# US 8,543,815 B2 · Authentication method and related devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,543,815 B2 - Document ID: US8543815B2 - Status: Granted - Kind: B2 - Application number: 11/529,023 - Filed: 2006-09-28 - Published: 2007-03-29 - Granted: 2013-09-24 - Earliest claimed: 2005-09-28 - Assignees: Apple Inc. - Applicants: Thierry Lucidarme - Inventors: Thierry Lucidarme - Web page: https://patentgrep.com/patent/US8543815B2 ## CPC - H04L 63/0421: {Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method for authenticating a first party with a second party, the first and second parties having means for communicating with each other, the first party having secret information and supporting a plurality of authentication modes for authenticating the first party with another party, using said secret information, the authentication modes of said plurality being arranged for protecting the first party's privacy with respective degrees. A degree with which the first party's privacy must be protected when authenticating the first party with the second party is negotiated between the first party and the second party. If the negotiation is successful, the first party is authenticated with the second party according to the authentication mode of said plurality having the negotiated degree of protection of the first party's privacy. ## Claims ### Claim 1 A method for authenticating a first device to a device, the method comprising: the first device negotiating with the second device for use of a particular one authentication mode of a plurality of authentication modes, each authentication mode corresponding to a respective degree of privacy of the first device, wherein each respective degree of privacy corresponds to a particular degree of protection of the identity of the first device during authentication; wherein in response to a successful negotiation for the one authentication mode, the second device authenticating the first device using particular one authentication mode; wherein in response to an unsuccessful negotiation for the particular one authentication mode, the second device authenticating the first device using another authentication mode of the plurality of authentication modes, wherein the another authentication mode provides a different degree of privacy; and wherein the plurality of authentication modes comprise at least an opposable authentication mode and a non-opposable authentication mode, which implements a zero knowledge type authentication mechanism. ### Claim 2 (depends on 1) The method as claimed in claim 1, wherein the opposable authentication mode implements an authentication mechanism of a private key type in which the secret information of the first device is a private key shared by the first device and the second device. ### Claim 3 (depends on 1) The method as claimed in claim 1, wherein the opposable authentication mode implements an authentication mechanism of a public key type. ### Claim 4 (depends on 1) The method as claimed in claim 1, wherein the plurality of authentication comprise at least an anonymous authentication mode and a non-anonymous authentication mode. ### Claim 5 (depends on 4) The method as claimed in claim 4, wherein the anonymous authentication mode comprises a secured allocation to the first device of new secret information by an anonymity manager, and is arranged for authenticating the first device to the second party using said new secret information. ### Claim 6 (depends on 5) The method as claimed in claim 5, wherein said new secret information is allocated to the first device by the anonymity manager for a limited time period. ### Claim 7 (depends on 5) The method as claimed in claim 5, wherein said new secret information is allocated by the anonymity manager so that it is common to a group of devices to which the first device belongs. ### Claim 8 (depends on 5) The method as claimed in claim 5, wherein a pseudo identity is allocated to the first device by the anonymity manager in correspondence with said new secret information. ### Claim 9 (depends on 8) The method as claimed in claim 8, wherein the anonymous authentication mode comprises a preliminary transmission of the pseudo identity from the first device to the second device and the verification by the second device with the anonymity manager that said pseudo identity is valid. ### Claim 10 (depends on 8) The method as claimed in claim 8, wherein the anonymous authentication mode is arranged for authenticating the first device with another device using said pseudo identity. ### Claim 11 (depends on 1) The method as claimed in claim 1, wherein the negotiation is based upon an access or service to be carried out between the first device and the second device. ### Claim 12 (depends on 1) The method as claimed in claim 1, further comprising an anonymous payment from a first party associated with the first device to a second party associated with the second device in response to the first device being authenticated to the second device according to an authentication mode corresponding to an anonymous authentication mode or when the negotiation for the particular one authentication mode has failed. ### Claim 13 (depends on 1) The method as claimed in claim 1, wherein the first device and/or the second device are related to at least one among: a terminal, a sensor, a server and an access point of a communication system. ### Claim 14 (depends on 1) The method as claimed in claim 1, wherein the the first device and second device are configured to communicate wirelessly. ### Claim 15 A device comprising: a processor configured to negotiate with a second device including a second processor for use of one authentication mode of a plurality of authentication modes, each authentication mode corresponding to a respective degree of privacy of the device, wherein each respective degree of privacy corresponds to a particular degree of protection of the identity of second device during authentication; and wherein in response to a successful negotiation for the one authentication mode, the second device is authenticated by the processor according to the one authentication mode; wherein in response to an unsuccessful negotiation for the one authentication mode, the second device is authenticated by the processor according to another authentication mode of the plurality of authentication modes, wherein the another authentication mode provides a different degree of privacy for the second device; and wherein the plurality of authentication modes comprise at least an opposable authentication mode and a non-opposable authentication mode, which implements a zero knowledge type authentication mechanism. ### Claim 16 (depends on 1) The method as recited in claim 1, wherein the another authentication mode is proposed by the second device. ### Claim 17 A system comprising: a first device; and a second device configured to communicate wirelessly with the first device: wherein the first device is configured to negotiate with the second device for use of one authentication mode of a plurality of authentication modes, each authentication mode corresponding to a respective degree of privacy of the first device, wherein each respective degree of privacy corresponds to a particular degree of protection of the identity of the first device during authentication; wherein in response to a successful negotiation for the one authentication mode, the second device is configured to authenticate the first device using the one authentication; wherein in response to an unsuccessful negotiation for the one authentication mode, the second device is configured to authenticate the first device using another authentication mode of the plurality of authentication modes, wherein the another authentication mode provides a different degree of privacy; and wherein the plurality of authentication modes comprise at least an opposable authentication mode and a non-opposable authentication mode, which implements a zero knowledge type authentication mechanism. ### Claim 18 A non-transitory computer readable storage medium including instructions which, when executed by a processor of a first device, cause the processor to: negotiate with a second device including a second processor for use of one authentication mode of a plurality of authentication modes, each authentication mode corresponding to a respective degree of privacy of the second device, wherein each respective degree of privacy corresponds to a particular degree of protection of the identity of the second device during authentication; wherein in response to a successful negotiation for the one authentication mode, the processor is configured to authenticate the second device according to the one authentication mode; wherein in response to an unsuccessful negotiation for the one authentication mode, the processor is configured to is authenticate the second device according to another authentication mode of the plurality of authentication modes, wherein the another authentication mode provides a different degree of privacy for the second device; and wherein the plurality of authentication modes comprise at least an opposable authentication mode and a non-opposable authentication mode, which implements a zero knowledge type authentication mechanism. ### Claim 19 A device comprising: a processor configured to negotiate with a second device including a second processor for use of one authentication mode of a plurality of authentication modes, each authentication mode corresponding to a respective degree of privacy of the device, wherein each respective degree of privacy corresponds to a particular degree of protection of the identity of the first device during authentication; wherein in response to a successful negotiation for the one authentication mode, the device is authenticated by the second processor according to the one authentication mode; and wherein in response to an unsuccessful negotiation for the one authentication mode, the device is authenticated by the second processor according to another authentication mode of the plurality of authentication modes, wherein the another authentication mode provides a different degree of privacy for the device; and wherein the plurality of authentication modes comprise at least an opposable authentication mode and a non-opposable authentication mode, which implements a zero knowledge type authentication mechanism.