Scheme, system and equipment for inter-equipment authentication and key delivery

• US 7,010,688 B1
• Filed: 11/01/1999
• Issued: 03/07/2006
• Est. Priority Date: 10/30/1998
• Status: Expired due to Fees

• Current Assignee: Godo Kaisha IP Bridge 1 (IP Bridge, Inc.)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Kawasaki, Akihisa
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): ZIA, SYED
• Application Number:
  US09/432,007
• Time in Patent Office: 2,318 Days
• Field of Search: 380/168, 705/4, 705 50- 80, 713/168
• US Class Current: 713/168
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07B 15/063 using wireless information transmission between the vehicle and a fixed station identification of vehicles G08G
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

An inter-equipment authentication and key delivery scheme, system, and equipment is provided which is capable of making authentication of an IC card ID signature, by comparison of a decrypted ICCID with another ICCID reproduced by dividing transmitted data. The inter-equipment authentication and key delivery scheme, system, and equipment can be used, for example, when an automobile passes by roadside equipment at a tollbooth, and the roadside equipment transmits a random digit (RND) generated therein as challenge data to an IC card via onboard equipment, and the IC card transmits back to the roadside equipment the random digit after encrypting it with a secret key Kicc. The IC card also transmits its ID (ICCID) and a certificate of individual IC card key CERT-Kicc together with the random digit. The roadside equipment divides the transmitted data into a response data E(Kicc, RND), the ICCID, and the certificate of individual IC card key CERT-Kicc. The roadside equipment 130 reproduces the Kicc and the ICCID by decrypting (DEC) the certificate of individual IC card key CERT-Kicc using a validation key PC.

Claims

1. An equipment authentication and cryptographic communication system, comprising:

user-end equipment, system-end equipment, and a key center for administrating authentication of equipment in said system, wherein;

said user-end equipment provided with individual user-end equipment information issued by said key center and individual user-end equipment secret information corresponding to said individual user-end equipment'"'"'s information, and said user-end equipment transmits said individual user-end equipment information to said system-end equipment;

said system-end equipment receives said individual user-end equipment information from said user-end equipment, reproduces by a system conversion said individual user-end equipment secret information from said received individual user-end equipment information using an equivalent secret key cryptographic algorithm of the key center, and authenticates said user-end equipment by confirming that said user-end equipment legitimately has said individual user-end equipment secret information by using a challenge response utilizing a common key cryptographic algorithm; and

said user-end equipment and said system-end equipment execute a cryptographic communication with each other using said individual user-end equipment secret information,

said system-end equipment is provided with a secret-key cryptographic algorithm, and reproduces said individual user-end equipment secret information by a system conversion of said individual user-end equipment information using a secret key,

said system-end equipment and said user-end equipment are both provided with common secret information shared therebetween by exchanging individually held secret information,

said system-end equipment and said user-end equipment (a) exchange with each other individually held secret information, and (b) generate new secret information by combining said individually held secret information and said secret information exchanged therebetween according to a predetermined procedure,

said system-end equipment and said user-end equipment use said individual user-end equipment secret information for encrypting said new secret information, which is provided by combining said information and said exchanged information, and

said system-end equipment and said user-end equipment (a) individually generate random digits, (b) exchange said generated random digits with each other, and (c) share the same secret information particular to said system-end equipment and said user-end equipment by combining said generated random digits and said exchanged random digits according to a predetermined procedure.

2. The equipment authentication and cryptographic communication system according to claim 1, wherein said system-end equipment and said user-end equipment (a) individually generate random digits, (b) combine said random digits with their own information particular to each of said system-end equipment and said user-end equipment according to a predetermined procedure, (c) generate encrypted data by encrypting the combined information using said individual user-end equipment secret information, (d) exchange said encrypted data with each other, (e) generate decrypted data by decrypting said exchanged encrypted data using said individual user-end equipment'"'"'s secret information, and (f) reproduce each of said mutually exchanged random digits by dividing the combination of said decrypted data according to a predetermined procedure.

3. The equipment authentication and cryptographic communication system according to claim 2, wherein said system-end equipment and said user-end equipment (a) individually generate and store random digits, (b) exchange said random digits with each other, (c) combine said exchanged random digits with said individually generated and stored random digits according to a predetermined procedure, (d) generate encrypted data by encrypting said combined information using said individual user-end equipment secret information, (e) exchange said encrypted data with each other, (f) generate decrypted data by decrypting said exchanged encrypted data using said individual user-end equipment secret information, and (g) reproduce each of said mutually exchanged random digits by dividing the combination of said decrypted data according to a predetermined procedure.

4. The equipment authentication and cryptographic communication system according to claim 3, wherein said system-end equipment and said user-end equipment individually execute matching determinations by comparing said mutually exchanged random digits, which are produced by dividing the combination of said decrypted data according to the predetermined procedure, with said individually generated and stored random digits.

5. The equipment authentication and cryptographic communication system according to claim 4, wherein said system-end equipment and said user-end equipment produce and store the same data by combining said exchanged and received random digits and said individually generated and stored random digits according to the predetermined procedure, and mutually share said data as a common key particular to both said system-end equipment and said user-end equipment, if said matching determination produces a positive result.

6. An equipment authentication and cryptographic communication system, comprising:

user-end equipment, system-end equipment, and a key center for administrating authentication of equipment in said system, wherein;

said key center is provided with a first system converter for generating user-end equipment secret information from user-end equipment information;

said user-end equipment is provided with a first storage unit for storing said user-end equipment information provided by said key center, a second storage unit for storing said user-end equipment secret information, a first encryption unit, and a first decryption unit; and

said system-end equipment is provided with a second system converter for generating said user-end equipment secret information by a system conversion of said user-end equipment information received from said user-end equipment, a second encryption unit, and a second decryption unit, said second system converter using an equivalent secret key cryptographic algorithm of the first system converter to generate said user-end equipment secret information from said received user-end equipment information,

said user-end equipment and said system-end equipment share and utilize said user-end equipment secret information as a common key for encryption and decryption in said first encryption unit and said first decryption unit in said user-end equipment, and said second encryption unit and said second decryption unit in said system-end equipment,

said user-end equipment further comprises a first random digit generator for generating a random digit, a second random digit generator for generating a random digit, a first combiner for combining a pair of random digit data according to a predetermined procedure, a first divider for dividing a combined pair of random digit data to reproduce original random digits prior to combining, a first common key generator for combining a pair of random digit data according to a predetermined procedure, and a first matching determination unit for determining if two random digit data match each other; and

said system-end equipment further comprises a third random digit generator for generating a random digit, a fourth random digit generator for generating another random digit, a second combiner for combining a pair of random digit data according to a predetermined procedure, a second divider for dividing a combined pair of random digit data to reproduce original random digits prior to combining, a second common key generator for combining a pair of random digit data according to a predetermined procedure, and a second matching determination unit for determining if two random digit data match each other.

7. A method of equipment authentication and cryptographic communication for an equipment authentication and cryptographic communication system including user-end equipment, system-end equipment, and a key center for administrating authentication of equipment in said system, said method comprising the steps of:

generating user-end equipment secret information from user-end equipment information in said key center;

receiving said user-end equipment information and said user-end equipment secret information in said user-end equipment from said key center;

receiving said user-end equipment information from said user-end equipment, and generating said user-end equipment secret information from said user-end equipment information received in said system-end equipment by a system conversion using an equivalent secret key cryptographic algorithm of said key center;

using said user-end equipment secret information as a common key for encryption and decryption in both of said user-end equipment and said system-end equipment;

generating a first random digit in said user-end equipment, and transmitting said first random digit to said system-end equipment;

generating a second random digit in said system-end equipment, combining said second random digit and said first random digit received from said user-end equipment, encrypting combined data of said second random digit and said first random digit using said common key, and transmitting said encrypted data to said user-end equipment;

decrypting said encrypted data received in said user-end equipment using said common key, and reproducing said first random digit and said second random digit by dividing decrypted data of said encrypted data received in said user-end equipment;

determining in said user-end equipment if said first random digit reproduced in the preceding decryption step matches with another first random digit generated therein;

generating a third random digit in said user-end equipment, combining said third random digit and said second random digit reproduced in the decryption step, encrypting combined data of said third random digit and said second random digit using said common key, and transmitting encrypted data of said combined data to said system-end equipment;

generating a fourth random digit in said system-end equipment, and transmitting said fourth random digit to said user-end equipment;

combining said fourth random digit received in said user-end equipment from said system-end equipment and said third random digit generated therein, encrypting combined data of said fourth random digit and said third random digit using said common key, and transmitting encrypted data of said combine data to said system-end equipment;

decrypting said encrypted data received in said system-end equipment using said common key, and reproducing said third random digit and said fourth random digit by dividing decrypted data of said encrypted data received in said system-end equipment; and

determining in said system-end equipment if said fourth random digit reproduced in the preceding decryption step matches with another fourth random digit generated therein.

8. The method of equipment authentication and cryptographic communication according to claim 7 further comprising the steps of:

producing data in said system-end equipment for use as a common key for cryptographic communication by combining said second random digit generated therein with said third random digit reproduced by decryption; and

producing data in said user-end equipment for use as a common key for cryptographic communication by combining said third random digit generated therein and said second random digit reproduced by decryption.