Message authentication

• US 7,702,910 B2
• Filed: 06/24/2003
• Issued: 04/20/2010
• Est. Priority Date: 10/24/2002
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Gehrmann, Christian
• Primary Examiner(s): Truong; Thanhnga B
• Application Number:
  US10/602,167
• Publication Number:
  US 20050262418A1
• Time in Patent Office: 2,492 Days
• Field of Search: 713/181, 713/166, 713/170, 713/169, 713/171, 714/758, 714/21, 714/52, 714/762, 360/48, 360/49, 360/53, 709/227
• US Class Current: 713/181
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/3033 details relating to pseudo-prime or prime number generation, e.g. primality test
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

A method of processing a message to determine a tag value from the message and from a key according to a message authentication code. The method including the steps of selecting one of a plurality of symbols, the plurality of symbols forming a codeword encoding a data item derived from the message, the codeword encoding the data item according to an error correcting code, wherein said key determines which one of said plurality of symbols is selected; and determining the tag value to be the selected symbol.

Claims

1. A method of processing a message to determine a tag value from the message and from a key according to a message authentication code, the method comprising:

selecting one of a plurality of symbols, the plurality of symbols forming a codeword encoding a data item derived from the message, wherein the data item is derived from the message consists of said message, the codeword encoding the data item according to an error correcting code, wherein said key determines which one of said plurality of symbols is selected;

determining the tag value to be the selected symbol;

determining said data item to be a hash value of a one-way hash function calculated from the message;

communicating at least a contribution to the message from a sender to a receiver via a first communications channel; and

communicating the tag value and/or the key from the sender to the receiver via a second communications channel different from the first communications channel.

2. A method according to claim 1, wherein the key is short enough to be communicated via a user interaction.

3. A method according to claim 1, wherein the error correcting code is a Reed-Solomon code and wherein the tag value is determined by evaluating a Reed-Solomon encoding polynomial at a point determined by the key.

4. A method according to claim 1, wherein the tag value is an element in a finite field.

5. A method according to claim 1, wherein the second communications channel includes a user interaction.

6. A communications device for communicating data messages, the communications device comprising:

a transmitting/receiving circuitry operable on a first communication channel operable to transceive at least a contribution to a message via the first communications channel;

a transmitting/receiving circuitry operable on a second communication channel operable to transceive a tag value and a key via the second communications channel;

a processor operable to determine the tag value from the message and from the key according to a message authentication code, and wherein the processor is further operable to select one of a plurality of symbols, the plurality of symbols forming a codeword encoding a data item derived from the message, the codeword encoding the data item according to an error correcting code, wherein said key determines which one of said plurality of symbols is selected, and wherein the processing means is further adapted to determine the tag value to be the selected symbol.

7. A computer program product embodied on a computer readable medium loaded into a memory and executed by a processor comprising:

instructions to control a transmitting/receiving circuitry operable on a first communication channel to transceive at least a contribution to a message via the first communications channel and a transmitting/receiving circuitry operable on a second communication channel operable to transceive a tag value and a key via the second communications channel;

instructions causing the processor to determine a tag value from a message and from a key according to a message authentication code, further comprising;

instructions causing the processor to select one of a plurality of symbols, the plurality of symbols forming a codeword encoding a data item derived from the message, the codeword encoding the data item according to an error correcting code, wherein said key determines which one of said plurality of symbols is selected; and

instructions causing the processor to determine the tag value to be the selected symbol.

8. A computer program product embodied on a computer readable medium loaded into a memory and executed by a processor comprising:

instructions to cause the processor to communicate data messages over a first communications channel;

instructions to cause the processor to determine a tag value from a message and from a key according to a message authentication code sent over a second communications channel;

instructions to cause the processor to select one of a plurality of symbols, the plurality of symbols forming a codeword encoding a data item derived from the message, the codeword encoding the data item according to an error correcting code, wherein said key determines which one of said plurality of symbols is selected; and

instructions to cause the processor to determine the tag value to be the selected symbol.

9. A communications device for communicating data messages, the communications device comprising:

a receiving circuitry operable on a first communication channel operable to receive at least a contribution to a message via the first communications channel;

a receiving circuitry operable on a second communication channel operable to receive a tag value and a key via the second communications channel;

a processing unit operable to determine the tag value from a message and from the key according to a message authentication code, and wherein the processing unit is adapted to select one of a plurality of symbols, the plurality of symbols forming a codeword encoding a data item derived from the message, the codeword encoding the data item according to an error correcting code, wherein said key determines which one of said plurality of symbols is selected, and wherein the processing unit is adapted to determine the tag value to be the selected symbol.