# US 2017/0257367 A1 · Electronic devices and method for performing authentication between electronic devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2017/0257367 A1 - Document ID: US20170257367A1 - Status: Published application - Kind: A1 - Application number: 15/360,950 - Filed: 2016-11-23 - Published: 2017-09-07 - Earliest claimed: 2016-03-07 - Assignees: Electronics and Telecommunications Research Institute - Applicants: Electronics and Telecommunications Research Institute - Inventors: Jin-Hee HAN; Dae-Won KIM; Young-Sae KIM; Yong-Hyuk MOON; Seung-Yong YOON; Jae-Deok LIM; Jeong-Nyeo KIM; Yong-Sung JEON - Web page: https://patentgrep.com/patent/US20170257367A1 ## CPC - H04L 63/0869: {for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - H04W 12/06: Authentication - H04W 84/18: Self-organising networks, e.g. ad-hoc networks or sensor networks - H04W 12/71: Hardware identity - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Disclosed herein is an electronic device including a message creation unit for creating an authentication message that includes hardware information and security level information for mutual authentication with an additional electronic device; a communication unit for sending the authentication message to the additional electronic device and receiving an authentication message of the additional electronic device from the additional electronic device; an authentication algorithm selection unit for selecting an authentication algorithm for mutual authentication with the additional electronic device based on hardware information and security level information of the additional electronic device, which are included in the authentication message of the additional electronic device; and an authentication processing unit for performing a mutual authentication process using the selected authentication algorithm. ## Claims ### Claim 1 An electronic device, comprising: a message creation unit for creating an authentication message including hardware information and security level information for mutual authentication with an additional electronic device; a communication unit for sending the authentication message to the additional electronic device and receiving an authentication message of the additional electronic device from the additional electronic device; an authentication algorithm selection unit for selecting an authentication algorithm for mutual authentication with the additional electronic device based on hardware information and security level information of the additional electronic device, which are included in the authentication message of the additional electronic device; and an authentication processing unit for performing a mutual authentication process using the selected authentication algorithm. ### Claim 2 (depends on 1) The electronic device of claim 1, wherein the authentication message created by the message creation unit further includes at least one of information about a random number for mutual authentication with the additional electronic device and identification information of the electronic device. ### Claim 3 (depends on 1) The electronic device of claim 1, wherein the communication unit sends information about the selected authentication algorithm to the additional electronic device. ### Claim 4 (depends on 1) The electronic device of claim 1, wherein the hardware information includes information about characteristics of resources of the electronic device or IoT device type information of the electronic device. ### Claim 5 (depends on 4) The electronic device of claim 4, wherein the hardware information is defined differently depending on the information about the characteristics of the resources of the electronic device or the IoT device type information of the electronic device. ### Claim 6 (depends on 1) The electronic device of claim 1, wherein the security level information has different values depending on a security level of the electronic device. ### Claim 7 (depends on 6) The electronic device of claim 6, wherein the security level information is hierarchically defined depending on the security level of the electronic device. ### Claim 8 An electronic device, comprising: a message creation unit for creating an authentication message including hardware information and security level information for mutual authentication with an additional electronic device; a communication unit for sending the authentication message to the additional electronic device and receiving an authentication message of the additional electronic device and information about a mutual authentication algorithm selected by the additional electronic device from the additional electronic device; an authentication algorithm selection unit for selecting an authentication algorithm for mutual authentication with the additional electronic device based on hardware information and security level information of the additional electronic device, which are included in a message of the additional electronic device; and an authentication processing unit for performing a mutual authentication process by comparing the selected authentication algorithm with the information about the mutual authentication algorithm received from the additional electronic device. ### Claim 9 (depends on 8) The electronic device of claim 8, wherein the authentication processing unit performs the mutual authentication process when the selected authentication algorithm matches a mutual authentication algorithm based on the information about the mutual authentication algorithm received from the additional electronic device. ### Claim 10 (depends on 8) The electronic device of claim 8, wherein the authentication processing unit sends a message indicating a mismatch between the selected authentication algorithm and a mutual authentication algorithm to the additional electronic device through the communication unit when the selected authentication algorithm is not identical to the mutual authentication algorithm based on the information about the mutual authentication algorithm received from the additional electronic device. ### Claim 11 (depends on 10) The electronic device of claim 10, wherein the authentication processing unit stops performance of the mutual authentication process when a number of cases in which the selected authentication algorithm is not identical to an authentication algorithm, based on mutual authentication algorithm information repeatedly received from the additional electronic device, is greater than a predetermined number. ### Claim 12 A method for mutual authentication between electronic devices, comprising: creating, by a first electronic device, a first authentication message including first hardware information and first security level information for mutual authentication and sending, by the first electronic device, the first authentication message to a second electronic device; creating, by the second electronic device, a second authentication message including second hardware information and second security level information for mutual authentication and sending, by the second electronic device, the second authentication message to the first electronic device; selecting, by the first electronic device, a first authentication algorithm for mutual authentication with the second electronic device based on the second hardware information and the second security level information; selecting, by the second electronic device, a second authentication algorithm for mutual authentication with the first electronic device based on the first hardware information and the first security level information; sending, by the first electronic device, information about the selected first authentication algorithm to the second electronic device; and performing, by the second electronic device, a mutual authentication process by comparing the information about the first authentication algorithm with information about the selected second authentication algorithm. ### Claim 13 (depends on 12) The method of claim 12, wherein the first authentication message further includes at least one of information about a random number for mutual authentication with the second electronic device and identification information of the first electronic device, and the second authentication message further includes at least one of information about a random number for mutual authentication with the first electronic device and identification information of the second electronic device. ### Claim 14 (depends on 12) The method of claim 12, further comprising: performing, by the first electronic device, the mutual authentication process using the selected first authentication algorithm. ### Claim 15 (depends on 12) The method of claim 12, wherein performing, by the second electronic device, the mutual authentication process is configured to perform the mutual authentication process when the information about the selected second authentication algorithm matches the information about the first authentication algorithm. ### Claim 16 (depends on 12) The method of claim 12, wherein performing, by the second electronic device, the mutual authentication process is configured such that, when the information about the selected second authentication algorithm is not identical to the information about the first authentication algorithm, a message indicating a mismatch between the two pieces of information is sent to the first electronic device. ### Claim 17 (depends on 16) The method of claim 16, wherein, when the first electronic device receives the message indicating the mismatch from the second electronic device, selecting the first authentication algorithm is repeatedly performed, but an authentication algorithm other than the first authentication algorithm is selected. ### Claim 18 (depends on 17) The method of claim 17, wherein performing, by the second electronic device, the mutual authentication process is configured to stop the mutual authentication process when a number of cases in which information about the newly selected authentication algorithm is not identical to the information about the second authentication algorithm is greater than a predetermined number.