# US 2023/0058053 A1 · Methods for performing an authentication procedure and for message exchange

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2023/0058053 A1
- Document ID: US20230058053A1
- Status: Published application
- Kind: A1
- Application number: 17/797,335
- Filed: 2020-02-03
- Published: 2023-02-23
- Earliest claimed: 2020-02-03
- Assignees: Telefonaktiebolaget LM Ericsson (publ)
- Applicants: Telefonaktiebolaget Lm Ericsson (Publ)
- Inventors: Alexander Hunt; Håkan Englund; Per Ståhl; Andreas Kristensson
- Web page: https://patentgrep.com/patent/US20230058053A1

## CPC

- H04L 9/3271: {using challenge-response}
- H04L 9/0852: {Quantum cryptography (transmission systems employing electromagnetic waves other than radio waves, e.g. light, infrared H04B10/00; wavelength-division multiplex systems H04J14/02; WDM arrangements H04J14/03)}
- H04L 9/3215: {using a plurality of channels (network architectures or network communication protocols using different networks H04L63/18)}
- H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC}
- H04L 9/3247: {involving digital signatures}
- H04W 12/06: Authentication
- H04W 12/106: Packet or message integrity
- H04L 2209/84: Vehicles
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method (100) for performing an authentication procedure between a verifying device and a responding device is disclosed, the verifying and responding devices being provisioned with security credentials. The method, performed by the verifying device, comprises generating an authentication challenge (110), delivering the authentication challenge to the responding device (120), receiving an authentication response from the responding device (130), and verifying the authentication response (140). According to the method, at least one of the authentication challenge or authentication response is encoded as a sequence of qubits and delivered over a quantum communication channel between the verifying device and the responding device (120A, 120B, 130A, 130B). Also disclosed are methods for delivering and receiving a message over a quantum communication channel, and devices for performing authentication and message exchange methods.

## Claims

### Claim 1

A method for performing an authentication procedure between a verifying device and a responding device, wherein the verifying and responding devices are provisioned with security credentials, the method, performed by the verifying device, comprising:
generating an authentication challenge;
delivering the authentication challenge to the responding device;
receiving an authentication response from the responding device; and
verifying the authentication response;
wherein at least one of the authentication challenge or authentication response is encoded as a sequence of qubits and delivered over a quantum communication channel between the verifying device and the responding device.

### Claim 2 (depends on 1)

The method of claim 1, wherein the other of the authentication challenge or authentication response is delivered over a non-quantum communication channel between the verifying device and the responding device.

### Claim at position 3

3-4. (canceled)

### Claim 5 (depends on 1)

The method of claim 1, further comprising:
verifying that a probability that the at least one of the authentication challenge or authentication response that is encoded as a sequence of qubits and delivered over a quantum communication channel between the verifying device and the responding device has been relayed by a third party is below a threshold value.

### Claim 6 (depends on 1)

The method of claim 1, wherein the authentication challenge is encoded as a sequence of qubits and delivered over a quantum communication channel between the verifying device and the responding device; and wherein delivering the authentication challenge to the responding device comprises:
encoding the authentication challenge as a sequence of qubits;
delivering the encoded authentication challenge over a quantum communication channel to the responding device;
receiving a parameter and a first signature, which is based on the parameter, from the responding device;
verifying the first signature; and
if the verification of the first signature is successful:
generating a second signature based on the received parameter and on message symbols of the authentication challenge; and
sending the authentication challenge message symbols and the second signature to the responding device.

### Claim 7 (depends on 6)

The method of claim 6, wherein receiving a parameter and a first signature, which is based on the parameter, from the responding device comprises receiving the parameter and the first signature over a non-quantum communication channel.

### Claim 8 (depends on 6, 7)

The method of claim 6 or 7, wherein sending the authentication challenge message symbols and the second signature to the responding device comprises sending the authentication challenge message symbols and the second signature over a non-quantum communication channel.

### Claim at position 8

9-45. (canceled)

### Claim 46

A method for performing an authentication procedure between a verifying device and a responding device, wherein the verifying and responding devices are provisioned with security credentials, the method, performed by the responding device, comprising:
receiving an authentication challenge from the verifying device;
generating an authentication response based on the authentication challenge; and
delivering the authentication response to the verifying device;
wherein at least one of the authentication challenge or authentication response is encoded as a sequence of qubits and delivered over a quantum communication channel between the verifying device and the responding device.

### Claim 47 (depends on 46)

The method of claim 46, wherein the other of the authentication challenge or authentication response is delivered over a non-quantum communication channel between the verifying device and the responding device.

### Claim 48 (depends on 46)

The method of claim 46, wherein the sequence of qubits comprises a sequence of quantum states of one or more photons.

### Claim 49

(canceled)

### Claim 50 (depends on 46)

The method of claim 46, further comprising:
verifying that a probability that the at least one of the authentication challenge or authentication response that is encoded as a sequence of qubits and delivered over a quantum communication channel between the verifying device and the responding device has been relayed by a third party is below a threshold value.

### Claim 51 (depends on 46)

The method of claim 46, wherein the authentication response is encoded as a sequence of qubits and delivered over a quantum communication channel between the verifying device and the responding device; and wherein delivering the authentication response to the verifying device comprises:
encoding the authentication response as a sequence of qubits;
delivering the encoded authentication response over a quantum communication channel to the verifying device;
receiving a parameter and a first signature, which is based on the parameter, from the verifying device;
verifying the first signature; and
if the verification of the first signature is successful:
generating a second signature based on the received parameter and on message symbols of the authentication response; and
sending the authentication response message symbols and the second signature to the verifying device.

### Claim 52 (depends on 51)

The method of claim 51, wherein receiving a parameter and a first signature, which is based on the parameter, from the verifying device comprises receiving the parameter and the first signature over a non-quantum communication channel.

### Claim 53 (depends on 51)

The method of claim 51, wherein sending the authentication response message symbols and the second signature to the verifying device comprises sending the authentication response message symbols and the second signature over a non-quantum communication channel.

### Claim 54 (depends on 51)

The method of claim 51, further comprising:
if verification of the first signature is not successful, terminating the authentication procedure without performing the remaining method steps.

### Claim 55 (depends on 51)

The method of claim 51, wherein a message symbol of the authentication response comprises at least one of:
a value of the authentication response; and
information about how that value was encoded as a qubit.

### Claim 56 (depends on 55)

The method of claim 55, wherein the information about how a value was encoded as a qubit comprises at least one of:
a polarisation basis used with the authentication response value to generate a photon polarisation state;
a polarisation basis used with the authentication response value to generate a photon polarisation state of one of a pair of entangled photons;
a Bell basis used to encode the authentication response value; or
the coherent state used to encode the authentication response value.

### Claim 57 (depends on 51)

The method of claim 51, wherein encoding the authentication response as a sequence of qubits comprises encoding the authentication response as a sequence of photon polarisation states or coherent states of light; and wherein delivering the encoded authentication response over a quantum communication channel to the verifying device comprises transmitting qubits on which the authentication response is encoded to the verifying device.

### Claim 58 (depends on 51)

The method of claim 51, wherein encoding the authentication response as a sequence of qubits comprises encoding the authentication response as a sequence of entangled states of photon pairs; and wherein encoding the authentication response as a sequence of qubits and delivering the encoded authentication response over a quantum communication channel to the verifying device comprises:
generating a sequence of entangled qubit pairs, the qubits of the entangled qubit pairs comprising photons;
transmitting one qubit from each pair to the verifying device and retaining the other qubit from each pair; and
encoding the authentication response onto retained qubits of the entangled photon pairs.

### Claim 59 (depends on 58)

The method of claim 58, wherein encoding the authentication response as a sequence of qubits and delivering the encoded authentication response over a quantum communication channel to the verifying device further comprises:
transmitting the retained qubits onto which the authentication response is encoded to the verifying device.

### Claim at position 23

-90. (canceled)

### Claim 91

A method, performed by a first device, for delivering a message to a second device, wherein the first and second devices are provisioned with security credentials, the method comprising:
encoding the message as a sequence of qubits;
delivering the encoded message over a quantum communication channel to the second device;
receiving a parameter and a first signature, which is based on the parameter, from the second device;
verifying the first signature; and
if the verification of the first signature is successful:
generating a second signature based on the received parameter and on message symbols of the message; and
sending the message symbols and the second signature to the second device.

### Claim 92 (depends on 91)

The method of claim 91, wherein receiving a parameter and a first signature, which is based on the parameter, from the second device comprises receiving the parameter and the first signature over a non-quantum communication channel.

### Claim 93 (depends on 91)

The method of claim 91, wherein sending the message symbols and the second signature to the second device comprises sending the message symbols and the second signature over a non-quantum communication channel.

### Claim 94 (depends on 91)

The method of claim 91, further comprising:
if verification of the first signature is not successful, terminating the method without performing the remaining method steps.

### Claim 95 (depends on 91)

The method of claim 91, wherein a message symbol of the message comprises at least one of:
value of the message; and
information about how that value was encoded as a qubit.

### Claim 96 (depends on 91)

The method of claim 91, wherein encoding the message as a sequence of qubits comprises encoding the message as a sequence of quantum states of one or more photons.

### Claim at position 30

-107. (canceled)

### Claim 108 (depends on 91)

The method of claim 91, further comprising:
detecting a position of the second device;
and wherein delivering the encoded message over a quantum communication channel to the second device comprises directing the delivery of the encoded message towards the detected position of the second device.

### Claim at position 32

-113. (canceled)

### Claim 114

A method for receiving a message from a first device, wherein the method is performed by a second device, and wherein the first and second devices are provisioned with security credentials, the method comprising:
receiving an encoded message from the first device, wherein the encoded message comprises a sequence of qubits and is received over a quantum communication channel to the first device;
estimating the message from the received sequence of qubits;
generating a first signature based on a parameter;
sending the first signature and the parameter to the first device;
receiving from the first device, message symbols of the message and a second signature based on the parameter sent to the first device and on the message symbols of the message;
verifying the second signature; and
if the verification of the second signature is successful:
comparing the estimated message from the received sequence of qubits with the received message symbols; and
if a probability of error between the estimated message and the received message symbols is below a threshold value, determining that the message has been correctly received.

### Claim 115 (depends on 114)

The method of claim 114, further comprising:
if a probability of error between the estimated message and the received message symbols is above a threshold value, determining that a potential intervention by a third party has taken place during the delivery of the encoded message to the second device.

### Claim 116 (depends on 114)

The method of claim 114, wherein sending the first signature and the parameter to the first device comprises sending the first signature and the parameter over a non-quantum communication channel.

### Claim 117 (depends on 114)

The method of claim 114, wherein receiving message symbols of the message and a second signature from the first device comprises receiving the message symbols and the second signature over a non-quantum communication channel.

### Claim at position 37

118-141. (canceled)

### Claim 142

A verifying device for performing an authentication procedure between the verifying device and a responding device, wherein the verifying and responding devices are provisioned with security credentials, the verifying device comprising processing circuitry configured to:
generate an authentication challenge;
deliver the authentication challenge to the responding device;
receive an authentication response from the responding device; and
verify the authentication response;
wherein at least one of the authentication challenge or authentication response is encoded as a sequence of qubits and delivered over a quantum communication channel between the verifying device and the responding device.

### Claim 143

(canceled)

### Claim 144

A responding device for performing an authentication procedure between a verifying device and the responding device, wherein the verifying and responding devices are provisioned with security credentials, the responding device comprising processing circuitry configured to:
receive an authentication challenge from the verifying device;
generate an authentication response based on the authentication challenge; and
deliver the authentication response to the verifying device;
wherein at least one of the authentication challenge or authentication response is encoded as a sequence of qubits and delivered over a quantum communication channel between the verifying device and the responding device.

### Claim at position 41

145-149. (canceled)