US 11,770,242 B1Granted

Method for forming virtual private network based on post-quantum cryptography and virtual private network operating system performing same

AssigneeNORMA Inc.

InventorsHyunchul Jung, Chang Nyoung Song

Life of this patent

Estimating the term…

Loading patent…

Abstract

The technical idea of the present invention relates to a method for forming a virtual private network based on post-quantum cryptography and a virtual private network operating system performing the same. The method for forming a virtual private network performing by a first device to form a virtual private network with a second device according to an embodiment of the present invention comprises the steps of: requesting a handshake for forming the virtual private network; receiving a signature and a public key; authenticating the second device by using the signature; generating a symmetric key by using the public key; and performing virtual private network communication by using the symmetric key, wherein the public key is generated by using at least one key vector corresponding to a grid.

Claims7

Dependent claims

A method for forming a virtual private network performed by a first device which includes a processor to form the virtual private network with a second device, the method comprising the steps of:

requesting, by the processor, a handshake for forming the virtual private network;
receiving, by the processor, a signature and a public key;
authenticating, by the processor, the second device by using the signature;
generating, by the processor, a symmetric key by using the public key;
and
performing, by the processor, virtual private network communication by using the symmetric key,
wherein generating the symmetric key by using the public key comprises the steps of:
generating, by the processor, a key message by using a random number generator;
generating, by the processor, capsule random value by hashing the key message;
generating, by the processor, a key capsule by capsuling the key message and the capsule random value by using the public key;
transmitting, by the processor, the key capsule;
and
generating, by the processor, a symmetric key by using the key capsule,
wherein generating the symmetric key by using the key capsule comprises the steps of:
generating, by the processor, a prekey through a hash for the key message and the public key;
generating, by the processor, key hash value by hashing the prekey and the key capsule;
and
generating, by the processor, the key hash value as the symmetric key,
wherein the public key includes a key value which is determined by values of a second key vector, which is generated by a lattice-based algorithm, added to values obtained by multiplying a first key vector, which is generated by the lattice-based algorithm, and a key matrix.

16 more elements

A method for forming a virtual private network performed by a second device which includes a processor to form the virtual private network with a first device, the method comprising the steps of:

generating, by the processor, a public key and a private key;
requesting, by the processor, a handshake from the first device;
performing, by the processor, a signature by using an authenticate message;
transmitting, by the processor, the signature and the public key to the first device;
and
generating, by the processor, a symmetric key by using a key capsule received from the first device,
wherein the generating the public key and private key comprises the steps of:
defining, by the processor, a key matrix corresponding to a random polynomial ring;
sampling, by the processor, a first key vector generated by a grid-based algorithm and a second key vector having a first distance with the first key vector;
and
generating, by the processor, the public key and the private key by using a key value which is determined by values in a second key vector, which is generated by a lattice-based algorithm, added to values obtained by multiplying a first key vector, which is generated by the lattice-based algorithm, and the key matrix,
wherein the generating a symmetric key by using the key capsule received from the first device comprises the steps of:
extracting, by the processor, a key message by opening the key capsule by using the private key;
generating, by the processor, opened random value through hash for the key message;
generating, by the processor, verification capsule by capsuling the key message and the opened random value as the public key;
confirming, by the processor, if the verification capsule and the key capsule are the same;
generating, by the processor, a prekey by hashing the key message and the public key if the verification capsule and the key capsule are the same;
and
generating, by the processor, a symmetric key by hashing the key capsule and the prekey.

16 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/080,686Filed 13 Dec 2022
Priority: KR 10-2022-01108951 Sep 2022
Granted: 26 Sep 2023
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 9/0825
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…
H04L 9/40
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: network security protocols
H04L 9/0869
Generation of secret information including derivation or calculation of cryptographic keys or passwords: involving random numbers or seeds
H04L 9/14
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: using a plurality of keys…