Methods and apparatus for finding a shared secret without compromising non-shared secrets

• US 7,461,260 B2
• Filed: 12/31/2002
• Issued: 12/02/2008
• Est. Priority Date: 12/31/2002
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Wheeler, David M., Drews, Paul C.
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Tran; Tongoc
• Application Number:
  US10/334,851
• Publication Number:
  US 20040128517A1
• Time in Patent Office: 2,163 Days
• Field of Search: 713/176, 713/155, 713/156, 713/170, 713/175, 713/168, 713/169, 713/180, 713/182, 380/270, 380/30
• US Class Current: 713/180
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols

Abstract

Methods and apparatus for finding a shared secret without compromising non-shared secrets are disclosed. The methods and apparatus receive a first group of hashed secrets from a communication device and compare the first group of hashed secrets to a second group of hashed secrets associated with an application server. A shared secret is identified among the first and second groups of hashed secrets. An application associated with the shared secret is sent to the communication device via a communication channel.

Claims

1. A method comprising:

receiving a first group of hashed secrets from a communication device;

comparing the first group of hashed secrets to a second group of hashed secrets associated with an application server;

identifying a shared secret among the first and second groups of hashed secrets; and

sending an application associated with the shared secret to the communication device via a communication channel.

2. A method as defined in claim 1, wherein receiving the first group of hashed secrets from the communication device includes receiving hashed digital certificates associated with the communication device.

3. A method as defined in claim 1, wherein identifying the shared secret among the first and second groups of hashed secrets includes identifying a shared digital certificate.

4. A method as defined in claim 1, wherein receiving the first group of hashed secrets includes receiving secrets that have been augmented with a random number.

5. A method as defined in claim 1, wherein receiving the first group of hashed secrets includes receiving encrypted secrets.

6. An application server, comprising:

secure information stored within the application server;

a communications interface adapted to be coupled to a communication channel; and

a processor unit programmed to cause the application server to;

receive a first group of hashed information from a communication device via the communications interface;

hash at least a portion of the secure information to form a second group of hashed information;

compare the first group of hashed information to the second group of hashed information; and

identify a shared secret among the first and second groups of hashed information.

7. An application server as defined in claim 6, wherein the secure information includes a plurality of digital certificates.

8. An application server as defined in claim 6, wherein the communication channel includes a public communication channel.

9. A machine accessible medium having data stored thereon that, when executed, causes a machine to:

receive a first group of hashed secrets from a communication device;

compare the first group of hashed secrets to a second group of hashed secrets associated with an application server;

identify a shared secret among the first and second groups of hashed secrets; and

send an application associated with the shared secret to the communication device via the communication channel.

10. A machine accessible medium as defined in claim 9 having data stored thereon that, when executed, causes the machine to receive the first group of hashed secrets from the communication device by receiving hashed digital certificates associated with the communication device.

11. A machine accessible medium as defined in claim 9 having data stored thereon that, when executed, causes the machine to identify the shared secret among the first and second groups of hashed secrets by identifying a shared digital certificate.

12. A communication device, comprising:

secure information stored within the communication device;

a communications interface adapted to communicate via a communication channel; and

a processor unit programmed to cause the communication device to;

receive a first group of hashed information via the communication channel;

hash at least a portion of the secure information to form a second group of hashed information;

compare the first and second groups of hashed information to identify matching information; and

receive data via the communication channel based on the matching information.

13. A communication device as defined in claim 12, wherein the secure information includes a digital certificate associated with the communication device.

14. A communication device as defined in claim 12, wherein the communications interface includes a wireless communication interface.