# US 9,438,429 B2 · Method for authentication and electronic device for performing the authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 9,438,429 B2
- Document ID: US9438429B2
- Status: Granted
- Kind: B2
- Application number: 12/601,263
- Filed: 2008-04-28
- Published: 2010-06-24
- Granted: 2016-09-06
- Earliest claimed: 2007-06-11
- Assignees: NXP B.V.
- Applicants: Heike Neumann; Paul Hubmer; Peter Thueringer
- Inventors: Heike Neumann; Paul Hubmer; Peter Thueringer
- Web page: https://patentgrep.com/patent/US9438429B2

## CPC

- H04L 9/3273: {for mutual authentication (network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869)}
- G06F 21/445: {by mutual authentication, e.g. between devices or programs}
- H04L 9/0838: {Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these (network architectures or network communication protocols for key exchange in a packet data network H04L63/061)}
- H04L 63/0869: {for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273)}
- H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

An authentication method (100) for a secure data transmission is provided, the method comprising performing a first authentication protocol (101) by using a first cipher and performing a second authentication protocol (102) by using a second cipher. Possible inputs for the first authentication protocol (101) may be one shared key or several keys, and one or two random numbers.

## Claims

### Claim 1

An authentication method for a secure data transmission, the method comprising:
performing, in a processor, a first authentication protocol by using a first cipher, and
performing, in the processor, a second authentication protocol by using a second cipher, wherein the second authentication protocol replaces a handshake protocol.

### Claim 2 (depends on 1)

The method according to claim 1, further comprising:
outputting a first seed by the first cipher.

### Claim 3 (depends on 2)

The method according to claim 2, further comprising:
generating a first session key based on the first seed.

### Claim 4 (depends on 3)

The method according to claim 3, wherein an input for the second, authentication protocol is the generated first session key.

### Claim 5 (depends on 1)

The method according to claim 1, further comprising:
outputting a second seed by the second cipher.

### Claim 6 (depends on 5)

The method according to claim 5, further comprising:
generating a second session key based on the second seed.

### Claim 7 (depends on 1)

The method according to claim 1, further comprising:
reperforming the first authentication protocol; and
reperforming the second authentication protocol.

### Claim 8 (depends on 7)

The method according to claim 7, wherein the first authentication protocol uses a first key as an input, and wherein the reperforming of the first authentication protocol uses a second key as an input.

### Claim 9 (depends on 7)

The method according to claim 7, wherein the first authentication protocol uses a first key and a first random number as inputs, and wherein the reperforming of the first authentication protocol uses the first key and a second random number as inputs.

### Claim 10 (depends on 7)

The method according to claim 7, wherein the first authentication protocol generates a first key, and wherein the reperforming of the second authentication protocol uses a second key as an input.

### Claim 11 (depends on 7)

The method according to claim 7, wherein the first authentication protocol uses a first random number as an input and generates a first session key and wherein the reperforming of the second authentication protocol uses the first session key and a second random number as inputs.

### Claim 12 (depends on 1)

The method of authentication according to claim 1, further comprising:
transmitting data using the second cipher.

### Claim 13 (depends on 12)

The method according to claim 12, further comprising:
generating a first session key by using the first cipher.

### Claim 14 (depends on 12)

The method according to claim 12, further comprising:
generating a second session key by using the second cipher.

### Claim 15

A method of generating session keys for an encrypted communication, the method comprising:
generating, in a processor, a first session key by using a first cipher; and
generating, in a processor, a second session key based on the first session key by using a second cipher, wherein the second session key is used in a second authentication protocol that replaces a handshake protocol.

### Claim 16 (depends on 1)

The method of claim 1, wherein the processor is implemented in an electronic device that is either a security token or a reader device.

### Claim 17 (depends on 1)

A non-transitory medium, in which a computer program is stored which, when being executed by a processor, is configured to perform the method of claim 1.