Methods for authenticating potential members invited to join a group

• US 7,120,797 B2
• Filed: 04/24/2002
• Issued: 10/10/2006
• Est. Priority Date: 04/24/2002
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Wheeler, Graham A.
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US10/132,018
• Publication Number:
  US 20030204734A1
• Time in Patent Office: 1,630 Days
• Field of Search: None
• US Class Current: 713/176
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Disclosed are methods for an invitee to gain admittance to a group. An inviter already in the group and the invitee share a secret password. The inviter uses the password to create an invitation and then issues the invitation to the invitee and to an authenticator. The authenticator creates a challenge key and challenge value and sends the challenge value to the invitee. Using the password and information from the invitation, the invitee recreates the challenge key, uses the challenge key to derive a response value from the challenge value, and sends the response value to the authenticator. The authenticator compares the response value with an expected value and, if they match, knows that the invitee must have been able to recreate the challenge key. The authenticator trusts that this invitee must be the one for which the inviter issued the invitation and admits the invitee to the group.

Claims

1. In a computing environment with an ad hoc group, an inviter computing device and an authenticator computing device being members of the group, an invitee computing device not being a member of the group, in which the inviter shares a secret password with the invitee, a method for the inviter to issue an invitation for the invitee to join the group, the method comprising:

generating a first private encryption key based upon the secret shared password;

generating a first public encryption key associated with the first private encryption key;

creating an invitation containing the first public encryption key;

signing the invitation using a private encryption key of the inviter; and

making the invitation accessible to the invitee and to the authenticator.

2. The method of claim 1 wherein generating a first private encryption key comprises running a determinative function and passing the shared secret password as input to the determinative function.

3. The method of claim 2 wherein generating a first private encryption key further comprises passing as further input to the determinative function information selected from the group consisting of:

identifier of the ad hoc group, identifier of the inviter, identifier of the invitee, timestamp, and invitation validity period.

4. The method of claim 3 wherein the invitation further contains the further input passed to the determinative function.

5. The method of claim 2 wherein running a determinative function comprises applying a cryptographic hash to the shared secret password.

6. The method of claim 2 wherein generating a first private encryption key further comprises assigning an output of the determinative function modulo a prime number to the first private encryption key.

7. The method of claim 6 wherein generating a first public encryption key comprises assigning a generator for the prime number raised to a power of the first private encryption key, modulo the prime number, to the first public encryption key.

8. The method of claim 7 wherein the invitation further contains the prime number and the generator.

9. The method of claim 1 wherein generating a first public encryption key associated with the first private encryption key comprises generating a first public encryption key so that a value encrypted using one of these two keys can be decrypted using the other.

10. The method of claim 1 wherein signing comprises taking a hash of the contents of the invitation and encrypting the hash using the private encryption key of the inviter.

11. The method of claim 1 wherein making the invitation accessible comprises using a technique selected from the group consisting of:

sending a message containing the invitation, posting the invitation in a place accessible to the inviter and to the authenticator, and fixing values of some of the contents of the invitation before creating the invitation.

12. A computer-readable medium containing instructions for performing a method for an inviter computing device to issue an invitation for an invitee computing device to join an ad hoc group, the inviter and an authenticator computing device being members of the group, the invitee not being a member of the group, in which the inviter shares a secret password with the invitee, the method comprising:

generating a first private encryption key based upon the secret shared password;

generating a first public encryption key associated with the first private encryption key;

creating an invitation containing the first public encryption key;

signing the invitation using a private encryption key of the inviter; and

making the invitation accessible to the invitee and to the authenticator.

13. In a computing environment with an ad hoc group, an inviter computing device and an authenticator computing device being members of the group, an invitee computing device not being a member of the group, the inviter having issued an invitation to the invitee to join the group, a method for the authenticator to issue an authentication challenge to the invitee, the method comprising:

accessing the invitation;

checking the invitation for validity; and

if the invitation is valid, then

generating a second private encryption key;

generating a second public encryption key associated with the second private encryption key;

generating a shared challenge encryption key from a first public encryption key contained in the invitation and the second private encryption key;

generating a challenge value;

creating an authentication challenge containing the challenge value and the second public encryption key; and

making the authentication challenge accessible to the invitee.

14. The method of claim 13 wherein accessing the invitation comprises using a technique selected from the group consisting of:

receiving a message containing the invitation and accessing the invitation in a place accessible to the inviter and to the authenticator.

15. The method of claim 13 wherein checking the invitation for validity comprises checking information contained in the invitation, the information selected from the group consisting of:

identifier of the ad hoc group, identifier of the inviter, identifier of the invitee, timestamp, and invitation validity period.

16. The method of claim 13 wherein checking the invitation for validity comprises decrypting a signature of the invitation using a public encryption key of the inviter, taking a hash of the contents of the invitation, and comparing the hash to the decrypted signature.

17. The method of claim 13 wherein generating a second private encryption key comprises assigning a randomly generated number to the second private encryption key.

18. The method of claim 13 wherein generating a second public encryption key comprises assigning a generator for a prime number raised to a power of the second private encryption key, modulo the prime number, to the second public encryption key.

19. The method of claim 18 wherein generating a shared challenge encryption key comprises assigning the first public encryption key raised to a power of the second private encryption key, modulo the prime number, to the shared challenge encryption key.

20. The method of claim 13 wherein generating a second public encryption key associated with the second private encryption key comprises generating a second public encryption key so that a value encrypted using one of these two keys can be decrypted using the other.

21. The method of claim 13 wherein generating a challenge value comprises generating a random number.

22. The method of claim 21 wherein generating a challenge value further comprises:

encrypting the random number using the shared challenge encryption key and a cipher;

and assigning the encrypted random number to the challenge value; and

wherein the authentication challenge further contains the cipher.

23. The method of claim 21 wherein generating a challenge value further comprises combining the random number with a hash of specificity information, the specificity information selected from the group consisting of:

identifier of the ad hoc group, identifier of the authenticator, and identifier of the invitee.

24. The method of claim 23 wherein generating a challenge value further comprises:

encrypting the combined random number and hash of specificity information using the shared challenge encryption key and a cipher; and

assigning the encrypted random number and hash of specificity information to the challenge value;

and wherein the authentication challenge further contains the cipher.

25. The method of claim 13 wherein making the authentication challenge accessible comprises using a technique selected from the group consisting of:

sending a message containing the authentication challenge, posting the authentication challenge in a place accessible to the authenticator and to the invitee, and fixing values of some of the contents of the authentication challenge before creating the authentication challenge.

26. A computer-readable medium containing instructions for performing a method for an authenticator computing device to issue an authentication challenge to an invitee computing device, an inviter computing device and the authenticator being members of an ad hoc group, the invitee not being a member of the group, the inviter having issued an invitation to the invitee to join the group, the method comprising:

accessing the invitation;

checking the invitation for validity; and

if the invitation is valid, then

generating a second private encryption key;

generating a second public encryption key associated with the second private encryption key;

generating a shared challenge encryption key from a first public encryption key contained in the invitation and the second private encryption key;

generating a challenge value;

creating an authentication challenge containing the challenge value and the second public encryption key; and

making the authentication challenge accessible to the invitee.

27. In a computing environment with an ad hoc group, an inviter computing device and an authenticator computing device being members of the group, an invitee computing device not being a member of the group, in which the inviter shares a secret password with the invitee, the inviter having issued an invitation to the invitee to join the group, the authenticator having issued an authentication challenge to the invitee, a method for the invitee to issue a response to the authentication challenge, the method comprising:

accessing the authentication challenge;

generating a first private encryption key based upon the secret shared password;

generating a shared challenge encryption key based upon the generated first private encryption key and upon a second public encryption key contained in the authentication challenge;

generating a challenge response value based upon a challenge value contained in the authentication challenge;

creating an authentication challenge response containing the challenge response value; and

making the authentication challenge response accessible to the authenticator.

28. The method of claim 27 wherein accessing the authentication challenge comprises using a technique selected from the group consisting of:

receiving a message containing the authentication challenge and accessing the authentication challenge in a place accessible to the authenticator and to the invitee.

29. The method of claim 27 wherein generating a first private encryption key comprises running a determinative function and passing the shared secret password as input to the determinative function.

30. The method of claim 29 further comprising accessing the invitation and wherein generating a first private encryption key further comprises passing as further input to the determinative function information contained in the invitation, the information selected from the group consisting of:

identifier of the ad hoc group, identifier of the inviter, identifier of the invitee, timestamp, and invitation validity period.

31. The method of claim 29 wherein running a determinative function comprises applying a cryptographic hash to the shared secret password.

32. The method of claim 29 wherein generating a first private encryption key further comprises assigning an output of the determinative function modulo a prime number to the first private encryption key.

33. The method of claim 27 wherein generating a shared challenge encryption key comprises assigning the second public encryption key raised to a power of the generated first private encryption key, modulo a prime number, to the shared challenge encryption key.

34. The method of claim 27 wherein generating a challenge response value comprises encrypting the challenge value using the shared challenge encryption key and a cipher;

and wherein the authentication challenge response further contains the cipher.

35. The method of claim 34 wherein generating a challenge response value further comprises assigning a hash of the encrypted challenge value to the challenge response value.

36. The method of claim 27 wherein generating a challenge response value comprises combining the challenge value with a hash of specificity information, the specificity information selected from the group consisting of:

identifier of the ad hoc group, identifier of the authenticator, and identifier of the invitee.

37. The method of claim 36 wherein generating a challenge response value further comprises encrypting the combined challenge value and hash of specificity information using the shared challenge encryption key and a cipher;

and wherein the authentication challenge response further contains the cipher.

38. The method of claim 37 wherein generating a challenge response value further comprises assigning a hash of the encrypted combined challenge value and hash of specificity information to the challenge response value.

39. The method of claim 27 wherein generating a challenge response value comprises decrypting the challenge value using the shared challenge encryption key and a cipher contained in the authentication challenge.

40. The method of claim 39 wherein generating a challenge response value further comprises assigning a hash of the decrypted challenge value to the challenge response value.

41. The method of claim 39 wherein generating a challenge response value further comprises removing from the decrypted challenge value a hash of specificity information, the specificity information selected from the group consisting of:

identifier of the ad hoc group, identifier of the authenticator, and identifier of the invitee.

42. The method of claim 41 wherein generating a challenge response value further comprises assigning a hash of the decrypted challenge value with the hash of specificity information removed to the challenge response value.

43. The method of claim 27 wherein making the authentication challenge response accessible comprises using a technique selected from the group consisting of:

sending a message containing the authentication challenge response and posting the authentication challenge response in a place accessible to the invitee and to the authenticator.

44. A computer-readable medium containing instructions for performing a method for an invitee computing device to issue a response to an authentication challenge, an inviter computing device and an authenticator computing device being members of an ad hoc group, the invitee not being a member of the group, in which the inviter shares a secret password with the invitee, the inviter having issued an invitation to the invitee to join the group, the authenticator having issued the authentication challenge to the invitee, the method comprising:

accessing the authentication challenge;

generating a first private encryption key based upon the secret shared password;

generating a shared challenge encryption key based upon the generated first private encryption key and upon a second public encryption key contained in the authentication challenge;

generating a challenge response value based upon a challenge value contained in the authentication challenge;

creating an authentication challenge response containing the challenge response value; and

making the authentication challenge response accessible to the authenticator.