Methods and systems for authentication using zero-knowledge code

• US 10,192,041 B2
• Filed: 09/22/2015
• Issued: 01/29/2019
• Est. Priority Date: 09/22/2015
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Nagravision SA (Kudelski SA)
• Inventors: Fischer, Nicolas, Gauteron, Laurent
• Primary Examiner(s): Kim, Tae K
• Assistant Examiner(s): Teng, Louis C
• Application Number:
  US14/861,776
• Publication Number:
  US 20170083690A1
• Time in Patent Office: 1,225 Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/3218 using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security

Abstract

Disclosed herein are methods and systems for authentication using zero-knowledge code. One embodiment takes the form of a process that includes detecting an accessory-access-request event associated with a trusted accessory. The process includes generating a seed sequence having a first number of seed-sequence elements. The process includes outputting an indication of at least one seed-sequence element. The process includes receiving at least one seed-sequence-element-modifier signal for at least one of the seed-sequence elements. The process includes modifying the generated seed sequence in accordance with the at least one received seed-sequence-element-modifier signal. The process includes comparing the modified seed sequence with a stored access sequence. The process includes granting operational access to the trusted accessory when the modified seed sequence matches the stored access sequence. The process includes denying operational access to the trusted accessory when the modified seed sequence does not match the stored access sequence.

Claims

1. A method comprising:

receiving, at an accessory to a communication device, an accessory-access-request event associated with authenticating a connection between the accessory and the communication device;

generating an access sequence within the accessory, the access sequence to enable the communication device to exchange encrypted data with the accessory;

performing an authentication protocol including;

generating a seed sequence having a plurality of seed-sequence elements;

the accessory, responsive to detecting the accessory-access-request event, outputting, via a user interface of the accessory, an indication of at least one seed-sequence element of the generated seed sequence;

receiving, at the accessory from the communication device, at least one seed-sequence-element-modifier signal for at least one of the seed-sequence elements associated with an outputted indication;

modifying, at the accessory, the seed sequence in accordance with the at least one received seed-sequence-element-modifier signal;

comparing, at the accessory, the modified seed sequence with the access sequence;

if the modified seed sequence matches the access sequence, the accessory granting the communication device operational access to the accessory and responsive to operational access being granted, the accessory exchanging encrypted data with the communication device; and

if the modified seed sequence does not match the access sequence, the accessory denying the communication device operational access to the accessory.

2. The method of claim 1, wherein the accessory is selected from the group consisting of (i) an audio-output accessory, (ii) a visual-output accessory, and (iii) a haptic-output accessory.

3. The method of claim 1, wherein each seed-sequence element is part of an ordered set.

4. The method of claim 3, wherein at least one seed-sequence element is an element selected from the group consisting of (i) a number, (ii) an alphabetical character, (iii) a color in an ordered set of colors, (iv) an image in an ordered set of images, and (v) a sound in an ordered set of sounds.

5. The method of claim 3, wherein at least one of the at least one seed-sequence-element-modifier signals comprises an increment-seed-sequence-element command.

6. The method of claim 5, wherein modifying the seed sequence in accordance with a received increment-seed-sequence-element command comprises incrementing a corresponding seed-sequence element.

7. The method of claim 3, wherein at least one of the at least one seed-sequence-element-modifier signals comprises a decrement-seed-sequence-element command.

8. The method of claim 7, wherein modifying the seed sequence in accordance with a received decrement-seed-sequence-element command comprises decrementing a corresponding seed-sequence element.

9. The method of claim 1, wherein at least one of the at least one seed-sequence-element-modifier signals comprises an output-different-element command.

10. The method of claim 9, wherein modifying the seed sequence in accordance with a received output-different-element command comprises outputting an indication of a random seed-sequence element.

11. The method of claim 1, wherein modifying the seed sequence comprises modifying the seed sequence on an element-by-element basis.

12. The method of claim 1, wherein outputting, via the user interface of the accessory, the indication of the at least one seed-sequence element comprises outputting an audible indication of the at least one seed-sequence element.

13. The method of claim 1, wherein outputting, via the user interface of the accessory, the indication of the at least one seed-sequence element comprises outputting a visual indication of the at least one seed-sequence element.

14. The method of claim 1, wherein outputting, via the user interface of the accessory, the indication of the at least one seed-sequence element comprises outputting the indication of the at least one seed-sequence element prior to receiving any seed-sequence-element-modifier signal.

15. The method of claim 1, wherein outputting, via the user interface of the accessory, the indication of the at least one seed-sequence element comprises alternating between outputting each seed-sequence element and receiving the corresponding seed-sequence-element-modifier signal.

16. The method of claim 1, further comprising outputting an indication of an updated value of a seed-sequence element as modified in response to a received seed-sequence-element-modifier signal.

17. The method of claim 1, wherein comparing the modified seed sequence with the access sequence comprises comparing the modified seed sequence with the access sequence in response to modifying the seed sequence.

18. The method of claim 1, wherein comparing the modified seed sequence with the access sequence comprises comparing the modified seed sequence with the access sequence in response to receiving a validate-modified-seed-sequence command.

19. An apparatus comprising a non-transitory computer-readable medium having instructions stored thereon that when executed cause a processor to:

receive, at an accessory to a communication device, an accessory-access-request event associated with authenticating a connection between the accessory the communication device;

generate an access sequence within the accessory, the access sequence to enable the communication device to exchange encrypted data with the accessory;

performing an authentication protocol including;

generating a seed sequence having a plurality of seed-sequence elements;

output, via a user interface of the accessory, an indication of at least one seed-sequence element of seed sequence;

receive, at the accessory from the communication device, at least one seed-sequence-element-modifier signal for at least one of the seed-sequence elements associated with an outputted indication;

modify, at the accessory, the seed sequence in accordance with the at least one received seed-sequence-element-modifier signal;

compare, at the accessory, the modified seed sequence with the access sequence;

if the modified seed sequence matches the access sequence, the accessory to grant the communication device operational access to the accessory and responsive to operational access being granted, the accessory exchanging encrypted data with the communication device; and

if the modified seed sequence does not match the access sequence, the accessory to deny the communication device operational access to the accessory.