US 8,713,323 B2 · Codeword-enhanced peer-to-peer authentication

Abstract

Peer-to-peer authentication may be accomplished by sending a digital certificate to a responder, receiving a randomized codeword in response to the sending, creating a secure fingerprint based at least in part on the digital certificate and randomized codeword, creating a first bit sequence based at least in part on a first portion of the secure fingerprint and a second portion of the randomized codeword and indicating the first digital certificate is authenticated based upon whether the first bit sequence matches a second bit sequence received from the responder via an out-of-band communication in response to the sending. The size of the first bit sequence is less than the size of the secure fingerprint. According to another aspect, the first bit sequence is compared with a rendering of the second bit sequence, using an out-of-band communication, by associating the first bit sequence with one or more indices into an array of representations.

Claims30

Dependent claims

A method comprising:

receiving, by a computing device, a digital certificate from a communications device;
creating, by the computing device, a first digital fingerprint based on at least a portion of the digital certificate and at least a first portion of a random codeword;
generating, by the computing device, a second digital fingerprint, wherein the second digital fingerprint is generated by adding a second portion of the random codeword to at least a portion of the first digital fingerprint;
generating, by the computing device, a first plurality of representations based on at least a portion of the second digital fingerprint;
receiving, by the computing device, a first indication of whether the first plurality of representations matches a second plurality of representations, the second plurality of representations having been determined by the communications device;
and
generating, by the computing device, a second indication of whether the digital certificate received from the communications device is authentic based at least in part on the first indication.

4 more elements

A system comprising:

one or more processing devices configured to:
receive a digital certificate from a communications device;
create a first digital fingerprint based on at least a portion of the digital certificate and at least a first portion of a random codeword;
generate a second digital fingerprint, wherein the second digital fingerprint is generated by adding a second portion of the random codeword to at least a portion of the first digital fingerprint;
generate a first plurality of representations based on at least a portion of the second digital fingerprint;
receive a first indication of whether the first plurality of representations matches a second plurality of representations, the second plurality of representations having been determined by the communications device;
and
generate a second indication of whether the digital certificate received from the communications device is authentic based at least in part on the first indication.

5 more elements

Dependencies are inferred from the claim text.

Codeword-enhanced peer-to-peer authentication

Life of this patent

Codeword-enhanced peer-to-peer authentication

Life of this patent

Abstract

Claims30