US5483597A — Authentication process for at least one identific…

Claim 1

Independent Claim 288 words

A method of authenticating the identity of at least one identification device by a verification device, said method comprising the steps of: (a) generating an electronic secret key signal representing a secret key having at least one vector s i of dimension n and Hamming weight d, where d, i, and n are integers and d<n; (b) generating an electronic public key signal representing a public key having a matrix M with dimensions n×k the coefficients of which are chosen at random, where k is an integer; (c) generating an electronic vector signal representing a vector K i such that K i =M·s i ; (d) generating, via said at least one identification device, a first electronic signal representing a random vector y of dimension n and a second electronic signal representing a random permutation p; (e) applying an electronic signal representing a cryptographic hash function H to said second electronic signal, said first electronic signal, said electronic secret key signal, and said electronic public key signal to generate third electronic signals representing commitment values h 1 , h 2 , and h 3 ; (f) sending said third electronic signals to said verification device; (g) generating, via said verification device, a fourth electronic signal representing a random number q and sending said fourth electronic signal to said at least one identification device; (h) generating, via said at least one identification device, a fifth electronic signal representing reply r in accordance with said fourth electronic signal received from said verification device; (i) receiving and testing, via said verification device, said reply to verify the identity of said at least one identification device; and (j) repeating steps (a)-(i) a plurality of times in accordance with a predetermined security level.

Claim 2

Independent Claim 288 words

A method of authenticating the identity of at least one identification device by a verification device, said method comprising the steps of: (a) generating an electronic secret key signal representing a secret key having at least one vector s i of dimension n and Hamming weight d, where d, i, and n are integers and d<n; (b) generating an electronic public key signal representing a public key having a matrix M with dimensions n×k the coefficients of which are chosen at random, where k is an integer; (c) generating an electronic vector signal representing a vector K i such that K i =M·s i ; (d) generating, via said at least one identification device, a first electronic signal representing a random vector y of dimension n and a second electronic signal representing a random permutation p; (e) applying an electronic signal representing a cryptographic hash function H to said second electronic signal, said first electronic signal, said electronic secret key signal, and said electronic public key signal to generate third electronic signals representing commitment values h 1 , h 2 , and h 3 ; (f) sending said third electronic signals to said verification device; (g) generating, via said verification device, a fourth electronic signal representing a random number q and sending said fourth electronic signal to said at least one identification device; (h) generating, via said at least one identification device, a fifth electronic signal representing reply r in accordance with said fourth electronic signal received from said verification device; (i) receiving and testing, via said verification device, said reply to verify the identity of said at least one identification device; and (j) repeating steps (a)-(i) a plurality of times in accordance with a predetermined security level.

Claim 3

Dependent Claim 18 words

The method according to claim 1, wherein said at least one vector s i is a binary vector.

Claim 4

Dependent Claim 218 words

The method according to claim 1, wherein: said matrix M is binary matrix; said commitment values are computed as follows: h.sub.1 =H(p,M·y), h.sub.2 =H (y.sub.p), and h.sub.3 =H ((y XOR s.sub.i).sub.p) , where y p represents the vector y permuted by p, and XOR represents the exclusive OR function; said random number q is an integer such that 0<q<4; said testing carried out in step (i) is carried out as follows: if q=1, then said identification device generates said fifth electronic signal as a function of said first and second electronic signals, if q=2, then said identification device generates said fifth electronic signal as a function of (y XOR s i ) and said second electronic signal, and if q=3, then said identification device generates said fifth electronic signal as a function of Y p and s i ; and said verification device receives said reply r={U,V} and tests that: if q=1, then h 1 =H (V,M·U) and h 2 =H U V ), if q=2, then h 2 =H(V, (M·U) XOR K i ) and h 3 =H (U V ), and if q=3, then h 2 =H(U), h 3 =H(U XOR V) and the Hamming weight of V is d as indication of a successful verification of the identity of said at least one identification device.

Claim 5

Dependent Claim 315 words

A method according to claim 1, wherein: said matrix M is a binary matrix; said commitment values are calculated as follows: h.sub.1 =H(p) , h.sub.2 =H (y.sub.p), and h.sub.3 =H ((y XOR s.sub.i).sub.p); where y p represents the vector y permuted by p, and XOR represents the exclusive OR function; said verification device generates a sixth electronic signal representing a list of randomly selected mutually discontinuous number G={g 1 , . . . g f } such that 1<g i <k and sends said sixth electronic signal to said at least one identification device, where f is an integer; said at least one identification device calculates f bits of M·y at locations indicated by G to generate an electronic signal representing a vector Z, and sends said vector Z to said verification device; said testing carried out in step (i) is carried out as follows: if q=1, then said identification device generates said fifth electronic signal as a function of said first and second electronic signals, if q=2, then said identification device generates said fifth electronic signal as a function of (y XOR s i ) and said second electronic signal, and if q=3, then said identification device generates said fifth electronic signal as a function of Y p and s i ; and said verification device receives said reply r={U,V} and tests that: if q=1, then h 1 =H(V) and h 2 =H(U·V) and Extract (M·U·G) XOR Z=0 where Extract(x, G) represents the projection vector obtained by choosing in x only the bits indicated by G, if q=2, then h 1 =H(V) and h 3 =H(U v ) and Extract (M·U XOR K i , G) XOR Z=0, and if q=3 then h 2 =H(U), h 3 =H(U XOR V) and the Hamming weight of V is d as indication of a successful verification of the identity of said at least one identification device.

Claim 6

Dependent Claim 298 words

The method according to claim 1, wherein: said matrix M is a binary matrix; said commitment values are calculated as follows: h.sub.1 =H(p), h.sub.2 =H(y.sub.p), and h.sub.3 =H ((y XOR s.sub.i).sub.p, where y p represents the vector y permuted by p, and XOR represents the exclusive OR function; said at least one identification device an electronic signal representing a vector Q=M·y and sends said electronic signal to said verification device; said verification device generates a sixth electronic signal representing a list of randomly selected mutually discontinuous numbers G={g 1 , . . . ,g f } such that 1<g i <k and generates an electronic signal representing a vector Z=Extract(Q,G), where f is an integer and Extract (Q,G) represents the projection vector obtained by choosing in Q only the bits indicated by G; said testing carried out in step (i) is carried out as follows: if q=1, then said identification device generates said fifth electronic signal as a function of said first and second electronic signals, if q=2, then said identification device generates said fifth electronic signal as a function of (y XOR s i ) and said second electronic signal, and if q=3, then identification device generates said fifth electronic signal as a function of Y p and s i ; and said verification device receives said reply r={U,V} and tests that: if q=1, then h 1 =H (V), h 2 =H (U V ) and Extract (MUG) XOR Z=0, if q=2, then h 1 =H(V), h 3 =H(U V ) and Extract (MU XOR K i , G) XOR Z=0, and if q=3, then h 2 =H(U), h 3 =H(U XOR V) and the Hamming weight of V is d as indication of a successful verification of the identity of said at least one identification device.

Claim 7

Dependent Claim 234 words

The method according to claim 1, wherein: said coefficients of said matrix M and coefficients of said random vector y are integers less than an integer m; said commitment values are computed as follows: h.sub.1 =H(p,M·y), h.sub.2 =H (Y.sub.p), and h.sub.3 =H (y MOD.sub.m S.sub.i).sub.p), where y p represents the vector y permuted by p, and MOD m represents addition modulo m; said random number 1 is an integer such that 0<1<4; said testing carried out in step (i) is carried out as follows: if q=1, then said identification device said fifth electronic signal as a function of said first and second electronic signals, if q=2, then said identification device generates said fifth electronic signal as a function of (y MOD m S i ) and said second electronic signal, and if q=3, then said identification device generates said fifth electronic signal as a function of Y p and S i ; and said verification device receives said reply r={U,V} and tests that: if q=1, then h 1 =H (V,M·U) and h 2 =H U V ) if q=2, then h 1 =H(V, (M·U) MOD m K i ) and H 3 =H(U V ), and if q=3, then h 2 =H(U), h 3 =H(U MOD m V) and the vector S i consists of zeros and/or ones as indication of a successful verification of the identity of said at least one identification device.

Claim 8

Dependent Claim 336 words

A method according to claim 1, wherein: said coefficients of said matrix M and coefficients of said random vector y are integers less than an integer m; said commitment values are calculated as follows: h.sub.1 =H (p), h.sub.2 =H (Y.sub.p) and h.sub.3 =H ((y MOD.sub.m S.sub.i).sub.p); where y p represents the vector y permuted by p, and MOD m represents addition modulo m; said verification device generates a sixth electronic signal representing a list of randomly selected mutually discontinuous numbers G={g 1 , . . . g f } such that 1<g i <k and sends said sixth electronic signal to said at least one identification device, where f is an integer; said at least one identification device calculates f values of M·y at locations indicated by G to generate an electronic signal representing a vector Z, and sends said electronic signal to said verification device; said testing carried out in step (1) is carried out as follows: if q=1, then said identification device generates said fifth electronic signal as a function of said first and second electronic signals, if q=2, then said identification device generates said fifth electronic signal as a function by (y MOD m S i ) and said second electronic signal and if q=3, then said identification device generates said fifth electronic signal as a function of Y p and S i ; and said verification device receives said reply r={U,V} and tests that: if q=1, then h 1 =H(V) and h 2 =H(U·V) and Extract (M·U·G) MOD m Z=0 where Extract (x, G) represents the projection vector obtained by choosing in x only the values indicated by G, if q=2, then h 1 =H(V) and h 3 =H(U V ) and Extract (M·U MOD m K i , G) MOD m Z=0, and if q=3 then h 2 =H(U), h 3 =H(U MOD m V) and the vector S i consists of zeroes and/or ones as indication of a successful verification of the identity of said at least one identification device.

Claim 9

Dependent Claim 322 words

The method according to claim 1, wherein: said coefficients of said matrix M and coefficients of said random vector y are integer less than an integer m; said commitment values are calculated as follows: h.sub.1 =H (p), h.sub.2 =H (Y.sub.p), and h.sub.3 =H ((y MOD.sub.m S.sub.i)p, where y p represents the vector y permuted by p, and MOD m represents addition modulo m; said at least one identification device calculates an electronic signal representing a vector Q=M·y and sends said electronic signal to said verification device; said verification device generates a sixth electronic signal representing a list of randomly selected mutually discontinuous numbers G={g 1 , . . . ,g f } such that 1<g i <k and generates an electronic signal representing a vector Z=Extract (Q,G), where f is an integer and Extract (Q,G) represents the projection vector obtained by choosing in Q only the values indicated by G; said testing carried out in step (i) is carried out as follows: if q=1, then said identification device generates said fifth electronic signal as a function of said first and second electronic signals, if q=2, then said identification device generates said fifth electronic signal as a function of (y MOD m S i ) and said second electronic signal, and if q=3, then identification device generates said fifth electronic signal as a function of Y p and S i ; and said verification device receives said reply r={U,V} and tests that: if q=1, then h 1 =H(V), h 2 =H(U V ) and Extract (MUG) MOD m Z=0, if q=2, then h 1 =H (V), h 3 =H (U V ) and Extract (MU MOD m K i , G) MOD m Z=0, and if q=3, then h 2 =H(U), h 3 =H(U MOD m V) and the vector S i consists of zeros and/or ones as indication of a successful verification of the identity of said at least one identification device.

Claim 10

Independent Claim 302 words

A method of authenticating the identity of at least one identification device by a verification device, said method comprising the steps of: (a) generating an electronic secret key signal representing a secret key having a set of vectors s[1], . . . s[w] of dimension n and Hamming weight d, forming an extended simplex code, where d, w, i, and n are integers and d<n; (b) generating an electronic public key signal representing a public key having a binary matrix M with dimensions n×k the coefficients of which are chosen at random, where k is an integer; (c) generating an electronic vector signal representing a set of vectors K[1], . . . , K[w] such that M·[s(i)]=K[i], where i is an integer; (d) generating, via said at least one identification device, a first electronic signal representing a random vector y of dimension n and a second electronic signal representing a random permutation p; (e) applying an electronic signal representing a cryptographic hash function H to said second electronic signal, said first electronic signal, said electronic secret key signal, and said electronic public key signal to generate third electronic signals representing commitment values h 1 and h 2 ; (f) sending said third electronic signals to said verification device; (g) generating, via said verification device, a fourth electronic signal representing a random number q and sending said fourth electronic signal to said at least one identification device; (h) generating, via said at least one identification device, a fifth electronic signal representing a reply r in accordance with said fourth electronic signal received from said verification device; (i) receiving and testing, via said verification device, said reply to verify the identity of said at least one identification device; and (j) repeating steps (a)-(i) a plurality of times in accordance with a predetermined security level.

Claim 11

Independent Claim 302 words

A method of authenticating the identity of at least one identification device by a verification device, said method comprising the steps of: (a) generating an electronic secret key signal representing a secret key having a set of vectors s[1], . . . s[w] of dimension n and Hamming weight d, forming an extended simplex code, where d, w, i, and n are integers and d<n; (b) generating an electronic public key signal representing a public key having a binary matrix M with dimensions n×k the coefficients of which are chosen at random, where k is an integer; (c) generating an electronic vector signal representing a set of vectors K[1], . . . , K[w] such that M·[s(i)]=K[i], where i is an integer; (d) generating, via said at least one identification device, a first electronic signal representing a random vector y of dimension n and a second electronic signal representing a random permutation p; (e) applying an electronic signal representing a cryptographic hash function H to said second electronic signal, said first electronic signal, said electronic secret key signal, and said electronic public key signal to generate third electronic signals representing commitment values h 1 and h 2 ; (f) sending said third electronic signals to said verification device; (g) generating, via said verification device, a fourth electronic signal representing a random number q and sending said fourth electronic signal to said at least one identification device; (h) generating, via said at least one identification device, a fifth electronic signal representing a reply r in accordance with said fourth electronic signal received from said verification device; (i) receiving and testing, via said verification device, said reply to verify the identity of said at least one identification device; and (j) repeating steps (a)-(i) a plurality of times in accordance with a predetermined security level.

Claim 12

Dependent Claim 265 words

The method according to claim 9, wherein: said commitment values are computed as follows: h.sub.1 =H(M·y,p), and h.sub.2 =H(y.sub.p, s[1].sub.p, . . . , s[w].sub.p), where y p represents the vector y permuted by p, and XOR represents the exclusive OR function; said verification device generates a sixth electronic signal representing a randomly selected binary vector b[1] . . . , b[w] and sends said sixth electronic signal to said at least one identification device; said at least one identification device generates an electronic signal representing a response z as follows: z=y.sub.p XOR s[1].sub.p b[1]XOR s[2].sub.p b[2]XOR s[3].sub.p b3]. . . XOR s[w].sub.p b[w] and sends said electronic signal to said verification device; said random number q is equal to 0 or 1; said testing carried out in step (i) is carried out as follows: if q=0, then said identification device generates said fifth electronic signal as a function of vector y p and vectors s[1] p , . . . , s[w] p , and if q=1, then said identification device generates said fifth electronic signal as a function of said second electronic signal, said verification device receives said response r={r[0], r[1], . . . ,r[w]} if q=0 or r={r[0]} if q=1 and tests that: if q=0, then h 2 =H(r),z=r[0]XOR r[1]b[1]XOR r[2]b[2] XOR r[3]b[3]. . . XOR r[w]b[w] and {r[1], r[2], . . . , r[w]} forms a simplex code, if q=1, then h 1 =H(M(depermute(z, r[0])) XOR (K[1]b[1]XOR K[2]b[2] XOR K[3]b[3]. . . XOR K[w]b[w]), r[0]) as indication of a successful verification of the identity of said at least one identification device.

Claim 13

Dependent Claim 298 words

The method according to claim 9, wherein: said commitment values are computed as follows: h.sub.1 =H(p), and h.sub.2 =H(y.sub.p, s[1].sub.p, . . . , s[w].sub.p), where y p represents the vector y permuted by p, and XOR represents the exclusive OR function; said third electronic signals are sent to said verification device along with an electronic signal representing a vector h 0 =M·y; said verification device generates a sixth electronic signal representing a randomly selected binary vector b[1] . . . , b[w] and sends said sixth electronic signal to said at least one identification device; said at least one identification device generates an electronic signal representing a response z as follows: z=y p XOR s[1] p b[1]XOR s[2] p b[2]XOR s[3] p b3]. . . XOR s[w] p b[w] and sends said electronic signal to said verification device; said random number q is equal to 0 or 1; said testing carried out in step (i) is carried out as follows: if q=0, then said identification device generates said fifth electronic signal as a function of vector y p and vectors s[1] p , . . . ,s[w] p , and if q=1, then said identification device generates said fifth electronic signal as a function of said second electronic signal, said verification device receives said response r={r[0], r[1], . . . ,r[w]} if q=0 or r={r[0]} if q=1 and tests that: if q=0, then h 2 =H(r),z=r[0]XOR r[1]b[1]XOR, . . . r[2]b[2] XOR r[3]b[3]. . . XOR r[w]b[w] and {r[1], r[2], . . . , r[w]} forms a simplex code, if q=1 then h 1 =H(r[0]) and (h 0 ])r[ 0 ]XOR (K[1]b[1]XOR K[2]b[2]XOR K[3]b[3]. . . XOR K[w]b[w]) r [0 ]=z as indication of a successful verification of the identity of said at least one identification device.

Claim 14

Independent Claim 49 words

The method according to any of claims 1-11, wherein: step (j) comprises repeating steps (a)-(i) t times, where t is an integer; and said verification device authenticates said at least one identification device only if the testing carried out in step (i) is successful each of said t times.

Claim 15

Dependent Claim 8 words

The method according to claim 12, wherein 0<t<60.

Claim 16

Independent Claim 17 words

The method according to 13, wherein said Hamming weight d is chosen such that: d≦(k-n)·log.sub.2 (1-(k/n)-k·log.sub.2 (k/n)

Claim 17

Independent Claim 17 words

The method according to 13, wherein said Hamming weight d is chosen such that: d≦(k-n)·log.sub.2 (1-(k/n)-k·log.sub.2 (k/n)

Claim 18

Dependent Claim 18 words

The method according to claim 13, wherein said Hamming weight d is chosen such that: d≧(n-(k-n)·log.sub.2 (1-k/n))+k·log.sub.2 (k/n).

Claim 19

Dependent Claim 8 words

The method according to claim 14, wherein n=2·k.

Claim 20

Dependent Claim 10 words

The method according to claim 14, wherein d=(0.11)·n or d=(0.89)·n.

Claim 21

Dependent Claim 8 words

The method according to claim 15, wherein n=2·k.

Claim 22

Dependent Claim 10 words

The method according to claim 15, wherein d=(0.11)·n or d=(0.89)·n.

Claim 23

Dependent Claim 22 words

The method according to claim 16, wherein one of the following is true: {n=384, k=196}, {n=512, k=256}, {n=1024, k=512}, or {n=768, k=384}.

Claim 24

Dependent Claim 22 words

The method according to claim 17, wherein one of the following is true: {n=384, k=196}, {n=512, k=256}, {n=1024, k=512}, or {n=768, k=384}.

Claim 25

Dependent Claim 22 words

The method according to claim 18, wherein one of the following is true: {n=384, k=196}, {n=512, k=256}, {n=1024, k=512}, or {n=768, k=384}.

Claim 26

Dependent Claim 22 words

The method according to claim 19, wherein one of the following is true: {n=384, k=196}, {n=512, k=256}, {n=1024, k=512}, or {n=768, k=384}.

Claim 27

Dependent Claim 26 words

The method according to any claims 6-8, wherein n=k·1n(m)/1n 2 and n-k>64. 25. The method according to claim 24, wherein m is selected from the group

Claim 28

Dependent Claim 49 words

consisting of 2, 3, 5, 7, or 2 c , where c is an integer. 26. The method according to any of claims 6-8, wherein the values of {n, k, m} are one of the following: {198, 128, 3}, {384, 256, 3}, {128, 64, 5}, or {192, 96, 5}.

Claim 29

Dependent Claim 11 words

The method according to claim 26, wherein H(p) is calculated by

Claim 30

Dependent Claim 95 words

calculating H(e p ), where e is a pseudo-random constant vector. 28. The method according to claim 23, wherein electronic signals representing a set of primary secret codes {K·P i } are selected, and an electronic signal representing a binary vector I=H(ID) is generated to generate an electronic signal representing at least one vector s such that an ID representing the identity of each of said at least one identification device may be associated with the codes {s, K} thereof, where s represents s i or s[1], . . . , s[w] and K represents

Claim 31

Dependent Claim 59 words

K i or K[1], . . . , K[w], respectively. 29. The method according to claim 28, wherein said verification device determines whether said electronic signal representing at least one vector s is generated as a function of said electronic signals representing secret codes {K·P i }, where s represents s i or s[1], . . . ,s[w] and

Claim 32

Dependent Claim 26 words

K represents K i or K[1], . . . , K[w], respectively. 30. The method according to claim 29, wherein said set of primary secret codes

Claim 33

Dependent Claim 12 words

{K·P i } forms at least one extended simplex code. 31. The

Claim 34

Dependent Claim 12 words

{K·P i } forms at least one extended simplex code. 31. The

Claim 35

Dependent Claim 29 words

method according to claim 30, wherein I is a 56-bit vector. 32. The method according to claim 31, wherein: s=I[1]·(K·P.sub.1)+I[2]·(k·P.sub.2)+. . . I·(K·P.sub.size of I) and where P·P.sub.i =M·(K·P.sub.i).

Claim 36

Dependent Claim 67 words

The method according to claim 32, wherein said verification device selects electronic signals representing t primary secret codes {K·P i } with weights a·t and generates an electronic signal representing a code s by partial triangulation as follows: ##EQU5## where the weight of s=(t·a)-t/2, P·P i =M·(K·P i ) is published, and the choice of dimensions is governed by the following relations: (0.11)·n=(t·a)-t/2, 2·k=n and (2·a·t·ε)>56 where

Claim 37

Dependent Claim 15 words

(2·a)-(2·a·H 2 (ε)=1. 34. The method according to claim 33, wherein t=56, d=95, n=864, k=432.

Claim 38

Dependent Claim 210 words

An identity authentication system comprising: a verification device; and at least one identification device, wherein said at least one identification device comprises: means for storing an electronic secret key signal representing a secret key comprising at least one vector s i of dimension n and Hamming weight d, where d, i, and n are integers and d<n; means for generating an electronic public key signal representing a public key having a matrix M with dimensions n×k the coefficients of which are chosen at random, where k is an integer; means for generating a first electronic signal representing a random vector y of dimension n and a second electronic signal representing a random permutation p; means for applying an electronic signal representing a cryptographic hash function H to said first and second electronic signals, said electronic secret key signal, and said electronic public key signal to generate third electronic signals representing commitment values; and means for generating an electronic signal representing a response in accordance with an electronic signal representing a random number received from said verification device, and wherein: said verification device comprises means for receiving said electronic signal representing a response from said at least one identification device and testing said electronic signal to verify the identity of said

Claim 39

Dependent Claim 210 words

An identity authentication system comprising: a verification device; and at least one identification device, wherein said at least one identification device comprises: means for storing an electronic secret key signal representing a secret key comprising at least one vector s i of dimension n and Hamming weight d, where d, i, and n are integers and d<n; means for generating an electronic public key signal representing a public key having a matrix M with dimensions n×k the coefficients of which are chosen at random, where k is an integer; means for generating a first electronic signal representing a random vector y of dimension n and a second electronic signal representing a random permutation p; means for applying an electronic signal representing a cryptographic hash function H to said first and second electronic signals, said electronic secret key signal, and said electronic public key signal to generate third electronic signals representing commitment values; and means for generating an electronic signal representing a response in accordance with an electronic signal representing a random number received from said verification device, and wherein: said verification device comprises means for receiving said electronic signal representing a response from said at least one identification device and testing said electronic signal to verify the identity of said

Claim 40

Dependent Claim 287 words

at least one identification device. 36. The identity authentication system according to claim 35, wherein said verification device comprises: means for storing electronic signals representing at least one public key vector K i ; and said Hamming Weight d; means for storing said third electronic signals representing commitment values h 1 , h 2 , and h 3 received from said at least one identification device; means for receiving electronic signals representing a response from said at least one identification device and extracting electronic signals representing a permutation p and a vector v consisting of n bits, or electronic signals representing two vectors U and V of n bits each, therefrom; means for multiplying said electronic public key signal by an electronic signal representing said vector v; means for generating an electronic signal representing a vector w by adding an electronic signal representing a public key vector K i to an electronic signal representing a result of multiplying M·v; means for applying electronic signals representing said permutation p to electronic signals representing said vector v or to electronic signals representing said vectors U and V; means for applying said electronic signal representing said cryptographic hash function H to electronic signals representing said permutation p and said vector w or to an electronic signal representing a vector resulting from applying said electronic signal representing said permutation p to electronic signals representing vector v, U, or V; means for comparing results of hashing to said third electronic signals representing commitment values h 1 , h 2 , and h 3 ; means for applying the exclusive OR function to said electronic signals representing vectors U and V; and means for generating an electronic signal representing a Hamming Weight of

Claim 41

Dependent Claim 34 words

(U XOR V) and comparing said Hamming Weight to the value of d. 37. The identity authentication system according to claim 35, wherein said electronic public key signal is generated by a deterministic pseudo-random

Claim 42

Dependent Claim 95 words

number generator. 38. The identity authentication system according to claim 36, wherein said multiplying means comprises: a plurality of AND gates, an electronic signal representing a bit from said vector y and an electronic signal representing a bit from a current line of said public matrix M being applied to inputs of each of said AND gates; and a triangular network of XOR gates which receive outputs of said AND gates and generate electronic signals representing bits corresponding to a scalar product of said vector y and said current line of said public matrix M.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	1999-01-08	1999-07-10	2000-01-09	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2003-01-08	2003-07-10	2004-01-09	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2007-01-08	2007-07-10	2008-01-09	$7700.00	Window Closed / Lapsed

Authentication process for at least one identification device using a verification device and a device embodying the process

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag