Method and system for authentication with side-channel attack protection using pre-calculated ciphers
AssigneeNXP B.V.
InventorJuergen Nowottnick
Life of this patent
Estimating the term…
Abstract
Embodiments of an authentication system and a method for authentication using ciphers are described. In the system and method, cryptographic calculations of an encryption algorithm are executed at a base station, in a determined secure environment, to produce a pre-calculated cipher for a subsequent authentication process. The pre-calculated cipher is then used to transmit an authentication request message from the base station and validation of an authentication response message for the subsequent authentication.
Claims20
A method for authentication using ciphers, the method comprising:
- in a determined secure environment, executing cryptographic calculations of an encryption algorithm at a base station to produce a pre-calculated cipher for a subsequent authentication process;
- storing the pre-calculated cipher in a nonvolatile storage device at the base station;
- in response to a trigger event, transmitting an authentication request message of an authentication process from the base station, the authentication request message including an interrogation signature cipher based on the pre-calculated cipher;
- receiving an authentication response message from a responding device at the base station, the authentication response message including a response signature cipher;
- validating the authentication response message at the base station to determine if the authentication process has been successful;
- and
- after the authentication response message has been successfully validated, executing additional cryptographic calculations at the base station to produce a next pre-calculated cipher for a next authentication process.
A wireless authentication system comprising:
- a transponder to transmit and receive information;
- and
- a base station to transmit and receive information, the base station being configured to:
- in a determined secure environment, execute cryptographic calculations of an encryption algorithm to produce a pre-calculated cipher for a subsequent authentication process;
- store the pre-calculated cipher in a nonvolatile storage device at the base station;
- in response to a trigger event, transmit an authentication request message of an authentication process, the authentication request message including an interrogation signature cipher based on the pre-calculated cipher;
- receive an authentication response message from a responding device, the authentication response message including a response signature cipher;
- validating the authentication response message at the base station to determine if the authentication process has been successful;
- and
- after the authentication response message has been successfully validated, executing additional cryptographic calculations at the base station to produce a next pre-calculated cipher for a next authentication process.
A method for authentication using ciphers, the method comprising:
- in a determined secure environment, executing cryptographic calculations of an encryption algorithm using a random number at a base station to produce a pre-calculated cipher for a subsequent authentication process;
- storing the pre-calculated cipher in a nonvolatile storage device at the base station;
- in response to a trigger event, transmitting an authentication request message of an authentication process from the base station, the authentication request message including an interrogation signature cipher that is a portion of the pre-calculated cipher;
- receiving an authentication response message from a responding device at the base station, the authentication response message including a response signature cipher;
- validating the authentication response message at the base station to determine if the authentication process has been successful;
- and
- after the authentication response message has been successfully validated, executing additional cryptographic calculations at the base station to produce a next pre-calculated cipher for a next authentication process.
Dependencies are inferred from the claim text.