Method to manage a one time password key

• US 10,164,954 B2
• Filed: 03/25/2015
• Issued: 12/25/2018
• Est. Priority Date: 03/25/2014
• Status: Active Grant

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Lansler, Martin, Petit, Sebastien, Pierquin, Guillaume
• Primary Examiner(s): Okeke, Izunna
• Application Number:
  US15/128,185
• Publication Number:
  US 20170104739A1
• Time in Patent Office: 1,371 Days
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Abstract

The present invention relates to a method to manage a One Time Password key, referenced OTP key, used in an OTP algorithm in a user device having access to an unsafe storage including the steps of retrieving a Personal Identification Number, named PIN, of a user of the user device, deriving a symmetric key from the PIN, encrypting the OTP key using the derived symmetric key, storing the encrypted OTP key in the unsafe storage, decrypting the OTP key using the derived symmetric key, and generating a next OTP key using an incremental parameter, wherein the start value of the incremental parameter of the OTP key generation is random.

Claims

1. A method to manage a One Time Password key, referenced OTP key, used in an OTP algorithm in a user device having access to an unsafe storage including the preliminary steps of:

retrieving a Personal Identification Number, named PIN, of a user of the user device,

deriving a symmetric key from the PIN,

encrypting the OTP key using the derived symmetric key,

storing the encrypted OTP key in the unsafe storage

the method further comprising the following steps, when the calculation of an OTP is required;

retrieving a PIN of a user of the user device,

decrypting the stored OTP key using the derived symmetric key, and

using said decrypted OTP key and an incremental parameter to generate a next OTP,

wherein the incremental parameter has values within an interval in which the number of possible values for the incremental parameter is limited and the algorithm is such that a counter is not wrapped, and the start value of the incremental parameter of the OTP generation is a generated random value chosen in a limited interval of possible values for the incremental parameter,

and wherein, in the case the counter is incremented, the limited interval is one including lowest bits.

2. The method according to claim 1, wherein, the OTP algorithm is time based, the start value of the incremental parameter of the OTP generation is a random start time lying in the range from time 0 to current time such that the number of calculated time steps effectively becomes random.

3. The method according to claim 1, wherein the incremental parameter of the OTP generation is derived from a one-way internal state updated after each OTP generation.

4. The method according to claim 3, wherein the derivation of the incremental parameter is a reduction of the internal state to a predetermined interval of bytes of the internal state.

5. The method according to claim 3, wherein the derivation of the incremental parameter is a mix of a part of the internal state and of a monotonically incremented value.

6. A user device having access to an unsafe storage and implementing the method of claim 1.