Back to results
US 8,806,194 B2Granted
Method for authenticating low performance device
AssigneeInstitute for Basic Science
InventorsYoung Sam Kim, Joon Heo, Mun Seok Jeong
Life of this patent
Estimating the term…
Abstract
The present invention relate to a method for authenticating a low performance device, and more particularly, to a device authenticating method, in which a low performance device such as a smart meter of a smart grid is authenticated in a matrix operation instead of an exponential operation through a homomorphic hash function (HHF) of a non-square matrix M, so that the amount of operations required for authenticating the device can be reduced and the device can be safely authenticated even without a separate certificate authority.
Claims11
A method for authenticating a device, the method comprising the steps of:
- calculating an authentication request coefficient set expressing a sum vector calculated from an authentication device key matrix and an arbitrary n-dimensional first vector CMDMS as a linear combination for a basis vector of a square basis matrix, and transmitting the authentication request coefficient set to the authentication server, by the authentication device;
- and
- calculating an authentication confirmation coefficient set expressing an encryption sum vector as a linear combination for a column vector of an authentication server key matrix mapped to an identifier of the authentication device using the authentication server key matrix and the authentication request coefficient set, and authenticating the authentication device based on the authentication confirmation coefficient set and the authentication request coefficient set, by the authentication server,
- wherein the authentication device key matrix or the authentication server key matrix is calculated by applying a square basis matrix to a non-square homomorphic hash function (HHF) and is previously stored in the authentication server and the authentication device, the square basis matrix being previously stored in the authentication device.
1 more element
A method for authenticating a device, the method comprising the steps of:
- transmitting an arbitrary n-dimensional first vector CMDMS to an authentication device, by an authentication server;
- transmitting a first group authentication request coefficient set among an authentication request coefficient set expressing a sum vector calculated from an authentication device key matrix and the n-dimensional first vector CMDMS as a linear combination for a basis vector of a square basis matrix, and an arbitrary n-dimensional second vector CSM to the authentication server, by the authentication device;
- calculating an authentication confirmation coefficient set expressing an encryption sum vector as a linear combination for a column vector of an authentication server key matrix mapped to the identifier of the authentication device using the first group authentication request coefficient set, and primarily authenticating the authentication device based on a first group authentication confirmation coefficient set among the authentication confirmation coefficient set and the first group authentication request coefficient set, by the authentication server;
- when the authentication server primarily authenticates the authentication device, transmitting a first encryption key vector calculated from the authentication server key matrix and the n-dimensional second vector to the authentication device, by the authentication server;
- authenticating the authentication server by comparing a second encryption key vector calculated from the authentication device key matrix and the n-dimensional second vector with the first encryption key vector, by the authentication device;
- when the authentication device authenticates the authentication server, transmitting a second group authentication request coefficient set among the authentication request coefficient set to the authentication server, by the authentication device;
- and
- finally authenticating the authentication device by comparing the second group authentication request coefficient set with a second group authentication confirmation coefficient set among the authentication confirmation coefficient set, by the authentication server.
5 more elements
Dependencies are inferred from the claim text.