Command authentication process

• US 5,293,576 A
• Filed: 11/21/1991
• Issued: 03/08/1994
• Est. Priority Date: 11/21/1991
• Status: Expired due to Term

• Current Assignee: CDC Propriete Intellectuelle
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Mihm, Jr., Thomas J., Penny, Jr., Robert E.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US07/795,610
• Time in Patent Office: 838 Days
• Field of Search: 380/21, 380/25, 380/46, 380/50
• US Class Current: 713/170
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2139 Recurrent verification
• CPC Class Codes: H04B 7/18565 Arrangements for preventing unauthorised access or for providing user protection arrangements for secret or secure communication H04L9/00
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A slave station, such as an orbiting satellite, and a master station, such as a ground control station, have their own lists of random pads. The master and slave station lists are identical. When the master station sends a critical command to the slave station, a selected one of the pads is combined with the command and transmitted to the slave station as a data communication message. Each pad is used only once. The slave station evaluates the received pad value using its version of the same selected pad. If the evaluation detects correspondence, then the command is authenticated and the slave station acts upon the command. The random pads are generated by the slave station. They are encrypted using an asymmetric encryption process and transmitted to the master station so that the master and slave stations will operate on common sets of pads.

Claims

1. In a system comprising a master station and a slave station, wherein said master station includes a first processor, a first transmitter, a first receiver and a first memory,

wherein said slave station includes a second processor, a second transmitters, a second receiver and a second memory,

a method for communicating commands from said master station to said slave station so that said commands can be authenticated by said slave station, said method comprising steps of:

(a) receiving by said first receiver in said master station a first code pad common with a second code pad stored in said second memory in said slave station;

(b) storing said first code pad in said first memory;

(c) combining said first code pad with said command by said first processor to form a message; and

(d) transmitting said message by said first transmitter to said slave station.

2. The method as claimed in claim 1, wherein:

said step (a) includes a receiving substep (a1) wherein said first receiver in said master station receives a first set of code pads transmitted by said second transmitter in said slave station;

said step (b) includes a storing substep (b1) wherein said first set of code pads is stored in said first memory; and

said step (c) includes a combining substep (c1) wherein said first processor combines a first selected one of said first set of code pads with said command to form said message.

3. The method as claimed in claim 2, further including steps of:

(e) repeating, by instructions from said first processor, said substeps (b1), (c1) and said step (d) for a second command;

said combining substep (c1) includes a substep (c2) of combining a second selected one of said first set of code pads with said second command by said first processor to form a second message; and

said step (d) includes a substep (d1) of transmitting said second message by said first transmitter to said slave station.

4. The method as claimed in claim 2, further including a step (e) of repeating by instructions from said first processor said substep (c1) and said step (d) for a multiplicity of iterations, each of said iterations of said substep (c1) utilizing a different code pad from said first set of code pads for combination with each different one of said multiplicity of commands to form a multiplicity of messages, each of said iterations of said step (d) transmitting a different one of said multiplicity of messages by said first transmitter to said slave station.

5. The method as claimed in claim 4, additionally comprising a step of repeating said steps (a1) and (b1) to receive and save additional sets of first code pads so that an adequate supply of said additional sets of first code pads are available for said multiplicity of iterations.

6. A method as claimed in claim 4, wherein said system further comprising a counter in said slave station and a master command counter in said master station, additionally comprising steps of:

(f) receiving by said first receiver, a command counter data message transmitted by said second transmitter form said slave station, said command counter data message including a slave command count value from said counter in said slave station;

(g) synchronizing a master command count in said master command counter to said slave command count value;

(h) maintaining said master command count in said master command counter to reflect the number of said messages transmitted through said iterations in said step (e); and

(i) obtaining said different code pad for use in said iterations of said step (c1) in correspondence with said master command count of said master command counter.

7. A method as claimed in claim 6, additionally comprising steps of:

(j) receiving by said first receiver, after each iteration of said step (d), an acknowledgement data message, said acknowledgement data message including data describing whether an immediately previously received message transmitted in an immediately previous step (d) was authenticated by said slave station; and

(k) adjusting said master command count in said master command counter in said step (h) only when said step (j) encounters an acknowledgement data message indicating that said immediately previously transmitted message was authenticated by said slave station.

8. A method as claimed in claim 2, additionally comprising a step (1) of transmitting by said first transmitter a set-up data communication message to said second receive in said slave station, said set-up data communications message including an encryption key, said encryption key having a form not requiring decryption by said second processor in said slave station, said step (1) occurring prior to said substep (a1).

9. A method as claimed in claim 8, wherein said substep (a1) includes a substep (a2) of decrypting said set of first code pads by said first processor using a secret decryption key corresponding to said encryption key.

10. A method as claimed in claim 8, wherein:

said method is performed by a ground control station transmitting said messages by said first transmitter in said steps (d) and (1) to said second receiver located in an above-the-earth (ATE) vehicle, said ATE vehicle comprising said slave station;

said ground control station and said ATE vehicle may communicate through either a communication network having a plurality of nodes or a direct communication link therebetween; and

said step (1) transmits said encryption key only through said direct communication link.

11. In a system comprising a master station and a slave station,

wherein said master station includes a first processor, a first transmitter, a first receiver and a first memory, and

wherein said slave station includes a second processor, a second transmitter, a second receiver and a second memory,

a method for operating said slave station to authenticate commands received from said slave station prior to carrying out instructions communicated thereby, said method comprising steps of:

(a) generating a first code pad by said second processor;

(b) storing said first code pad in said second memory to provide a stored code pad;

(c) transmitting said first code pad to said master station by said second transmitter;

(d) receiving a data communication message from said master station by said second receiver;

(e) recovering a command and a code pad from said data communication message by said second processor to provide a recovered command and a recovered code pad;

(f) authenticating said data communication message by said second processor by evaluating said recovered code pad to detect a correspondence between said recovered code pad and said stored code pad; and

(g) refraining from acting upon said recovered command if said step (f) fails to detect said correspondence.

12. A method as claimed in claim 11, wherein:

said step (a) includes a substep (a1) of generating a first set of code pads by said second processor;

said step (b) includes a substep (b1) of storing said first set of code pads in said second memory to provide a stored set of first code pads;

said step (c) includes a substep (c1) of transmitting said first set of code pads by said second transmitter; and

said step (f) includes substeps of;

(f1) selecting a code pad from said stored set of first code pads by said second processor to provide a selected code pad; and

(f2) authenticating said data communication message by said second processor by evaluating said recovered code pad using said selected code pad to detect said correspondence.

13. A method as claimed in claim 12, further including steps of:

(h) repeating by instructions from said second processor, said steps (d) , (e), (f) and (g) for a second data communication message to provide a second command and a second recovered code pas; and

said step (f) further includes substeps of;

(f3) selecting a second code pad from said stored set of first code pads by said second processor to provide a second selected code pad; and

(f4) authenticating said second data communication message by said second processor by evaluating said second recovered code pad using said second selected code pad to detect said correspondence.

14. A method as claimed in claim 12, further including a step (h) of repeating said steps (d), (e), (f) and (g) by instructions from said second processor for a multiplicity of iterations to detect said correspondence for a multiplicity of data communication messages, each of said multiplicity of iterations utilizing a different code pad from said stored set of first code pads for evaluation with said recovered code pad.

15. A method as claimed in claim 14, additionally comprising a step (i) of repeating by instructions from said second processor said steps (a), (b) and (c) to generate, store and transmit additional sets of code pads so that a supply of said additional sets of code pads is available for said multiplicity of iterations.

16. A method as claimed in claim 14, wherein said system further comprises a counter in said slave station and a master command counter in said master station, additionally comprising steps of:

(i) maintaining a count of said recovered commands detected through said multiplicity of iterations of said steps (d), (e), (f) and (g), said count being maintained in said counter;

(j) selecting said selected code pads for use in said multiplicity of iterations of said step (f) in correspondence with said count; and

(k) transmitting said count by said second transmitter to said master station so that said master station may maintain synchronization of said count in said counter with a master command count in said master command counter.

17. A method as claimed in claim 16, additionally comprising a step (1) of adjusting said count each time an iteration of said step (f) detects said correspondence.

18. A method as claimed in claim 12, wherein:

said step (c) includes a substep (c1) of transmitting by said second transmitter each portion of said first set of code pads to said master station in a distinct one of a plurality of separate transmissions; and

wherein each said distinct one of a plurality of separate transmissions is spaced apart in time by substantially random intervals from each other said distinct one of a plurality of separate transmissions.

19. A method as claimed in claim 11, wherein said step (c) includes substeps of:

(c1) encrypting said code pad by said second processor using an encryption key to provide an encrypted code pad; and

(c2) transmitting said encrypted code by said second transmitter.

20. A method as claimed in claim 19, additionally comprising a step (h) of receiving by said second receiver a set-up data communication message transmitted by said first transmitter, said set-up data communication message including said encryption key in a form not requiring decryption, said step (h) occurring prior to said substep (c1).

21. A method as claimed in claim 20, wherein:

said method is performed by an above-the-earth (ATE) vehicle comprising said slave station and said master station comprises a ground control station messages including commands to said ATE vehicle;

said ATE vehicle may communicate with said master station through either a communication network having a plurality of nodes or a direct communication link to said master station; and

said step (h) is configured to receive said encryption key only through said direct link.

22. A method as claimed in claim 11, additionally comprising steps of:

(h) examining said recovered command by said second processor to determine whether said recovered command is a critical command;

(i) performing said steps (f) and (g) by said second processor if said recovered command is a critical command; and

(j) acting upon said recovered command by said second processor if said recovered command is not critical command.

23. A method as claimed in claim 11, additionally comprising a step of transmitting by said second transmitter a failed authentication message to said first receiver in said master station if said step (f) fails to detect said correspondence so that said master station is alerted that said data communication message was received by said second receiver but was not authenticated.

24. In a system comprising a master station and a slave device,

wherein said master device includes a first processor, a first transmitter, a first receiver and a first memory, and

wherein said slave device is located remote from said master device and said slave device includes a second processor, a second transmitter, a second receiver and a second memory,

a method of authenticating commands communicated between said master device and said slave device, said method comprising steps of:

(a) generating by said second processor in slave device, a first set of random code pads;

(b) storing said first set of random code pads in said second memory in said slave device;

(c) transmitting said first set of random code pads from said slave device to said master device by said second transmitter;

(d) receiving said first set of random code pads by said first receiver in said master device to provide a second set of random code pads common with said first set of random code pads;

(e) storing said second set of random code pads from said message in said first memory;

(f) transmitting a message by said first transmitter in said master device to said slave device, said message including a command and a first selected one of said second set of random code pads;

(g) receiving said message by said second receiver in said slave device;

(h) recovering a code pad from said message by said second processor to provide a recovered code pad;

(i) evaluating said recovered code pad by said second processor to detect a correspondence between said recovered code pad and a second selected code pad common with said first selected code pad; and

(j) refraining from executing said command by said second processor in said slave device if said step (i) fails to detect said correspondence.

25. A method as claimed in claim 24, wherein:

said step (a) includes substeps of;

(a1) transmitting by said first transmitter, a set-up data communication message from said master station to said slave station prior to said step (b), said set-up data communication message including an encryption key in a form not requiring decryption before use by said second processor in said slave station; and

(a2) encrypting, by said second processor in said slave station, said first set of random code pads to provide a set of encrypted random code pads, said encrypting step utilizing said encryption key;

said step (c) includes a substep (c3) of transmitting said set of encrypted random code pads by said second transmitter; and

said step (d) includes substeps of;

(d1) receiving said set of encrypted random code pads by said first receiver; and

(d2) decrypting, by said first processor in said master station, said set of encrypted random code pads to provide said second set of random code pads, said decrypting step utilizing a secret decryption key corresponding to said encryption key.

26. A method as claimed in claim 24, wherein:

said slave device is an above-the-earth (ATE) vehicle and said master device is a ground control station which issues commands to said ATE vehicle;

said ATE vehicle and said ground control station can communicate through either a communication network having a plurality of nodes or a direct communication link; and

said substep (a1) transmits said encryption key only through said direct link.

27. A method as claimed in claim 24, wherein said steps (f), (g), (h), (i) and (j) are repeated for a multiplicity of iterations to detect said correspondence for a multiplicity of messages, each of said iterations utilizing a different random code pad from said second set of random code pads as said first selected one.

28. A method as claimed in claim 24, wherein:

said step (c) includes a substep (c1) of transmitting by said second transmitter each portion off said first set of random code pads to said master station in a distinct one of a plurality of separate transmissions; and

wherein each said distinct one of a plurality of separate transmissions is spaced apart in time by substantially random intervals from each other said distinct one of a plurality of separate transmissions.

29. In a system comprising a master station and a remotely located slave station,

wherein said master station includes a first transmitter for sending command to said slave station, a first receiver for receiving information from said slave station and a first memory,

wherein said slave station includes a second transmitter for sending information to said master station, a second receiver for receiving command from said master station and a second memory;

a method for communicating a command from said master station to said slave station so that said command can be authenticated before being executed by said slave station, said method comprising steps of;

(a) receiving from said slave station and storing in said first memory, a first code table having multiple entries common with a second code table stored in said second memory in said slave station;

(b) receiving from said slave station and storing in said first memory, a first index value identifying a particular entry in said first code table and a corresponding entry in said second code table;

(c) obtaining said command desired to be executed by said slave station;

(d) retrieving from said first memory said particular entry in said first code table identified by said first index value;

(e) combining in said first processor said particular entry in said first code table with said command to form an encrypted command message for transmission to said slave station, wherein different code table entries produce substantially different ciphertext even for identical plaintext; and

(f) using said first transmitter, transmitting said encrypted command message to said slave station for authentication utilizing said corresponding entry in said second code table identified by said first index value before execution of said command by said slave station.

30. A method as claimed in claim 29, further including steps of:

(g) receiving from said slave station a second index value corresponding to another entry in said first and second code tables; and

(h) repeating said steps (c), (d), (e) and (f) for another command desired to be authenticated before being executed by said slave station.

31. A method as claimed in claim 29, further including a step (i) of repeating said steps (b) through (f) a multiplicity of times to transmit to said slave station, a corresponding multiplicity of commands desired to be authenticated before being executed.

32. A method as claimed in claim 31 further including a step of transmitting to said slave station by said first transmitter a code table regeneration message containing an encryption key in plain language for use by said slave station in encrypting a new code table.

33. A method as claimed in claim 29, wherein said first memory wherein index values are stored comprises a command counter and said step (j) comprises a step of synchronizing a master command count in a first command counter of said master station with a command count in a command counter of said slave station.

34. A method as claimed in claim 29 further comprising a substep (f1) of receiving an acknowledgement signal from said slave station indicating that said command message was authenticated by said slave station, said substep (f1) occurring after said step (f).

35. A method as claimed in claim 29, wherein said step (e) further includes a substep (e1) of including information identifying said master station in said command message.

36. A method as claimed in claim 32, further including steps of:

(i) repeating said steps (a) and (b) to receive said new code table and a new index value in said master station, said new code table and said new index value having been generated internally in said slave station, said new index value corresponding to a first entry in said new code table; and

(j) storing said new code table and said new index value in said first memory, said new code table replacing said first and second code tables and said new index value replacing said first index value.

37. A method as claimed in claim 36, wherein step (a) further comprises a substep (a1) of decrypting said code table using a secret decryption key corresponding to said encryption key, after receiving said new code table and before storing said new code table in said first memory.

38. A method as claimed in claim 29, wherein said first code table is received by said master station from said slave station is encrypted form, having been encrypted by said slave station using a plain language key transmitted to said slave station by said master station, and prior to said first table being stored in said first memory for use in encrypting said commands, said first table is decrypted using a secret key corresponding to said plain language key.

39. A method as claimed in claim 29, wherein said step (a) comprises substeps of:

(a1) transmitting a plain language encryption key from said master station to said slave station;

(a2) receiving said encrypted message from said slave station containing said first code table in encrypted form; and

(a3) decrypting said encrypted message to obtain said first code table for storage in said first memory in plain language form.

40. In a system comprising a master station and a remotely located slave station,

wherein said slave station includes a first transmitter for sending information to said master station, a first receiver for receiving information from said master station and a first memory,

wherein said master station includes a second transmitter for sending information to said slave station, a second receiver for receiving information from said slave station and a second memory,

a method for operating said slave station so that commands or messages received from said master station can be authenticated before being executed or processed by said slave station, said method comprising steps of:

(a) generating in said slave station, a code table containing multiple entries;

(b) storing said code table in said first memory;

(c) transmitting by said first transmitter a copy of said code table to said master station for storage in said second memory, so that said master station and slave station have common code tables;

(d) transmitting by said first transmitter to said master station an index value referring to a particular entry in said common code tables;

(e) receiving from said master station a message containing at least an authentication code and a command from said master station to said slave station to change the operation of said slave station, said message having been encrypted using a master station code table entry related in a predetermined way to a most recently transmitted index value, said encrypted message having substantially different ciphertext for the same plaintext;

(f) decrypting said message from said master station in said slave station to retrieve a recovered command and a recovered authentication code, using a slave station code table entry related in said predetermined way to said most recently transmitted index value;

(g) comparing said recovered authentication code with a predetermined list of authentication codes in said slave station to detect a correspondence; and

(h) when said correspondence is detected, authenticating the command to provide an authenticated command and altering the operation of said slave station by executing said authenticated command.

41. A method as claimed in claim 40, wherein said authentication code is an entry in said code table in said master station and said step (g) compares said recovered authentication code with entries in said code table in said slave station.

42. A method as claimed in claim 40 wherein said steps (a) through (c) further comprise the steps of:

receiving a plain language encryption key from said master station;

using said plain language encryption key to encrypt said copy of said code table; and

transmitting said copy of said code table to said master station in encrypted form for decryption in said master station using a private decryption key different than said plain language encryption key.

43. A method as claimed in claim 40, further comprising a substep (g1) of sending an acknowledgement signal to said master station indicating that said command was or was not authenticated, after said step (g) and before said step (h).

44. A method as claimed in claim 43, further comprising a step of waiting after said substep (g1) to receive an execute signal from said master station before executing said authenticated command.

45. A method as claimed in claim 43, further comprising a step of changing said index value stored in said first memory in said slave station to a new index value and notifying said master station of such change so that a corresponding change is made in said index value held by said master station, said changing step occurring after said step (f).

46. A method as claimed in claim 45, wherein substep (g1) further comprises a step of sending an acknowledgement signal to said master station indicating that said command was authenticated, said acknowledgement signal including a command just received from said master station.

47. A method as claimed in claim 46, further comprising prior to said substep (g1), a step of encrypting said command just received using a code table entry in said slave station corresponding to said new index value.

48. A method as claimed in claim 47, further comprising a step of waiting, after said substep (g1), to receive an execute signal from said master station before executing said authenticated command.

49. A method as claimed in claim 40, further comprising steps of:

generating a new code table in said slave station containing new entries when all entries in a current code table have been exhausted; and

repeating steps (a) through (h) based on said new code table.