Method and system for authentication and electronic signature

• US 6,647,493 B1
• Filed: 03/04/1999
• Issued: 11/11/2003
• Est. Priority Date: 03/06/1998
• Status: Expired due to Term

• Current Assignee: STMicroelectronics SRL (STMicroelectronics NV)
• Original Assignee: STMicroelectronics SRL (STMicroelectronics NV)
• Inventors: Occhipinti, Luigi, Di Cola, Eusebio, Caponetto, Riccardo, Di Bernardo, Giovanni
• Primary Examiner(s): Barron, Gilberto
• Assistant Examiner(s): Zand, Kambiz
• Application Number:
  US09/262,453
• Time in Patent Office: 1,713 Days
• Field of Search: 713/168, 713/170, 713/169, 380/28, 380/46, 380/263, 380/246, 380/262, 380/260
• US Class Current: 713/170
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/001 using chaotic signals
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

The method for authentication and electronic signature is of the private-key, challenge and response type between a user requesting an authorization, via, for example, a smart card and a controller—check terminal—supplying the authorization. To increase security of the authorization or authentication operations, the smart card comprises a chaotic generator generating user'"'"'s acknowledgement code, which is compared with a comparison code generated by the check terminal using a chaotic generator which is the same.

Claims

1. A method for authentication and electronic signature, comprising:

generating a casual initial signal, comprising acquiring a random signal;

generating an authentication and electronic signature signal by using a first private key, the casual initial signal, and a first chaotic signal generator and generating a first chaotic signal by activating the first chaotic signal generator for a development time related to the random signal;

generating a comparison signal by using the casual initial signal, a second private key equal to the first private, and a second chaotic signal generator identical to the first chaotic generator and generating a second chaotic signal; and

comparing said authentication and electronic signature signal with said comparison signal.

2. The method according to claim 1 wherein said casual initial signal comprises a message to be transmitted.

3. The method according to claim 1 wherein acquiring a random signal comprises acquiring a plurality of message blocks.

4. A method for authentication and electronic signature, comprising:

generating a casual initial signal, comprising acquiring a respective random signal for a plurality of message blocks, each message block comprising a first message block, a successive message block, and a final message block;

generating an authentication and electronic signature signal by using a first private key, the casual initial signal, and a first chaotic signal generator and generating a first chaotic signal, which further comprises;

a) acquiring the first message block;

b) generating a chaotic output signal from said first message block by activating the first chaotic generator for a development time correlated to the respective random signal;

c) combining said chaotic output signal with the successive message block to obtain a combined block;

d) generating a new chaotic output signal from said combined block by activating the first chaotic generator for a development time correlated to the respective random signal;

e) repeating said steps c) and d) as far as the last message block; and

f) supplying said chaotic output signal as the signature of said message;

generating a comparison signal by using the casual initial signal, a second private key equal to the first private key, and a second chaotic signal generator identical to the first chaotic generator and generating a second chaotic signal; and

comparing said authentication and electronic signature signal with said comparison signal.