Method and apparatus for verifying CGA signature

• US 8,589,692 B2
• Filed: 04/21/2011
• Issued: 11/19/2013
• Est. Priority Date: 10/21/2008
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Shen, Shuo
• Primary Examiner(s): Brown, Christopher
• Assistant Examiner(s): MOHAMMADI, FAHIMEH M
• Application Number:
  US13/091,343
• Publication Number:
  US 20110197072A1
• Time in Patent Office: 943 Days
• Field of Search: 713/176, 713/168, 705 711- 742, 709/248, 380/287, 726 1- 36, 717100-167
• US Class Current: 713/176
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme
• CPC Class Codes: H04L 9/3252 using DSA or related signature schemes, e.g. elliptic based signatures, ElGamal or Schnorr schemes

Abstract

A method and apparatuses for verifying Cryptographically Generated Address (CGA) signature are provided. The method includes: receiving a message sent by a CGA address owner, wherein a RSA public key, a first RSA public key signature, a second public key, and a second public key signature are carried in the message, the first RSA public key binds one or more second public keys, and a part protected by the first public key signature includes the one or more second public keys; verifying the first RSA public key signature according to the message; extracting the second public key, and verifying the second public key signature. According to the method and apparatuses of the embodiment, the effect of supporting other public key can be achieved, the change of the IP address can be omitted, and public key deployment and computing resources are saved.

Claims

1. A method for verifying Cryptographically Generated Address (CGA) signature, comprising:

receiving, by a receiver, a message sent by a CGA owner, wherein a first Ron-Shamir-Adleman (RSA) public key, a first RSA public key signature, a second public key, and a second public key signature are carried in the message, the first RSA public key binds one or more second public keys, and a part of the message includes the one or more second public keys, wherein the part of the message is protected by the first RSA public key signature, wherein the second public key is an Elliptic Curve Cryptography (ECC) public key, and the corresponding second public key signature is an ECC public key signature; and

verifying, by the receiver, the first RSA public key signature according to the message;

extracting the second public key, and verifying the second public key signature.

2. The method according to claim 1, wherein

a CGA interface identifier, which is generated according to a public key of the CGA owner and auxiliary information by using a hash algorithm, is carried in the message.

3. The method according to claim 2, further comprising:

verifying, by the receiver, the CGA according to the CGA interface identifier carried in the message.

4. The method according to claim 3, wherein the verifying the CGA according to the CGA interface identifier carried in the message comprises:

obtaining, by the receiver, the public key of the CGA owner and the auxiliary information by communicating with the CGA owner;

computing, by the receiver, another CGA interface identifier according to the public key of the CGA owner and the auxiliary information by using the hash algorithm; and

verifying, by the receiver, the CGA by comparing the computed CGA interface identifier and the CGA interface identifier contained in the message.

5. A computer-readable storage device, wherein the device stores instructions that may be executed to:

add a first Ron-Shamir-Adleman (RSA) public key, a first RSA public key signature, a second public key, and a second public key signature to a message to be sent from a CGA owner, wherein the first RSA public key binds one or more second public keys, and a part of the message comprises the one or more second public keys, wherein the part of the message is protected by the first RSA public key signature, wherein the second public key is an Elliptic Curve Cryptography (ECC) public key, and the corresponding second public key signature is an ECC public key signature; and

send the message from the CGA owner, wherein the CGA owner adds the first RSA public key, the first RSA public key signature, the second public key, and the second public key signature to the message.

6. A computer-readable storage device, wherein the device stores a set of instructions that may be executed to:

receive a message sent by a CGA owner, wherein a first Ron-Shamir-Adleman (RSA) public key, a first RSA public key signature, a second public key, and a second public key signature are carried in the message, the first RSA public key binds one or more second public keys, and a part of the message includes the one or more second public keys, wherein the part of the message is protected by the first RSA public key signature, wherein the second public key is an Elliptic Curve Cryptography (ECC) public key, and the corresponding second public key signature is an ECC public key signature; and

verify the first RSA public key signature according to the message, extract the second public key, and verify the second public key signature.

7. The computer-readable storage device apparatus according to claim 6, wherein a CGA interface identifier, which is generated according to the public key of the CGA owner and auxiliary information by using a hash algorithm, is carried in the message.

8. The computer-readable storage device according to claim 7, wherein the device further stores instructions that may be executed to verify the CGA according to the CGA interface identifier carried in the message.