Process for challenge response authentication of a secure element (SE) in a micro controller unit

A challenge-response authentication process of a secure element in a micro controller unit devoid of a random number generator, the process comprising the following steps conducted by the secure element:

• randomly generating at least one random datum, wherein said at least one random datum comprises a set of random data,
• sending the random datum to the micro controller unit,
• receiving a challenge datum specific to the micro controller unit and generated by the micro controller unit from the random datum sent,
• generating a response datum from the received challenge datum,
• sending of the response datum to the micro controller unit in order to determine an authentication result as a function of the response datum sent,
• wherein generating the challenge datum comprises:
• selecting a first random datum and a second random datum data in the set of random data, and
• encrypting the first random datum by using the second random datum as an encryption key so as to produce an encrypted random datum, wherein the challenge datum depends on the encrypted random datum.

A micro controller unit devoid of a random number generator, wherein the micro controller unit comprises a communication interface with a secure element, and further comprises at least one processor configured, during an authentication of the secure element by challenge-response in the micro controller unit, to:

• receive, via the communication interface, at least one random datum generated randomly by the secure element, wherein said at least one random datum comprises a set of random data,
• generate a challenge datum specific to the micro controller unit from the received random datum,
• control sending by the communication interface of the generated challenge datum to the secure element,
• receive, via the communication interface, a response datum generated by the secure element from the challenge datum,
• determine an authentication result as a function of the received response datum,
• wherein generating the challenge datum comprises:
• selecting a first random datum and a second random datum data in the set of random data, and
• encrypting the first random datum by using the second random datum as an encryption key so as to produce an encrypted random datum, wherein the challenge datum depends on the encrypted random datum.

A secure element comprising a communication interface with a micro controller unit devoid of a random number generator, wherein the secure element comprises at least one processor configured, during an authentication of the secure element by challenge-response in the micro controller unit, to:

• randomly generate at least one random datum, wherein said at least one random datum comprises a set of random data,
• control sending of the random datum to the micro controller unit by the communication interface,
• receive a challenge datum specific to the micro controller unit and generated by the micro controller unit from the sent random datum,
• generate a response datum from the received challenge datum,
• control sending by the communication interface of the response datum to the micro controller unit in order to determine an authentication result as a function of the sent response datum,
• wherein venerating the challenge datum comprises:
• selecting a first random datum and a second random datum data in the set of random data, and
• encrypting the first random datum by using the second random datum as an encryption key so as to produce an encrypted random datum, wherein the challenge datum depends on the encrypted random datum.

A non-transitory computer-readable medium comprising code instructions for causing a micro controller unit devoid of a random number generator to perform a challenge-response authentication process of a secure element in the micro controller unit, the process comprising:

• receiving at least one random datum generated randomly by the secure element, wherein said at least one random datum comprises a set of random data,
• generating a challenge datum specific to the micro controller unit from the received random datum,
• sending the generated challenge datum to the secure element,
• receipt of a response datum generated by the secure element from the challenge datum,
• determining an authentication result as a function of the received response datum,
• wherein generating the challenge datum comprises:
• selecting a first random datum and a second random datum data in the set of random data, and
• encrypting the first random datum by using the second random datum as an encryption key so as to produce an encrypted random datum, wherein the challenge datum depends on the encrypted random datum.

A non-transitory computer-readable medium comprising code instructions for causing a secure element to perform a challenge-response authentication process of a secure element in a micro controller unit devoid of a random number generator, the process comprising:

• randomly generating at least one random datum, wherein said at least one random datum comprises a set of random data,
• sending the random datum to the micro controller unit,
• receiving a challenge datum specific to the micro controller unit and generated by the micro controller unit from the random datum sent,
• generating a response datum from the received challenge datum,
• sending of the response datum to the micro controller unit in order to determine an authentication result as a function of the response datum sent,
• wherein generating the challenge datum comprises:
• selecting a first random datum and a second random datum data in the set of random data, and
• encrypting the first random datum by using the second random datum as an encryption key so as to produce an encrypted random datum, wherein the challenge datum depends on the encrypted random datum.