Method and system for client-server mutual authentication using event-based OTP

• US 8,130,961 B2
• Filed: 02/08/2008
• Issued: 03/06/2012
• Est. Priority Date: 06/05/2007
• Status: Active Grant

• Current Assignee: IQVIA, Inc. (IQVIA Holdings, Inc.)
• Original Assignee: Diversinet Corporation
• Inventors: Machani, Salah E., TESLENKO, Konstantin
• Primary Examiner(s): Shan, April
• Application Number:
  US12/028,232
• Publication Number:
  US 20100031051A1
• Time in Patent Office: 1,488 Days
• Field of Search: 380/259, 380/44, 380/277, 380/278, 713/181, 713/176, 713/171, 705/71, 705/75, 726/9, 726/20
• US Class Current: 380/277
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

The invention comprises a method of authenticating and encrypting a client-server communication, comprising the steps of: a) generating a first one-time password (OTP1) and a second one-time password (OTP2) from a cryptographic token; b) generating an encryption key (K_ENC) and a MAC key (K_MAC) based on OTP2; c) preparing and protecting the client data using K_ENC and K_MAC; d) sending a request message from the client to the server, the request message containing the protected client data, a cryptographic token identifier (TID) and OTP1; e) validating OTP1 at the server, and generating OTP2 at the server upon successful validation; f) deriving K_ENC and K_MAC from OTP2 at the server; g) processing the request message and generating result data h) encrypting the result data using K_ENC and creating a digest using K_MAC; i) sending the encrypted result data to the client; and i) decrypting the result data at the client using K_ENC and verifying the authenticity of the result data using K_MAC.

Claims

1. A method of authenticating and encrypting a client-server communication, comprising:

a) generating, by a hardware client device, a first one-time password (OTP1) and an immediately subsequent to said OTP1 second one-time password (OTP2) from a cryptographic token;

b) generating an encryption key (K_ENC) and a MAC (Message Authentication Code) key (K_MAC) based on said OTP2;

c) protecting client data by encrypting said client data using said K_ENC and generating a digest of said client data using said K_MAC;

d) sending a request message from the hardware client device to a hardware server computer, the request message containing the protected client data, a cryptographic token identifier (TID) and said OTP1;

e) validating said OTP1 at the hardware server computer, and regenerating said OTP2 at the hardware server computer upon successful validation of said OTP1;

f) regenerating said K_ENC and said K_MAC from said OTP2 at the hardware server computer;

g) decrypting and authenticating the protected client data using said K_ENC and said K_MAC respectively at the hardware server computer;

h) processing the request message and generating result data;

i) encrypting the result data using said K_ENC and creating a digest of said result data using said K_MAC;

j) sending the encrypted result data to the hardware client device; and

k) decrypting the result data at the hardware client device using said K_ENC and verifying the authenticity of the result data using said K_MAC.

2. The method of claim 1, wherein the step of validating said OTP1 takes place internally at the hardware server computer.

3. The method of claim 1, wherein the step of validating said OTP1 takes place at a validation service external to the hardware server computer.

4. The method of claim 1, wherein said K_ENC and said K_MAC are derived using PKDF2 (Password-Based Key Derivation Function).

5. The method of claim 1, wherein said K_MAC is derived using a SHA-1 (Secure Hash Algorithm) MAC algorithm.

6. The method of claim 1, wherein said OTP1 and said OTP2 are derived using a HMAC-based (Hashed Message Authentication Code) OTP (One-Time Password) algorithm.

7. A system for authenticating and encrypting a client-server communication, comprising:

a hardware server computer;

said hardware server computer configured to receive a request message from a client, the request message containing protected client data, a cryptographic identifier token (TID) and a first one-time password (OTP1), said protected client data being encrypted using an encryption key (K_ENC) and having a digest created using a MAC (Message Authentication Code) key (K_MAC), both said K_ENC and said K_MAC being generated from a cryptographic token by said client using an immediately subsequent to said OTP1 second one-time password (OTP2),

said hardware server computer further configured to validate said OTP1 and regenerate said OTP2 upon successful validation of said OTP1, regenerate said K_ENC and said K_MAC from said OTP2, decrypt and authenticate the protected client data using said K_ENC and said K_MAC respectively, process the request message and generate result data, encrypt the result data using said K_ENC, create a digest of the result data using said K_MAC, and send said encrypted result data to said client.

8. The system of claim 7, wherein said hardware server computer validates said OTP1 via an external validation service.

9. The system of claim 7, wherein said K_ENC and said K_MAC are derived using PKDF2 (Password-Based Key Derivation Function).

10. The system of claim 7, wherein said K_MAC is derived using a SHA-1 (Secure Hash Algorithm) MAC algorithm.

11. The system of claim 7, wherein said OTP1 and said OTP2 are derived using a HMAC-based (Hashed Message Authentication Code) OTP (One-Time Password) algorithm.