Distribution and verification of transaction integrity keys
AssigneeHewlett-Packard Enterprise Developmet LP
InventorsLiqun Chen, Nigel Edwards
Life of this patent
Estimating the term…
Abstract
The present disclosure relates to generating an identifier, an encrypted value that is an original value encrypted, and a Message Authentication Code (MAC) at a server device, and to generating a message including a message header and a message body, said message header including the identifier and the MAC, and said message body including the encrypted value, and said that the MAC key used to compute the message authentication code is included in the original value to be encrypted, and further relates to transmitting the message to a client device.
Claims15
A method executed at a server device for distribution and verification of transaction integrity keys, comprising:
- generating a Transaction Integrity Key (TIK);
- generating an identifier which is unique for a cryptographic key (K), wherein K has been previously shared with a predetermined client device;
- generating an encrypted value by encrypting the TIK based on K and the identifier;
- generating a Message Authentication Code (MAC), wherein a MAC key comprises the TIK and MAC data includes the encrypted value and the identifier;
- generating a message including a message header and a message body, said message header including the identifier and the MAC, and said message body including the encrypted value;
- and
- transmitting the message to the client device.
A method executed at a client device for distribution and verification of transaction integrity keys, comprising:
- receiving a message from a server device;
- retrieving an encrypted value from the message body and an identifier, and a Message Authentication Code (MAC) from the message header;
- generating a Transaction Integrity Key (TIK) based on the encrypted value, on the identifier and on a cryptographic key (K), wherein K has been previously shared with the server;
- computing the MAC based on the TIK, and comparing the result to the MAC in the message header;
- and
- accepting the TIK as authentic if the result matches the received MAC.
A server device for distribution and verification of transaction integrity keys, comprising:
- a key generator component to generate a Transaction Integrity Key (TIK) and to generate an identifier which is unique for a cryptographic key (K), wherein K has been previously shared by the server device with a predetermined client device;
- a key encryption component to generate an encrypted value by encrypting the TIK based on K and the identifier, and to generate a message authentication code (MAC) based on the TIK, the encrypted value and the identifier;
- a message generator component to generate a message including a message header and a message body, said message header including the identifier and the MAC, and said message body including the encrypted value;
- and
- a transmitter component to transmit the message to the client device.
Dependencies are inferred from the claim text.