Authentication method using symmetric authenticated key exchange and asymmetric authenticated key exchange
OwnerDae Hun Nyang, Byung Ho Chunginventors
Life of this patent
Estimating the term…
Abstract
A user authentication method for authenticating a user on a communication network containing a user computer and an authentication server guarantees mathematical security in an offline dictionary attack, systematically converts a symmetric authenticated key exchange protocol into an asymmetric authenticated key exchange protocol, and causes little increase in the amount of calculation and traffic.
Claims3
A method for authenticating a user on a communication network containing a user computer and an authentication server, comprising the steps of:
- a) setting up a variety of system parameters needed to perform an authentication process;
- b) enabling a user to select an arbitrary random number (r) based on the setup system parameters, and transmitting to the authentication server a message composed of a test number A=Γ(r) being a result of applying a one-way function to a user ID and the random number (r);
- c) after performing the step (b), performing a symmetric authenticated key exchange operation between the user computer and the authentication server, authenticating the authentication server, and allowing both the authentication server and the user computer to share a temporary session key (tsk);
- d) after performing the step (c), enabling the authentication server to create a random number (t), and transmitting the random number (t) to the user computer;
- e) enabling the user computer to create a question number (c) using the random number (t) and the temporary session key (tsk), calculating a witness number B using the question number (c), and transmitting the witness number B to the authentication server;
- f) enabling the authentication server to verify the witness number B using the arbitrary session key (tsk), the test number A, and a KV (Key Verifier), etc;
- and
- g) if successful verification is performed in the step (f), enabling the authentication server and the user computer each to calculate a session key (sk).
A computer-readable recording medium having a program in a computer, said program comprising the steps of:
- a) setting up a variety of system parameters needed to perform an authentication process;
- b) enabling a user to select an arbitrary random number (r) based on the setup system parameters, and transmitting to the authentication server a message composed of a test number A=Γ(r) being a result of applying a one-way function to a user ID and the random number (r);
- c) after performing the step (b), performing a symmetric authenticated key exchange operation between the user computer and the authentication server, authenticating the authentication server, and allowing both the authentication server and the user computer to share a temporary session key (tsk);
- d) after performing the step (c), enabling the authentication server to create a random number (t), and transmitting the random number (t) to the user computer;
- e) enabling the user computer to create a question number (c) using the random number (t) and the temporary session key (tsk), calculating a witness number B using the question number (c), and transmitting the witness number B to the authentication server;
- f) enabling the authentication server to verify the witness number B using the arbitrary session key (tsk), the test number A, and a KV (Key Verifier), etc;
- and
- g) if successful verification is performed in the step (f), enabling the authentication server and the user computer each to calculate a session key (sk).
Dependencies are inferred from the claim text.