Identity based authenticated key agreement protocol
AssigneeAlcatel-Lucent USA Inc.
InventorGanapathy S. Sundaram
Life of this patent
Estimating the term…
Abstract
A key agreement protocol between a first party and a second party comprises the following steps from the first party perspective. An encrypted first random key component is directed to the second party, the first random key component having been computed at the first party and encrypted using a public key of the second party in accordance with an identity based encryption operation. An encrypted second random key component corresponding to the second party is received. The encrypted second random key component is decrypted using a private key of the first party. A session key for use in subsequent communications between the first party and the second party is computed based at least in part on the second random key component.
Claims20
A method for performing identity based encryption adapted to a communications session between a computer system of a first party (the first party) and a computer system of a second party (the second party), the method at the first party comprising the steps of:
- sending an encrypted first random key component directed to the second party, the first random key component having been computed at the first party and encrypted using a public key of the second party in accordance with an identity based encryption operation;
- receiving an encrypted second random key component corresponding to the second party;
- decrypting the encrypted second random key component using a private key of the first party;
- and
- computing a session key for use in subsequent communications between the first party and the second party based at least in part on the second random key component.
An apparatus for performing identity based encryption adapted to a communications session between a computer system of a first party (the first party) and a computer system of a second party (the second party), comprising:
- a processor and a memory communicatively connected to the processor, the processor configured to:
- send an encrypted first random key component directed to the second party, the first random key component having been computed at the first party and encrypted using a public key of the second party in accordance with an identity based encryption operation;
- receive an encrypted second random key component corresponding to the second party;
- decrypt the encrypted second random key component using a private key of the first party;
- and
- compute a session key for use in subsequent communications between the first party and the second party based at least in part on the second random key component.
A method for performing identity based encryption adapted to a communications session between a computer system of a first party (the first party) and a computer system of a second party (the second party), the method at the second party comprising the steps of:
- receiving an encrypted first random key component corresponding to the first party;
- decrypting the encrypted first random key component using a private key of the second party;
- sending an encrypted second random key component directed to the first party, the second random key component having been computed at the second party and encrypted using a public key of the first party in accordance with an identity based encryption operation;
- and
- computing a session key for use in subsequent communications between the first party and the second party based at least in part on the first random key component.
An apparatus for performing identity based encryption adapted to a communications session between a computer system of a first party (the first party) and a computer system of a second party (the second party), comprising:
- a processor and a memory communicatively connected to the processor, the processor configured to:
- receive an encrypted first random key component corresponding to the first party;
- decrypt the encrypted first random key component using a private key of the second party;
- send an encrypted second random key component directed to the first party, the second random key component having been computed at the second party and encrypted using a public key of the first party in accordance with an identity based encryption operation;
- and
- compute a session key for use in subsequent communications between the first party and the second party based at least in part on the first random key component.
Dependencies are inferred from the claim text.