Method of securely transferring programmable packet using digital signatures having access-controlled high-security verification key

• US 20050097326A1
• Filed: 04/30/2004
• Published: 05/05/2005
• Est. Priority Date: 11/05/2003
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Han, Jong Wook, Kim, Young Soo, Seo, Dong il, Sohn, Seung Won
• Application Number:
  US10/836,928
• Publication Number:
  US 20050097326A1
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

Provided is a method of securely transferring a programmable packet using digital signatures having an access-controlled high-security verification key, by which the programmable packet is transferred using digital signatures having a sufficiently long signing key and an access-controlled high-security verification key in an environment of a programmable network that only a transfer node knows an address of a final receipt node and intermediate receipt nodes are not determined.

Claims

1. A method of registering a programmable node to transfer a programmable packet, the method comprising:

(a) creating a signing key and a verification key of the programmable node;

(b) showing identification information and the verification key of the programmable node to a storage server for verification keys and requests for registration;

(c) storing in a database of the storage server the signing key of the programmable node in which the identification information and the verification key are signed by a signing key of the storage server;

(d) the storage server issuing the signing key of the programmable node and the verification key of the storage server to the programmable node; and

(e) storing the signing key of the programmable node and the verification key of the storage server in the programmable node.

2. The method of claim 1, wherein the identification information is an IP address of the programmable node.

3. The method of claim 1, wherein the signing key of the programmable node signed in step (c) is expressed as follows:

S_N={Sig_SSSVK(R(ID_N, P_N))},

where ID_N represents the IP address of the programmable node, P_N represents the verification key of the programmable node, R(M) represents a redundancy function of M, and Sig_SN (M) represents signing of M using the signing key (S_N) of the programmable node N.

4. A method of transferring a programmable packet, the method comprising:

(a) calculating a redundancy function value of a target program code at a start node and signing the redundancy function value using a signing key of the start node;

(b) creating a programmable packet based on an IP address, a final destination IP address, and information required for signing and verification that belong to the start node and transferring the created programmable packet to a neighboring node;

(c) forwarding the programmable packet to the neighboring node, if a receipt node that receives the programmable packet transferred in step (b) is a general node;

(d) creating a programmable packet containing a program code included in the programmable packet and an intermediate execution result of the program code and transferring the programmable packet to the neighboring node, if a receipt node that receives the programmable packet transferred in step (b) is not a general node; and

(e) executing the program code included in the programmable packet and obtaining a final result, if a receipt node that receives the programmable packet transferred in step (b) or (d) is a final node.

5. The method of claim 4, wherein the programmable packet created in step (b) is expressed as follows:

Ia={Sig_SA(R(PC)), ID_A, ID_F, DATA},

where ID_A represents the IP address of the start node, ID_F represents an IP address of the final destination, DATA represents the information required for signing and verification, R(PC) represents the redundancy function value of the target program code, and Sig_SN (M) represents signing of M using a signing key (S_N) of a programmable node (N).

6. The method of claim 4, wherein step (d) further comprises:

(d-1) the receipt node composing a packet (J) with a result of signing an IP address of a transfer node that transfers the programmable packet and a redundancy function value of a verification key request message for the transfer node using a signing key of the receipt node and the IP address of the receipt node and transferring the packet (J) to the storage server;

(d-2) the storage server confirming based on the IP address of the receipt node included in the packet J that the receipt node is a registered node;

(d-3) the storage server verifying a signature using a verification key of the receipt node, copying a signing key with respect to a verification key of the transfer node, and transferring the copied signing key to the IP address of the receipt node;

(d-4) the receipt node verifying the verification key of the transfer node using a verification key of the storage server and obtaining the verification key of the transfer node using a redundancy function;

(d-5) the receipt node verifying the programmable packet using the verification key of the transfer node and executing the program code included in the programmable packet; and

(d-6) the receipt node composing the programmable packet using the program code and an execution result of the program code and transferring the programmable packet to the neighboring node.

7. The method of claim 6, wherein the packet (J) composed in step (d-1) is expressed as follows:

Ja={(Sig_SC(R(REQUEST(P_A), ID_A))), ID_C}

where R(REQUEST(P_A), ID_A) represents a redundancy function value with respect to the verification key request message of the transfer node and the IP address of the receipt node, ID_C represents the IP address of the receipt node, and Sig_SN (M) represents a signature of M using the signing key (S_N) of the programmable node (N).

8. The method of claim 6, wherein in step (d-2), the storage server confirms that the receipt node is a registered node using the following equation:

$\begin{array}{c}\mathrm{Ka}=R^{-1}<br><br>\left\{{\mathrm{Ver}}_{P_C}<br><br>\left({\mathrm{Sig}}_{S_C}<br><br>\left(R<br><br>\left(\mathrm{REQUEST}<br><br>\left(P_A\right),{\mathrm{ID}}_A\right)\right)\right)\right\}\\ =\left(\mathrm{REQUEST}<br><br>\left(P_A\right),{\mathrm{ID}}_A\right)\end{array},$

where REQUEST (P_A) represents the verification key request message of the transfer node, R(REQUEST(P_A), ID_A) represents a redundancy function value with respect to the verification key request message of the transfer node and the IP address of the receipt node, ID_C represents the IP address of the receipt node, Sig_SN (M) represents a signature of M using the signing key (S_N) of the programmable node (N), and Ver_PN (S) represents verification of a signature (S) using the verification key (P_N) of the programmable node (N).

9. The method of claim 6, wherein the signing key with respect to the verification key of the transfer node, which is copied in step (d-3), is expressed as follows:

S_A={Sig_SSSVK(R(ID_A, P_A))},

where R(ID_A, P_A) represents the redundancy function value with respect to the IP address of the transfer node and the verification key of the transfer node and Sig_SN (M) represents signature using the signing key (S_N) of the programmable node (N).

10. The method of claim 6, wherein in step (d-4), the signing key of the transfer node is verified using the following equation:

Ta=R<sup>−

1</sup>{Ver_PSSVK(S_A)}=(ID_A, P_A),

where ID_A represents the IP address of the transfer node, P_A represents the verification key of the transfer node, S_A represents the signing key of the transfer node, R<sup>−

1</sup>(M) represents an inverse redundancy function of M, Sig_SN (M) represents signature using the signing key (S_N) of the programmable node (N), and Ver_PN (S) represents verification of the signature (S) using the verification key (P_N) of the programmable node (N).

11. The method of claim 6, wherein in step (d-5), the programmable packet is verified using the following equation:

Qa=R<sup>−

1</sup>{Ver_PA(Sig_SA(R(PC)))}=PC,

where R(PC) represents the redundancy function value with respect to the target program code, R<sup>−

1</sup>(M) represents an inverse redundancy function of M, Sig_SN (M) represents signature using the signing key (S_N) of the programmable node (N), and Ver_PN (S) represents verification of the signature (S) using the verification key (P_N) of the programmable node (N).

12. The method of claim 6, wherein the programmable packet created in step (b-6) is expressed as follows:

I_C={Sig_SC(R(PC, RESULT_C)), ID_C, ID_F, DATA},

where ID_C represents the IP address of the start node, ID_F represents the IP address of the final destination, DATA represents information required for signing and verification, R(PC) represents the redundancy function value with respect to the target program code, Sig_SN (M) represents signature using the signing key (S_N) of the programmable node (N), RESULT_C represents a result of executing the program code by a programmable node (C).

13. The method of claim 4, wherein step (e) further comprises:

(e-1) composing a packet (J) with a result of signing an IP address of the transfer node that transfers the programmable packet and a redundancy function value of a verification key request message for the transfer node using a signing key of the final node and the IP address of the final node and transferring the packet (J) to the storage server;

(e-2) the storage server confirming based on the IP address of the final node included in the packet J that the final node is a registered node;

(e-3) the storage server verifying a signature using a verification key of the final node, copying a signing key with respect to a verification key of the transfer node, and transferring the copied signing key to the IP address of the receipt node;

(e-4) the final node verifying the verification key of the transfer node using a verification key of the storage server and obtaining the verification key of the transfer node using a redundancy function;

(e-5) the final node verifying the programmable packet using the verification key of the transfer node and executing the program code and the execution result of the program code of the transfer node from the programmable packet; and

(e-6) the final node checking the execution result of the transfer node, executing the program code obtained in step (e-5), and obtaining the execution result of the program code of the final node.

14. The method of claim 13, wherein the packet (J) composed in step (e-1) is expressed as follows:

Jc={(Sig_SF(R(REQUEST(P_C), ID_C))), ID_f},

where R(REQUEST(P_C), ID_C) represents a redundancy function value with respect to the verification key request message of the transfer node and the IP address of the receipt node, ID_F represents the IP address of the receipt node, and Sig_SN (M) represents a signature of M using the signing key (S_N) of the programmable node (N).

15. The method of claim 13, wherein in step (e-2), the storage server confirms that the receipt node is a registered node using the following equation:

$\begin{array}{c}\mathrm{Kc}=R^{-1}<br><br>\left\{{\mathrm{Ver}}_{P_F}<br><br>\left({\mathrm{Sig}}_{S_F}<br><br>\left(R<br><br>\left(\mathrm{REQUEST}<br><br>\left(P_C\right),{\mathrm{ID}}_C\right)\right)\right)\right\}\\ =\left(\mathrm{REQUEST}<br><br>\left(P_C\right),{\mathrm{ID}}_C\right)\end{array},$

where REQUEST (P_C) represents the verification key request message of the transfer node, R(REQUEST(P_C), ID_C) represents a redundancy function value with respect to the verification key request message of the transfer node and the IP address of the receipt node, ID_F represents the IP address of the receipt node, Sig_SN (M) represents a signature of M using the signing key (S_N) of the programmable node (N), and Ver_PN (S) represents verification of a signature (S) using the verification key (P_N) of the programmable node (N).

16. The method of claim 13, wherein the signing key with respect to the verification key of the transfer node, which is copied in step (e-3), is expressed as follows:

S_C={Sig_SSSVK(R(ID_C, P_C))},

where R(ID_C, P_C) represents the redundancy function value with respect to the IP address of the transfer node and the verification key of the transfer node and Sig_SN (M) represents signature using the signing key (S_N) of the programmable node (N).

17. The method of claim 13, wherein in step (e-4), the signing key of the transfer node is verified using the following equation:

Tc=R<sup>−

1</sup>{Ver_PSSVK(S_C)}=(ID_C, P_C),

where ID_C represents the IP address of the transfer node, P_C represents the verification key of the transfer node, S_C represents the signing key of the transfer node, R<sup>−

1</sup>(M) represents an inverse redundancy function of M, Sig_SN (M) represents signature using the signing key (S_N) of the programmable node (N), and Ver_PN (S) represents verification of the signature (S) using the verification key (P_N) of the programmable node (N).

18. The method of claim 13, wherein in step (e-5), the programmable packet is verified using the following equation:

Qc=R<sup>−

1</sup>{Ver_PC(Sig_SC(R(PC)))}=PC,

where R(PC) represents the redundancy function value with respect to the target program code, R<sup>−

1</sup>(M) represents an inverse redundancy function of M, Sig_SN (M) represents signature using the signing key (S_N) of the programmable node (N), and Ver_PN (S) represents verification of the signature (S) using the verification key (P_N) of the programmable node (N).

19. A computer readable medium having embodied thereon a program for a method of registering a programmable node to transfer a programmable packet, the method comprising:

(a) creating a signing key and a verification key of the programmable node;

(b) showing identification information and the verification key of the programmable node to a storage server for verification keys and requests for registration;

(c) storing in a database of the storage server the signing key of the programmable node in which the identification information and the verification key are signed by a signing key of the storage server;

(d) the storage server issuing the signing key of the programmable node and the verification key of the storage server to the programmable node; and

(e) storing the signing key of the programmable node and the verification key of the storage server in the programmable node.

20. A computer readable medium having embodied thereon a program for a method of transferring a programmable packet, the method comprising:

(a) calculating a redundancy function value of a target program code at a start node and signing the redundancy function value using a signing key of the start node;

(b) creating a programmable packet based on an IP address, a final destination IP address, and information required for signing and verification that belong to the start node and transferring the created programmable packet to a neighboring node;

(c) forwarding the programmable packet to the neighboring node, if a receipt node that receives the programmable packet transferred in step (b) is a general node;

(d) creating a programmable packet containing a program code included in the programmable packet and an intermediate execution result of the program code and transferring the programmable packet to the neighboring node, if a receipt node that receives the programmable packet transferred in step (b) is not a general node; and

(e) executing the program code included in the programmable packet and obtaining a final result, if a receipt node that receives the programmable packet transferred in step (b) or (d) is a final node.