Method and System For Securing In-Vehicle Ethernet Links
AssigneeSynaptics Incorporated
InventorsGuy Hutchison, Zubin Shah, Kamal Dalmia
Life of this patent
Estimating the term…
Abstract
A method and system for securing in-vehicle ethernet links are disclosed. According to one embodiment, a method comprises receiving from an authenticator, via an insecure channel, a public key of the authenticator, a random number, and a challenge. A private key of the peer that was supplied to the peer is accessed from local storage at the peer. A state machine computes a session key for the peer, based on the random number, the public key of the authenticator, and the private key of the peer. The state machine computes a peer response to the challenge using the session key for the peer and a symmetric cipher function.
Claims31
A method, comprising:
- receiving from an authenticator, via an insecure channel, a public key of the authenticator, a random number, and a challenge;
- accessing from local storage at the peer a private key of the peer that was supplied to the peer;
- computing using a state machine a session key for the peer, based on the random number, the public key of the authenticator, and the private key of the peer;
- and
- computing on the state machine a peer response to the challenge using the session key for the peer and a symmetric cipher function.
A method, comprising:
- transmitting to the peer, via an insecure channel, a public key of the authenticator, a random number, and a challenge;
- receiving from the peer, via the insecure channel, a peer response to the challenge;
- computing a session key for the authenticator, based on the random number, a public key of the peer, and the private key of the authenticator;
- computing via a symmetric cipher function an authenticator response to the challenge using the session key for the authenticator;
- and
- determining the peer as authentic if the authenticator response and the peer response are identical and, otherwise, determining that peer authentication failed.
A system, comprising:
- an authenticator that sends via an insecure channel, a public key of the authenticator, a random number, and a challenge;
- local storage at the peer that includes a private key of the peer;
- and
- a state machine that computes a session key for the peer, based on the random number, the public key of the authenticator, and the private key of the peer, wherein the state machine computes a peer response to the challenge using the session key for the peer and a symmetric cipher function.
A system, comprising:
- an authenticator;
- a peer in communication with the authenticator via an insecure channel,
- a public key of the authenticator,
- a random number, and a challenge;
- a peer response to the challenge received from the peer, via the insecure channel;
- a session key for the authenticator based on the random number, a public key of the peer, and the private key of the authenticator;
- and
- an authenticator response to the challenge using the session key for the authenticator;
- wherein the peer is determined as authentic if the authenticator response and the peer response are identical.
Dependencies are inferred from the claim text.