Method and apparatus for privacy and authentication in wireless networks

Claim 2

An improved method for providing secure communications between. a first data processing device and a second data processing device, comprising the steps of: (a) said first data processing device transmitting a first message including: a Mobile Certificate (Cert -- Mobile) including a mobile public key (Pub -- Mobile), a chosen challenge value (CH1), and a list of supported shared key algorithms (SKCS), to said second data processing device; (b) said second data processing device receiving said first message and verifying a first signature of a first certificate authority (CA), said second data processing device validating said received Cert -- Mobile, and if said Cert -- Mobile is valid, said second data processing device transmitting a second message including: a Base Certificate (Cert -- Base) including a base public key (Pub -- Base), a second digital signature, a random number (RN1), and an identifier of one of said SKCS chosen from said list of supported shared key algorithms, to said first data processing device; (c) said first data processing device receiving said second message and validating said Cert -- Base, and if said Cert -- Base is valid, said first data processing device validating said second signature of said Cert -- Base using said Pub -- Base, such that if said second signature is valid, said first data processing device determining the value of RN1 by decrypting the value of E(Pub -- Mobile, RN1) using a private key of said first data processing device (Priv -- Mobile); (d) said first data processing device generating a value RN2 and a first session key having the value (RN1⊕RN2), said first data processing device encrypting the value of RN2 using said base public key (Pub -- Base), and sending a third message to said second data processing device including said encrypted RN2 and the value of E(Pub -- Mobile, RN1) along with a digital signature corresponding to said first data processing device; (e) said second data processing device receiving said third message and verifying said digital signature of said first data processing device using Pub -- Mobile obtained from said Cert -- Mobile, and if said signature of said first data processing device is verified, said second data processing device decrypting the value of E(Pub -- Base, RN2) using a private key of said second data processing device (Priv -- Base), said second data processing device using said first session key having the value of (RN1⊕RN2); (f) said first and second data processing devices transferring data using encrypted data which is decrypted using said first session key.

Claim 3

The method as defined by claim 1 wherein said Cert -- Mobile comprises the expression: Signed(Priv -- CA, Certificate contents).

Claim 4

The method as defined by claim 2 wherein said Certificate contents comprises: {Serial Number, Validity Period, Machine Name, Machine Public Key, CA name}.

Claim 5

The method as defined by claim 3 wherein said MD is signed by said CA by encrypting said MD under said private key of said CA, such that the content of said Cert -- Mobile are authenticated.

Claim 6

The method as defined by claim 4 wherein said CH1 comprises a randomly generated number.

Claim 7

The method as defined by claim 5 wherein said step of validating said received Cert -- Mobile of step (b) includes the steps of: said second data processing device independently computing said MD function on the contents of Cert -- Mobile; said second data processing device comparing said independently computed MD function with the decryption under said public key of said CA of said MD signed by said CA in Step (b) of claim 1, such that if said MDs match said Cert -- Mobile is valid.

Claim 8

The method as defined by claim 6 wherein said RN1 value is encrypted using said Pub -- Mobile of said first data processing device.

Claim 9

The method as defined by claim 7 wherein said second data processing device stores said RN1 value, and includes said CH1 value and said identifier of said chose SKCS in messages between said second and said first day processing devices.

Claim 10

The method as defined by claim 8 wherein said second message comprises the expression: {Cert -- Base, E(Pub -- Mobile, RN1), Chosen SKCS, Sig(Priv -- Base,{E(Pub -- Mobile, RN1), Chosen SKCS, CH1, List of SKCSs})}.

Claim 11

The method as defined by claim 9 wherein said second digital signature is verified in Step (b) of claim 1 by appending said second message to CH1 and said list of SKCSs.

Claim 12

The method as defined by claim 10 wherein said value RN2 comprises a random number.

Claim 13

The method as defined by claim 11 wherein said third message comprises the expression: {E(Pub -- Base, RN2), Sig{Priv -- Mobile, {E(Pub -- Base,RN2), E(Pub -- Mobile,

Claim 14

The method as defined by claim 12 wherein said CH1 value comprises a 128 bit number.

Claim 15

The method as defined by claim 12 further including a key change method to define a New Key, comprising the steps of: (a) said second data processing device sending a forth message comprising: Signed(Priv -- Base), {E(Pub -- Mobile, New -- RN1), E(Pub -- Mobile, RN1)}); (b) said first data processing device receiving said forth message and send a fifth message to said second data processing device comprising: Signed(Priv -- Mobile, {E(Pub -- Base, New -- RN2), E(Pub -- Base, RN2)}); wherein the value of RN2⊕RN1 is used as the New Key.

Claim 16

The method as defined by claim 12 further including a key change method to define a New Key, comprising the steps of: (a) said first data processing device sending a forth message to said second data processing device comprising the expression: Signed(Priv -- Mobile, {E(Pub -- Base, New -- RN2), E(Pub -- Base, RN2)}); (b) said second data processing device receiving said forth message and sending a fifth message to said first data processing device comprising the expression: Signed(Priv -- Base, {E(Pub -- Mobile, New -- RN1), E(Pub -- Mobile, RN1)}); wherein the value of RN2 ⊕RN1 is used as the New Key.

Claim 17

The method as defined by claim 1 further including a plurality of CAs, and wherein said second message is defined by the expression: {Cert -- Path, List of CRLs, E(Pub -- Mobile, RN1), chosen SKCS, Sig(Priv -- Base, {E(Pub -- Mobile, RN1), Chosen SKCS, CH1, List of SKCSs})}and wherein: CRL comprises a certificate revocation list for each of said CAs.

Claim 18

In a network having a first data processing device in communication with a second data processing device, an apparatus for providing a secure data transfer between said first data processing device and said second data processing device, comprising: a first message generation and transmission/receiving circuit coupled to said first data processing device for transmitting a first message including: a Mobile Certificate (Cert -- Mobile) having a mobile public key (Pub -- Mobile), a chosen challenge value (CH1), and a list of supported shared key algorithms (SKCS), to said second data processing device; second message generation and transmission/receiving circuit coupled to said second data processing device for receiving said first message, said second data processing device validating said receiving Cert -- Mobile, and if said Cert -- Mobile is valid, said second data processing device transmitting a second message including: a Base Certificate (Cert -- Base) including a base public key (Pub -- Base), a second digital signature, a random number (RN1), and an identifier of one of said SKCS chosen from said list of supported shared key algorithms, to said first data processing device; said first data processing device receiving said second message using said first message and transmission/receiving means and validating said Cert -- Base, and if said Cert -- Base is valid, said first data processing device validating said second signature of said message using said Pub -- Base, such that if said second signature is valid, said first data processing device determines the value of RN1 by decrypting the value of E(Pub -- Mobile, RN1) using a private key of said first data processing device (Priv -- Mobile); said first data processing device generating a value RN2 and a first session key having the value (RN1⊕RN2), said first data processing device encrypting the value of RN2 using said base public key (Pub -- Base), and sending a third message to said second data processing device including said encrypted RN2 and the value of E(Pub -- Mobile, RN1) along with a digital signature corresponding to said first data processing device; said second data processing device receiving said third message using said second message and transmission/receiving means and verifying said digital signature of said first data processing device using Pub -- Mobile obtained from said Cert -- Mobile, and if said signature of said first data processing device is verified, said second data processing device decrypting the value of E(Pub -- Base, RN2) using a private key of said second data processing device (Priv -- Base), said second data processing device using said first session key having the value of (RN1⊕RN2); said first and second data processing devices transferring data using encrypted data which is decrypted using said first session key.

Claim 19

In a network having a first data processing device in communication with a second data processing device, an apparatus for providing a secure data transfer between said first data processing device and said second data processing device, comprising: a first message generation and transmission/receiving circuit coupled to said first data processing device for transmitting a first message including: a Mobile Certificate (Cert -- Mobile) having a mobile public key (Pub -- Mobile), a chosen challenge value (CH1), and a list of supported shared key algorithms (SKCS), to said second data processing device; second message generation and transmission/receiving circuit coupled to said second data processing device for receiving said first message, said second data processing device validating said receiving Cert -- Mobile, and if said Cert -- Mobile is valid, said second data processing device transmitting a second message including: a Base Certificate (Cert -- Base) including a base public key (Pub -- Base), a second digital signature, a random number (RN1), and an identifier of one of said SKCS chosen from said list of supported shared key algorithms, to said first data processing device; said first data processing device receiving said second message using said first message and transmission/receiving means and validating said Cert -- Base, and if said Cert -- Base is valid, said first data processing device validating said second signature of said message using said Pub -- Base, such that if said second signature is valid, said first data processing device determines the value of RN1 by decrypting the value of E(Pub -- Mobile, RN1) using a private key of said first data processing device (Priv -- Mobile); said first data processing device generating a value RN2 and a first session key having the value (RN1⊕RN2), said first data processing device encrypting the value of RN2 using said base public key (Pub -- Base), and sending a third message to said second data processing device including said encrypted RN2 and the value of E(Pub -- Mobile, RN1) along with a digital signature corresponding to said first data processing device; said second data processing device receiving said third message using said second message and transmission/receiving means and verifying said digital signature of said first data processing device using Pub -- Mobile obtained from said Cert -- Mobile, and if said signature of said first data processing device is verified, said second data processing device decrypting the value of E(Pub -- Base, RN2) using a private key of said second data processing device (Priv -- Base), said second data processing device using said first session key having the value of (RN1⊕RN2); said first and second data processing devices transferring data using encrypted data which is decrypted using said first session key.

Claim 20

The apparatus as defined by claim 17 wherein said Cert -- Mobile comprises the expression: Signed(Priv -- CA, Certificate contents).

Claim 21

The apparatus as defined by claim 18 wherein said Certificate contents comprises: {Serial Number, Validity Period, Machine Name, Machine Public Key, CA name}.

Claim 22

The apparatus as defined by claim 19 wherein said MD is signed by said CA by encrypting said MD under said private key of said CA, such that the content of said Cert -- Mobile are authenticated.

Claim 23

The apparatus as defined by claim 20 wherein said CH1 comprises a randomly generated number.

Claim 24

The apparatus as defined by claim 21 wherein said step of validating said received Cert -- Mobile is determined by: said second data processing device independently computing said MD function on the contents of Cert -- Mobile; said second data processing device comparing said independently computed MD function with the decryption under said public key of said CA of said MD signed by said CA, such that if said MDs match said Cert -- Mobile is valid.

Claim 25

The apparatus as defined by claim 22 wherein said RN1 value is encrypted using said Pub -- Mobile of said first data processing device.

Claim 26

The apparatus as defined in claim 23 wherein said second data processing device stores said RN1 value, and includes said CH1 value and said identifier of said chosen SKCS in messages between said second and said first data processing devices.

Claim 27

The apparatus as defined in claim 24 wherein said second message comprises the expression: {Cert -- Base, E(Pub -- Mobile, RN1), Chosen SKCS, Sig(Priv -- Base,{E(Pub -- Mobile, RN1), Chosen SKCS, CH1, List of SKCSs))}.

Claim 28

The apparatus as defined by claim 25 wherein said second digital signature is verified by appending said second message to CH1 and said list SKCSs.

Claim 29

The apparatus as defined in claim 26 wherein said value RN2 comprises a random number.

Claim 30

The apparatus as defined by claim 27 wherein said third message comprises the expression: {E(Pub --Base , RN 2), Sig{Priv -- Mobile, {E(Pub -- Base,RN2), E(Pub -- Mobile,

Claim 31

The apparatus as defined by claim 28 wherein said CH1 value comprises a 128 bit number.

Claim 32

The apparatus as defined by claim 29 wherein a New Key may be defined: said second data processing device using said second message and transmission/receiving means sends a forth message comprising: Signed(Priv -- Base, {E(Pub -- Mobile, New -- RN1), E(Pub -- Mobile, RN1)}) to said first data processing device; said first data processing device using said first message and transmission/receiving means receives said forth message and sends a fifth message to said second data processing device comprising: Signed(Priv -- Mobile, {E(Pub -- Base, New -- RN2), E(Pub -- Base, RN2)}); wherein the value of RN2⊕RN1 is used as the New Key.

Claim 33

The apparatus as defined by claim 30 wherein a New Key may be defined: said first data processing device using said first message and transmission/receiving means sends a forth message to said second data processing device comprising the expression: Signed(Priv -- Mobile, {E(Pub -- Base, New -- RN2), E(Pub -- Base, RN2)}); said second data processing device receiving said forth message using said second message and transmission/receiving means and sends a fifth message to said first data processing device comprising the expression: Signed(Priv -- Base, {E(Pub -- Mobile, New -- RN1), E(Pub -- Mobile, RN1)}); wherein the value of RN2 if) RN1 is used as the New Key.

Claim 34

The apparatus as defined by claim 17 further including a plurality of CAs, and wherein said second message is defined by the expression: {Cert -- Path, List of CRLs, E(Pub -- Mobile, RN1), Chosen SKCS, Sig(Priv -- Base, {E(Pub -- Mobile, RN1), Chosen SKCS, CH1, List of SKCSs})} and wherein: CRL comprises a certificate revocation list for each of said CAs. .Iadd.

Claim 35

A method for a first data processing device to communicate securely with a second data processing device comprising the steps of: exchanging authenticatable identification information with the second data processing device; and in conjunction with exchanging identification information, negotiating the selection of an encryption algorithm with the second data processing device for use in communicating securely with said second data processing device. .Iaddend..Iadd.34. The method of claim 33 wherein said identification information comprises session key establishment information. .Iaddend..Iadd.35. The method of claim 34 wherein the step of negotiating an encryption algorithm comprises the steps of: conveying an offer message to the second data processing device, the offer message including information identifying encryption algorithms supported by said first data processing device; and receiving in response to the offer message a selection message from the second data processing device, the selection message including information identifying a selection of at least one of said encryption algorithms. .Iaddend..Iadd.36. The method of claim 35 further comprising the steps of: receiving authentication information with said selection message; and determining the authenticity of the selection message from the second data

Claim 36

processing device. .Iaddend..Iadd.37. The method of claim 36 wherein said authentication information includes a message authentication code or digital signature for authenticating session keying information, wherein said message authentication code or said digital signature incorporates information from said offer and selection messages. .Iaddend..Iadd.38. The method of claim 33 wherein said identification information comprises authenticatable data and public key information associated with said first and second data processing devices. .Iaddend..Iadd.39. The method of claim 33 wherein said exchanging identification information comprises the steps of: conveying a first message to said second data processing device, the first message including a first public key wherein said first public key is associated with said first data processing device; and receiving a second message from said second data processing device, said second message including a second public key wherein said second public key is associated with said second data processing device. .Iaddend..Iadd.40. The method of claim 39 wherein said first message includes a first certificate, the first certificate verifiable by a certificate authority and said second message includes a second certificate, the second certificate verifiable by a certificate authority.

Claim 37

.Iaddend..Iadd.41. A method for establishing a secure data communications exchange between a first data processing device and a second data processing device comprising the steps of: transmitting a first message to said second data processing device, said first message including authenticatable identification information corresponding to the identity of said first data processing device and including information identifying encryption algorithms supported by said first data processing device; and receiving a second message from said second data processing device, said second message including authenticatable identification information corresponding to the identity of said second data processing device and including information identifying at least a selected one of said encryption algorithms which is supported by said second data processing device. .Iaddend..Iadd.42. A method for establishing a secure data communications exchange between a first data processing device and a second data processing device comprising the steps of: receiving a first message from said first data processing device, said first message including authenticatable identification information corresponding to the identity of said first data processing device and including information identifying encryption algorithms supported by said first data processing device; and transmitting a second message to said first data processing device, said second message including authenticatable identification information corresponding to the identity of said second data processing device and including information identifying at least a selected one of said encryption algorithms which is supported by said second data processing device. .Iaddend..Iadd.43. An apparatus for providing a secure data transfer between a first data processing device and a second data processing device comprising: message generating circuitry for assembling a first message including authenticatable identification information corresponding to the identity of said first data processing device including information identifying encryption algorithms supported by said first data processing device; a transmission circuit in communication with said message generating circuit for transmitting said first message to said data processing device; and receiving circuitry for receiving a second message from said second data processing device, said second message including authenticatable identification information corresponding to the identity of said second data processing device and including information identifying at least a selected one of said encryption algorithms which is supported by said second data processing device. .Iaddend.

Claim 38

.Iaddend..Iadd.41. A method for establishing a secure data communications exchange between a first data processing device and a second data processing device comprising the steps of: transmitting a first message to said second data processing device, said first message including authenticatable identification information corresponding to the identity of said first data processing device and including information identifying encryption algorithms supported by said first data processing device; and receiving a second message from said second data processing device, said second message including authenticatable identification information corresponding to the identity of said second data processing device and including information identifying at least a selected one of said encryption algorithms which is supported by said second data processing device. .Iaddend..Iadd.42. A method for establishing a secure data communications exchange between a first data processing device and a second data processing device comprising the steps of: receiving a first message from said first data processing device, said first message including authenticatable identification information corresponding to the identity of said first data processing device and including information identifying encryption algorithms supported by said first data processing device; and transmitting a second message to said first data processing device, said second message including authenticatable identification information corresponding to the identity of said second data processing device and including information identifying at least a selected one of said encryption algorithms which is supported by said second data processing device. .Iaddend..Iadd.43. An apparatus for providing a secure data transfer between a first data processing device and a second data processing device comprising: message generating circuitry for assembling a first message including authenticatable identification information corresponding to the identity of said first data processing device including information identifying encryption algorithms supported by said first data processing device; a transmission circuit in communication with said message generating circuit for transmitting said first message to said data processing device; and receiving circuitry for receiving a second message from said second data processing device, said second message including authenticatable identification information corresponding to the identity of said second data processing device and including information identifying at least a selected one of said encryption algorithms which is supported by said second data processing device. .Iaddend.