. A method according to claim 3, wherein a step of iterative execution is the execution of the algorithm on a piece of data comprising, among other elements, the length of the block of data elements to be authenticated.

6. A method according to claim 5 wherein, at the first step, the encryption algorithm is carried out by using, as data D to be encrypted by the secret key K, the logic characteristics of position and length of the block of information elements as well as the logic address of the file and, possibly, a random number.

7. A method according to any of the above claims 1 or 2, wherein the data elements to be authenticated are contained in the memory of a memory card, wherein the encryption algorithm is performed by a microprocessor contained in the card under the control of a program contained in a memory of the card, and wherein the result of the encryption is transmitted to the exterior of the card.

8. A method according to claim 6, wherein the encryption algorithm uses a secret key that is contained in a memory of the card and has a content which cannot be transmitted to the exterior of the card.

9. A method of encryption of a block of data located at a predetermined location, in a predetermined file of memory, encrypting said block of data with additional data namely with an address of the predetermined location of said block of data, an address of said file, and length of said block of data.