System and method for efficiently implementing an authenticated communications channel that facilitates tamper detection

A method of operating a communications system comprising a plurality of communication devices interconnected by a network, two of said communication devices engaging in a communication session to transfer message packets therebetween, comprising the steps of

• A. enabling the said two communication devices prior to said communication session to initially engage in a session establishment operation in which one of said two communication devices generates a session key and transfers the session key privately to the other of said two communication devices,
• B. enabling the two communication devices, during the communication sessions, to transfer data therebetween in at least one message packet, in the process
• i. enabling one of said two communication devices generating said at least one message packet to include said data and a hash value generated by applying a selected hash function to said data and said session key, and
• ii. enabling the other of said two communication devices, upon receiving said at least one message packet, generating a hash value from the data in said message packet and said session key, and comparing the generated hash value to the hash value in the message packet.

A method of receiving data from another device over a network, comprising the steps of:

• A. receiving a message packet over said network, the message packet including said data and a hash value;
• B. generating a hash value by applying said selected hash function to said data and a session key;
• and
• C. comparing the generated hash value to the hash value in the received message packet.

A computer program product for use in connection with two communication devices interconnected by a network, to control the transfer of message packets therebetween, the computer program product comprising a communication device-readable medium having encoded thereon:

• A. a session establishment module for enabling said two communication devices prior to said communication session to initially engage in a session establishment operation in which one of said two communication devices generates a session key and transfers the session key privately to the other of said two communication devices,
• B. a session control module for enabling the two communication devices to transfer data therebetween in at least one message packet during the communication session;
• the session control module enabling
• i. one of said two communication devices to generate said at least one message packet to include said data and a hash value generated by applying a selected hash function to said data and said session key, and
• ii. the other of said two communication devices, upon receiving said at least one message packet, generating a hash value from the data in said message packet and said session key, and comparing the generated hash value to the hash value in the message packet.

A computer program product for enabling a communication device to generate a message packet to transfer data to another device over a network, the computer program product including a communication device readable medium having encoded thereon:

• A. a hash generator module for enabling the communication device to generate a hash value by applying said selected hash function to said data and a session key;
• B. a message generator module for enabling the communication device to generate a message packet for transfer over said network, the message packet including said data and said hash value as generated by said hash generator;
• and
• C. transfer the generated message packet over said network.