Method and apparatus for data authentication in a data communication environment
AssigneeInternational Business Machines Corporation
InventorsMihir Bellare, Roch Andre Guerin, Phillip Walder Rogaway
Life of this patent
Estimating the term…
Loading patent…
AssigneeInternational Business Machines Corporation
InventorsMihir Bellare, Roch Andre Guerin, Phillip Walder Rogaway
Estimating the term…
A method and system for providing data authentication, within a data communication environment, in a manner which is simple, fast, and provably secure. A data message to be sent is partitioned into data blocks. Each data block is combined with a block index to create a word. A pseudo-random function is applied to each word to create a plurality of enciphered data strings. An identifying header, comprising the identity of the sender and a counter value, is also enciphered using a pseudo-random function. These enciphered data strings and header are logically combined to create a tag. As the enciphering of a particular word occurs independent of the other words, each block can be enciphered independently of the others. The method and system can thus be performed and structured in either a parallel or pipelined fashion. A receiving component or system generates a second tag which can then be compared with the transmitted tag to determine message authentication.
An article of manufacture for allowing a data processing system to determine an authentication tag to be used in conjunction with transfer of data using a communication channel comprising:
An article of manufacture for allowing a data processing system to determine an authentication tag to be used in conjunction with transfer of data using a communication channel comprising:
An article of manufacture for allowing a data processing system to determine authenticity of a received data packet from a communication channel comprising:
Dependencies are inferred from the claim text.