Method and device for agreeing shared key between first communication device and second communication device

• US 8,261,076 B2
• Filed: 01/26/2007
• Issued: 09/04/2012
• Est. Priority Date: 01/30/2006
• Status: Expired due to Fees

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Abendroth, Jörg, Cuellar, Jorge, Rajasekaran, Hariharan
• Primary Examiner(s): Perungavoor, Venkat
• Application Number:
  US12/223,386
• Publication Number:
  US 20090041251A1
• Time in Patent Office: 2,048 Days
• Field of Search: None
• US Class Current: 713/169
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys

Abstract

Based on security parameters previously agreed upon by first and second communication devices, a first security value is determined by the second communication device and transmitted to the first communication device. The first communication device determines second and third security values based on the security parameters and the first security value and transmits the second and third security values to the second communication device. The second communication device determines a fourth security value based on the security parameters and, if the second security value matches the fourth security value, authenticates the first communication device. Upon successful authentication of the first communication device, a shared key is determined by both communication devices based on the third security value and the security parameters.

Claims

1. A method for agreeing upon a shared key between first communication and second communication devices, comprising:

agreeing upon security parameters by the first and second communication devices;

determining a first security value by the second communication device based on the security parameters previously agreed upon;

transmitting the first security value from the second communication device to the first communication device;

determining second and third security values by the first communication device based on the first security value and the security parameters previously agreed upon;

transmitting the second and third security values from the first communication device to the second communication device;

authenticating the first communication device by the second communication device, if the second security value matches a fourth security value determined by the second communication device based on the security parameters previously agreed upon;

determining, by the first and second communication devices upon successful authentication of the first communication device, a shared key based on the third security value and the security parameters previously agreed upon.

2. The method as claimed in claim 1, wherein the security parameters previously agreed upon include parameters of an elliptic curve and parameters for an asymmetric cryptographic method.

3. The method as claimed in claim 1, wherein the security parameters previously agreed upon and the first, second and third security values are transmitted wirelessly between the first and the second communication devices.

4. The method as claimed in claim 1, wherein the security parameters previously agreed upon and the first, second and third security values are transmitted between the first and the second communication devices via high-frequency electromagnetic signals in accordance with an RFID standard.

5. The method as claimed in claim 1,

further comprising incrementing a counter value in the first communication device after each agreement of the shared key,

wherein said determining of the third security value is based on the counter value.

6. The method as claimed in claim 1, wherein

a fifth security value is determined by the second communication device on the basis of the agreed security parameters and the transmitted second or third security value and transmitted to the first communication device,

the first communication device authenticates the second communication device if the transmitted fifth security value and a sixth security value determined by the first communication device on the basis of the agreed security parameters match.

7. A first device that is communicably connectable to a second communication device, comprising:

a computer processor that executes;

receiving a first security value determined by the second communication device based on security parameters previously agreed upon by the first and second communication devices;

determining second and third security values based on the received first security value and the security parameters previously agreed upon and transmitting the second and third security values to the second communication device, wherein a fourth security value is determinable by the second communication device based on the security parameters previously agreed upon for authenticating the first communication device when the second security value matches the fourth security value; and

determining upon successful authentication of the first communication device by the second communication device, a shared key based on the third security value and the security parameters previously agreed upon.