Data card verification system

• US 6,178,507 B1
• Filed: 02/02/1998
• Issued: 01/23/2001
• Est. Priority Date: 02/03/1997
• Status: Expired due to Term

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Certicom Corporation (Blackberry Limited)
• Inventors: Vanstone, Scott A
• Primary Examiner(s): Swann, Tod R.
• Assistant Examiner(s): Callahan, Paul E.
• Application Number:
  US09/016,926
• Time in Patent Office: 1,086 Days
• Field of Search: 380/21, 380/23, 380/24, 380/30, 380/44, 380/283, 380/285, 705/64, 705/65, 705/67, 705/71, 705/73, 713/168, 713/169, 713/172, 713/176, 713/180
• US Class Current: 713/169
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3066 involving algebraic varieties, e.g. elliptic or hyper-elliptic curves
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme
• CPC Class Codes: H04L 9/3252 using DSA or related signature schemes, e.g. elliptic based signatures, ElGamal or Schnorr schemes

Abstract

A method for verifying the authenticity of messages exchanged between a pair of correspondents in an electronic conducted over a data transmission system where the correspondents each include respective signing and verifying portions of a first signature scheme and a second signature scheme different from the first and utilizing an elliptic curve cryptosystem.

Claims

1. A method of verifying the authenticity of messages exchanged between a pair of correspondents in an electronic transaction conducted over a data transmission system, said correspondents each including respective signing and verifying portions of a first signature scheme and a second signature scheme different to said first scheme and utilizing an elliptic curve crypto system said method comprising the steps of:

one of said correspondents signing a message according to a signing portion of one of said schemes associated with said one correspondent to provide a first signed message and transmitting said first signed message to another of said correspondents;

said other correspondent utilizing said verifying portion of said one signature scheme to verify said first signed message received from said one correspondent;

said other correspondent signing a message by utilizing said signing portion of the other of said signature schemes to provide a second signed message and transmitting a second signed message to said one correspondent;

said one correspondent verifying said second signed message received from said other correspondent by utilizing said verification portion of said other of said signature schemes, wherein one of said signature and one of said verifications is performed according to said second signature scheme utilizing an elliptic curve cryptosystem; and

rejecting said transaction if either verification fails.

2. A method as defined in claim 1, said first signature scheme is computationally more difficult in signing than verifying, while said second signature scheme is computationally more difficult in verifying than signing, thereby allowing one of said correspondents to participate with relatively little computing power while maintaining security of said transaction.

3. A method as defined in claim 1, wherein said first digital signature scheme is an RSA type scheme.

4. A method as defined in claim 1, wherein said first digital signature scheme is a DSS type scheme.

5. A method of verifying the authenticity of messages exchanged between a pair of correspondents in electronic transaction conducted over a data transmission system, said correspondents each including respective signing and verifying portions of a first signature scheme and a second signature scheme, different from said first scheme and utilizing an elliptic curve crypto system said method comprising the steps of:

one of said correspondents transmitting to another of said correspondents, a first certificate including public key and identification information of said first correspondent;

said other correspondent verifying said certificate and extracting said public key said identification information therefrom;

said other correspondent generating a first challenge R₁ and transmitting said challenge to said one correspondent;

said one correspondent signing said received challenge R₁ in accordance with said signing portion of one of said signature schemes to provide a second certificate C2;

said one correspondent generating a second challenge and transmitting said second challenge along with said certificate C2 to said other correspondent;

said other correspondent verifying said certificate C2 in accordance with said verification portion of one of said signature schemes;

said other correspondent signing said second challenge R2 in accordance with said signing portion of the other of said signature schemes to provide a third certificate and transmitting said said third certificate to said one correspondent; and

said one correspondent verifying said third certificate in accordance with said verification portion of said other of said signature schemes, and rejecting said transaction if either said signature is not verified.

6. A smart card for use in an electronic transaction with a correspondent, said card comprising:

a memory including

a verification algorithm of a first signature scheme to implement a verification of a signature performed according to a first signature generation algorithm by said correspondent;

a signing algorithm of second signature scheme different to said first signature scheme and utilizing elliptic curve cryptography, said algorithm implementing a signature according to a second signature generation algorithm;

a program for invoking said algorithms; and

processor means for running said first verification algorithm for verifying a first message signed by sad correspondent and for running said second signature for signing a second message for transmission to said correspondent.

7. A card according to claim 6 wherein said verification algorithm verifies an RSA signature.

8. A card according to claim 6 wherein said verification algorithm verifies a DSS signature.