Random clock composition-based cryptographic authentication process and locking system

• US 5,598,476 A
• Filed: 10/26/1995
• Issued: 01/28/1997
• Est. Priority Date: 04/20/1995
• Status: Expired due to Term

• Current Assignee: Lear Corporation EEDS and Interiors Incorporated (Lear Corporation)
• Original Assignee: United Technologies Automotive, Inc. (Lear Corporation)
• Inventors: Koopman, Philip J. Jr., LaBarre, Robert E.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/548,384
• Time in Patent Office: 460 Days
• Field of Search: 380/9, 380/21, 380/23, 380/25, 380/28, 380/46, 380/49, 340/825.31, 340/825.34
• US Class Current: 713/171
• CPC Class Codes: H04L 2209/043 of tables, e.g. lookup, substitution or mapping
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

The first and second devices exchange randomly generated messages that are used in a composition-based encryption/decryption process. At least one of the randomly generated messages is, itself, encrypted before transmission. The composition-based process (a cyclic redundancy code process, preferably enhanced with midcycle non-Galois Field operation) is embedded in both devices and not readily discernable by playback attack.

Claims

1. An attack resistant process for authenticating an access dialog between a first device and a second device in an electronic locking system, the process comprising the steps of:

at said first device;

generating a random first clocking key;

encrypting said first clocking key to produce an encrypted clocking key;

communicating said encrypted clocking key to said second device; and

using said first clocking key to perform a composition process to generate a first response code;

at said second device;

decrypting said encrypted clocking key to recover a second clocking key; and

using said second clocking key to perform said composition process to generate a second response code; and

at least one of said first and second devices;

comparing said first and second response codes and authenticating said access dialog if said first and second response codes match.

2. The process of claim 1 wherein said step of decrypting said encrypted clocking key recovers a second clocking key identical to said first clocking key.

3. The process of claim 1 wherein said random first clocking key is generated using a pseudo-random number generator.

4. The process of claim 1 wherein said random first clocking key is generated using thermal noise.

5. The process of claim 1 wherein said composition process comprises a CRC process.

6. The process of claim 1 wherein said composition process comprises an enhanced CRC process.

7. The process of claim 1 wherein one of said first and second devices is coupled to a vehicle entry system, and said process further comprises the step of:

unlocking said vehicle entry system in response to authenticating said access dialog.

8. The process of claim 1 wherein one of said first and second devices is coupled to a vehicle ignition system, and said process further comprises the step of:

enabling said vehicle ignition system in response to authenticating said access dialog.

9. An electronic locking apparatus comprising:

a first device comprising;

a random number generator for generating an n-bit first clocking key;

an encryption system for encrypting said n-bit first clocking key;

a first transmitter for transmitting said encrypted n-bit first clocking key;

a first receiver; and

a first composition processor for generating a first response code based on said n-bit first clocking key;

a second device comprising;

a second receiver for receiving said encrypted n-bit first clocking key;

decryption system for recovering a second clocking key from said received encrypted n-bit first clocking key; and

a second composition processor for generating a second response code based on said second clocking key; and

an authentication system for comparing said first and second response codes and for unlocking said locking apparatus if said first and second response codes match.

10. The apparatus of claim 9 wherein said second device further has:

a message generator for generating an n-bit message; and

a second transmitter for transmitting said n-bit message;

wherein said first composition processor generates said first response code based on the n-bit message.

11. The apparatus of claim 9 wherein said authentication system comprises an authentication comparator, and said first transmitter transmits said first response code to said authentication comparator.

12. The apparatus of claim 9 wherein said random number generator uses thermal noise to produce said first clocking key.

13. The apparatus of claim 9 wherein said random number generator is a pseudo-random number generator.

14. The apparatus of claim 9 wherein said first composition processor is a CRC processor.

15. The apparatus of claim 9 wherein said first composition processor is an enhanced CRC processor.

16. The apparatus of claim 9 wherein said second composition processor is a CRC processor.

17. The apparatus of claim 9 wherein said second composition processor is an enhanced CRC processor.

18. The apparatus of claim 9 wherein said electronic locking apparatus comprises a vehicle entry system.

19. The apparatus of claim 9 wherein said electronic locking apparatus enables and disables the vehicle ignition system.

20. An attack resistant process for authenticating an access dialog between a first device and a second device in an electronic locking system, the process comprising the steps of:

at said second device;

generating a random message; and

communicating said message to said first device;

at said first device;

generating a random first clocking key;

encrypting said first clocking key to produce an encrypted clocking key;

communicating said encrypted clocking key to said second device;

receiving said message from said second device;

using said first clocking key and said message to perform a composition process to generate a first response code; and

communicating said first response code to said second device; and

at said second device;

receiving said first response code;

decrypting said encrypted clocking key to recover a second clocking key;

using said second clocking key and said message to perform said composition process to generate a second response code; and

comparing said first and second response codes and authenticating said access dialog if said first and second response codes match.

21. The process of claim 20 wherein said step of decrypting said encrypted clocking key recovers a second clocking key identical to said first clocking key.

22. The process of claim 20 wherein said random first clocking key is generated using a pseudo-random number generator.

23. The process of claim 20 wherein said random first clocking key is generated using thermal noise.

24. The process of claim 20 wherein said composition process comprises a CRC process.

25. The process of claim 20 wherein said composition process comprises an enhanced CRC process.

26. The process of claim 20 wherein said process further comprises the step of:

unlocking said vehicle entry system in response to authenticating said access dialog.

27. The process of claim 20 wherein said process further comprises the step of:

enabling said vehicle ignition system in response to authenticating said access dialog.