US 11,108,548 B2Granted

Authentication method, server, terminal, and gateway

AssigneeHuawei Technologies Co., Ltd.

InventorsYang Xiao, Yan Liu

Life of this patent

Estimating the term…

Loading patent…

Abstract

The method provided in the embodiments of this application includes: obtaining, by a server, a first key (Ksm) shared with a gateway; receiving, by the server, an encrypted first random factor (Rand-M-Encry), a first data digest (Data-Hash), and encrypted first data (Data-Encry) that are sent by a terminal; decrypting, by the server, the Rand-M-Encry by using the Ksm, to obtain a second random factor (Rand-M′); performing, by the server, an operation on the Rand-M′ and Kpsa-xi by using a second preset algorithm, to generate a third key (K′sx); decrypting, by the server, the Data-Encry by using the K′sx, to obtain second data (Data′); performing, by the server, an operation on the K′sx and the Data′ based on a first preset algorithm to obtain a second data digest (Data-Hash′); and if the Data-Hash′ is the same as the Data-Hash, determining, by the server, that authentication of the terminal succeeds.

Claims9

Dependent claims

An authentication method, comprising:

obtaining, by a server, a first key (Ksm) shared with a gateway;
receiving, by the server, an encrypted first random factor (Rand-M-Encry), a first data digest (Data-Hash), and encrypted first data (Data-Encry) that are sent by a terminal, wherein the Rand-M-Encry is generated by the gateway by encrypting a first random factor (Rand-M) by using the Ksm, the Data-Hash is obtained by the terminal by performing an operation on a second key (Ksx) and first data (Data) based on a first preset algorithm, the Data-Encry is obtained by encrypting the Data by using the Ksx, the Ksx is generated by performing an operation on the Rand-M and a key (Kpsa-xi) that is shared by the terminal with the server by using a second preset algorithm, the Kpsa-xi, the first preset algorithm, and the second preset algorithm are preconfigured by the terminal and the server, and the Rand-M is generated by the gateway and sent to the terminal;
decrypting, by the server, the Rand-M-Encry by using the Ksm, to obtain a second random factor (Rand-M′);
performing, by the server, an operation on the Rand-M′ and the Kpsa-xi by using the second preset algorithm, to generate a third key (K′sx);
decrypting, by the server, the Data-Encry by using the K′sx, to obtain second data (Data′);
performing, by the server, an operation on the K′sx and the Data′ based on the first preset algorithm to obtain a second data digest (Data-Hash′);
and
if the Data-Hash′ is the same as the Data-Hash, determining, by the server, that authentication of the terminal succeeds.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/256,129Filed 24 Jan 2019 · continuation
Priority: CN 201610635676.74 Aug 2016
Published: US 2019/0173670 A16 Jun 2019
Granted: 31 Aug 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

H04L 9/0819
Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for…:…
G16Y 30/10
IoT infrastructure: security thereof
H04L 9/06
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: the encryption apparatus…
H04L 9/0631
Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation: substitution permutation…