US5491750A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for three-party entity authentication and key distribution using message authentication codes
Assignee: International Business Machines Corp
•
Filing: 1993-12-30
•
Granted: 1996-02-13
•
Expires: 2013-12-30
Abstract
Abstract A method is provided for authenticating communication partners utilizing communication flows which are passed over an insecure communication channel. The method includes a number of method steps. A trusted intermediary is provided which is capable of communication with the communication partners over the insecure communication channel. A plurality of long-lived secret keys are provided, one for each communication partner. The plurality of long-lived secret keys are distributed to a particular one of the communication partners, and to the trusted intermediary. Therefore, the long-lived secret key is known only by the particular communication partner to which it is assigned, and the trusted intermediary. A request for communication between communication partners is provided to the trusted intermediary. The trusted intermediary is utilized to generate a short-lived secret key for utilization in a communication session between the communication partners. The short-lived secret key for each particular partner is masked in a manner which is dependent upon that particular partner's long-lived secret key. The masked short-lived secret keys are distributed in a plurality of communication flows to the communication partners. Finally, the trusted intermediary and communication partners exchange authentication proofs with one another in a plurality of communication flows. Preferably, the communication flows between the trusted intermediary and the communication partners accomplish substantially concurrently the tasks of authenticating the identity of the trusted intermediary and the communication partners, as well as distribute a short-lived secret key to the communication partners which can be utilized by them in a particular communication session.
Inventors
- 👤 Mihir M. Bellare
- 👤 Phillip W. Rogaway
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 10:19
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0822; H04L9/083; H04L9/32; H04L9/321; H04L9/3236; H04L9/3242; H04L9/3271; H04L9/3273
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
165 words
A method of authenticating communication partners utilizing communication flows which are passed over an insecure communication channel, comprising the method steps of: (a) providing a trusted intermediary which is capable of communication with said communication partners over said insecure communication channel; (b) providing a plurality of long-lived secret keys, one for each communication partner; (c) distributing each of said plurality of long-lived secret keys to (1) a particular one of said communication partners, and (2) said trusted intermediary; (d) receiving at said trusted intermediary a request for communication between communication partners; (e) utilizing said trusted intermediary to generate a short-lived secret key for utilization in a communication session between said communication partners; (f) masking said short-lived secret key for each particular communication partner in a manner that is dependent upon that particular partner's long-lived secret key; (g) distributing said masked short-lived secret keys in a plurality of communication flows to said communication partners; (h) exchanging authentication tags among said communication partners and said trusted intermediary.
Claim 2
Independent Claim
165 words
A method of authenticating communication partners utilizing communication flows which are passed over an insecure communication channel, comprising the method steps of: (a) providing a trusted intermediary which is capable of communication with said communication partners over said insecure communication channel; (b) providing a plurality of long-lived secret keys, one for each communication partner; (c) distributing each of said plurality of long-lived secret keys to (1) a particular one of said communication partners, and (2) said trusted intermediary; (d) receiving at said trusted intermediary a request for communication between communication partners; (e) utilizing said trusted intermediary to generate a short-lived secret key for utilization in a communication session between said communication partners; (f) masking said short-lived secret key for each particular communication partner in a manner that is dependent upon that particular partner's long-lived secret key; (g) distributing said masked short-lived secret keys in a plurality of communication flows to said communication partners; (h) exchanging authentication tags among said communication partners and said trusted intermediary.
Claim 3
Dependent Claim
38 words
A method of authenticating communication partners according to claim 1, wherein said step of distributing said masked short-lived secret keys occurs substantially concurrently with said step of exchanging authentication tags among said communication partners and said trusted intermediary.
Claim 4
Dependent Claim
47 words
A method of authenticating communication partners according to claim 1, wherein selected substeps of said steps of (1) distributing said plurality of masked short-lived secret keys, and (2) exchanging authentication tags among said communication partners and said trusted intermediary, occur in selected combinations in particular communication flows.
Claim 5
Dependent Claim
58 words
A method of authenticating communication partners according to claim 1, wherein at least portions of said steps of (1) distributing said masked short-lived secret keys in a plurality of communication flows to said communication partners, and (2) exchanging authentication tags among said communication partners and said trusted intermediary, occur substantially concurrently, thus minimizing in number said communication flows.
Claim 6
Dependent Claim
48 words
A method of authenticating communication partners according to claim 1, wherein said step of masking said short-lived secret key comprises: encrypting said short-lived secret key in a plurality of encryption operations, one for each particular communication partner, which is keyed with that particular communication partner's long-lived secret key.
Claim 7
Dependent Claim
110 words
A method of authenticating communication partners according to claim 1, wherein said authentication tags comprise at least one of: (1) a message authentication code keyed by a particular one of said plurality of long-lived secret key for a particular communication partner, taken over a message being transmitted by said particular communication partner and data which identifies said particular communication partner responsible for said message, and (2) a message authentication code keyed by a particular one of said plurality of said long-lived secret keys taken over a message being transmitted by a particular communication partner and a bit string which uniquely determines identity of said particular communication partner originating said message.
Claim 8
Dependent Claim
23 words
A method of authenticating communication partners according to claim 1, wherein said authentication tags are generated by at least one message authentication operation.
Claim 9
Independent Claim
208 words
A method of authenticating communication partners in a distributed data processing system utilizing communication flows which are passed over an insecure communication channel between data processing nodes utilized by said communication partners, comprising the method steps of: (a) providing an authentication server which operates as a trusted intermediary which is capable of communication with said communication partners over said insecure communication channel; (b) providing a plurality of long-lived secret keys, one for each communication partner; (c) distributing, and recording in memory, each of said plurality of long-lived secret keys to (1) a particular one of said communication partners at a particular one of said data processing nodes, and (2) said authentication server; (d) receiving at said authentication server a request for communication between communication partners; (e) utilizing said authentication server to generate a short-lived secret key for utilization in a communication session between said communication partners; (f) masking said short-lived secret key, at said authentication server, in a plurality of masking for each particular communication partner in a manner that is dependent upon that particular partner's long-lived secret key; (g) distributing said masked short-lived secret keys in a plurality of communication flows to said communication partners; (h) exchanging authentication tags among said communication partners and said authentication server.
Claim 10
Independent Claim
208 words
A method of authenticating communication partners in a distributed data processing system utilizing communication flows which are passed over an insecure communication channel between data processing nodes utilized by said communication partners, comprising the method steps of: (a) providing an authentication server which operates as a trusted intermediary which is capable of communication with said communication partners over said insecure communication channel; (b) providing a plurality of long-lived secret keys, one for each communication partner; (c) distributing, and recording in memory, each of said plurality of long-lived secret keys to (1) a particular one of said communication partners at a particular one of said data processing nodes, and (2) said authentication server; (d) receiving at said authentication server a request for communication between communication partners; (e) utilizing said authentication server to generate a short-lived secret key for utilization in a communication session between said communication partners; (f) masking said short-lived secret key, at said authentication server, in a plurality of masking for each particular communication partner in a manner that is dependent upon that particular partner's long-lived secret key; (g) distributing said masked short-lived secret keys in a plurality of communication flows to said communication partners; (h) exchanging authentication tags among said communication partners and said authentication server.
Claim 11
Dependent Claim
38 words
A method of authenticating communication partners according to claim 8, wherein said step of distributing said masked short-lived secret keys occurs substantially concurrently with said step of exchanging authentication tags among said communication partners and said authentication server.
Claim 12
Dependent Claim
47 words
A method of authenticating communication partners according to claim 8, wherein selected substeps of said steps of (1) distributing said plurality of masked short-lived secret keys, and (2) exchanging authentication tags among said communication partners and said authentication server, occur in selected combinations in particular communication flows.
Claim 13
Dependent Claim
58 words
A method of authenticating communication partners according to claim 8, wherein at least portions of said steps of (1) distributing said masked short-lived secret keys in a plurality of communication flows to said communication partners, and (2) exchanging authentication tags among said communication partners and said authentication server, occur substantially concurrently, thus minimizing in number said communication flows.
Claim 14
Dependent Claim
48 words
A method of authenticating communication partners according to claim 8, wherein said step of masking said short-lived secret key comprises: encrypting said short-lived secret key in a plurality of encryption operations, one for each particular communication partner, which is keyed with that particular communication partner's long-lived secret key.
Claim 15
Dependent Claim
110 words
A method of authenticating communication partners according to claim 8, wherein said authentication tags comprise at least one of: (1) a message authentication code keyed by a particular one of said plurality of long-lived secret key for a particular communication partner, taken over a message being transmitted by said particular communication partner and data which identifies said particular communication partner responsible for said message, and (2) a message authentication code keyed by a particular one of said plurality of said long-lived secret keys taken over a message being transmitted by a particular communication partner and a bit string which uniquely determines identity of said particular communication partner originating said message.
Claim 16
Dependent Claim
23 words
A method of authenticating communication partners according to claim 8, wherein said authentication tags are generated by at least one message authentication operation.
Claim 17
Dependent Claim
171 words
Means for authenticating communication partners utilizing communication flows which are passed over an insecure communication channel, comprising the method steps of: (a) a trusted intermediary which is capable of communication with said communication partners over said insecure communication channel; (b) a plurality of long-lived secret keys, one for each communication partner; (c) wherein said plurality of long-lived secret keys are distributed to (1) a particular one of said communication partners, and (2) said trusted intermediary; (d) means receiving at said trusted intermediary a request for communication between communication partners; (e) means for utilizing said trusted intermediary to generate a short-lived secret key for utilization in a communication session between said communication partners; (f) means for masking said short-lived secret key for each particular communication partner in a manner that is dependent upon that particular partner's long-lived secret key; (g) means for distributing said masked short-lived secret keys in a plurality of communication flows to said communication partners; (h) means for exchanging authentication tags among said communication partners and said trusted intermediary.
Claim 18
Dependent Claim
171 words
Means for authenticating communication partners utilizing communication flows which are passed over an insecure communication channel, comprising the method steps of: (a) a trusted intermediary which is capable of communication with said communication partners over said insecure communication channel; (b) a plurality of long-lived secret keys, one for each communication partner; (c) wherein said plurality of long-lived secret keys are distributed to (1) a particular one of said communication partners, and (2) said trusted intermediary; (d) means receiving at said trusted intermediary a request for communication between communication partners; (e) means for utilizing said trusted intermediary to generate a short-lived secret key for utilization in a communication session between said communication partners; (f) means for masking said short-lived secret key for each particular communication partner in a manner that is dependent upon that particular partner's long-lived secret key; (g) means for distributing said masked short-lived secret keys in a plurality of communication flows to said communication partners; (h) means for exchanging authentication tags among said communication partners and said trusted intermediary.
References Cited (Backward Citations)
US4193131A
Cited
US4720859A
Cited
US4438824A
Cited
US4549075A
Cited
US4723284A
Cited
US4588985A
Cited
US4799061A
Cited
US5148479A
Cited
US5153919A
Cited
US5241599A
Cited
US5299263A
Cited
US5371794A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-02-12 | 1999-08-14 | 2000-02-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-02-12 | 2003-08-14 | 2004-02-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-02-12 | 2007-08-14 | 2008-02-13 | $7700.00 | Window Closed / Lapsed |