Process for the authentication of a data processing system by another data processing system

• US 5,481,612 A
• Filed: 12/15/1993
• Issued: 01/02/1996
• Est. Priority Date: 12/15/1992
• Status: Expired due to Term

• Current Assignee: Chartoleaux KG LLC (Intellectual Ventures LLC)
• Original Assignee: France Telecom Etablissement Autonome de Droit Public
• Inventors: Allegre, Francois, Millot, Jean, Arditti, David, Campana, Mireille
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/167,502
• Time in Patent Office: 748 Days
• Field of Search: 380/23, 380/25, 380/30
• US Class Current: 713/159
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2103 Challenge-response

Abstract

A process is provided for authentication in a data processing system using a data processing terminal having a programmable memory. The terminal supplies to a server an identify code (ID), the server checks the identify code, and in the case of agreement, supplies a random number (ALEA-A) to the terminal. The terminal encodes the random number using a signature algorithm (B) defined by a secret key (SID), and supplies a first signed random number (ALEA-S) to the server, which applies a signature checking algorithm (T, B, C) to the number (ALEA-S). The identity code and an encrypted secret key (KID) are written into the memory. The secret key (SID) used for the signature of the random number is determined using a decrypting algorithm (INVA) using the encrypted secret key (KID) and a password (MP) supplied by the terminal user. Particular utility for the present invention is found in the area of data processing, although other utilities are also contemplated.

Claims

1. A process for authentication of a first data processing system by a second data processing system, and comprising, supplying an identity code (ID) from said first system to said second system to permit said second system to check said identity code for agreement, supplying a random number (ALEA-A) from said second system to said first system if said agreement is found whereby to permit said first system to encode said random number using a signature algorithm (B) using a secret key (SID) whereby to generate a first signed random number (ALEA-S), and supplying said first signed random number from said first system to said second system to permit said second system to apply a signature checking algorithm (T,B,C) to said first signed random number;

and wherein, the first system includes a data processing terminal including a memory for being programmed and for storing data, said identity code and an encrypted secret fey (KID) are stored in said memory, and the secret key used for the signature of the random number is determined with aid of a decrypting algorithm (INVA) using the encrypted secret key (KID) and a password (MP) supplied by a user to the terminal.

2. A process according to claim 1, wherein the checking algorithm comprises a transformation, by a conversion treatment (T), of the identity code into the secret key a signature of the random number by a signature algorithm (B) defined by the secret key whereby to supply a reference signature (ALEA-R) which is a second signed random number, and a comparison of the reference signature with the first signed random number from the terminal.

3. A process according to claim 1, wherein the encrypted key is determined by encrypting the secret key with an encrypting algorithm (A) using a password chosen by default.

4. A process according to claim 1, and further comprising, changing the password to a new password (NMP), and encrypting the secret key by means of an encrypting algorithm (A) and the new password whereby to supply a new encrypted key.