Establishing secure mutual trust using an insecure password

Details Establishing secure mutual trust using an insecure password Establishing secure mutual trust using an insecure password

2005-06-29

2010-11-16

Korzuch, William R (Department: 2431)

Electrical computers and digital processing systems: support

Multiple computer communication using cryptography

Particular communication authentication technique

C713S155000, C713S156000, C713S168000, C380S278000

Reexamination Certificate

active

07836306

ABSTRACT:
A process for establishing secure mutual trust includes generating a one-time-password. The one-time-password is transferred between the devices in a communication occurring off of the network. Each device generates a set of authenticators by hashing a plurality of sub-strings of the password and the device's authentication certificate with a respective set of nonces. The devices exchange the respective sets of authenticators. Each device then alternates revealing its respective set of nonces and its authentication certificate in a multi-stage process. The devices re-calculate the authenticators based upon the respective set of nonces and authentication certificate revealed by the other device along with the one-time-password sub-strings that it posses. If each device determines that the authenticators re-calculated by the given device matches the authenticators previously received from the other device, secure mutual trust is established.

REFERENCES:
patent: 5732137 (1998-03-01), Aziz
patent: 5737419 (1998-04-01), Ganesan
patent: 6009177 (1999-12-01), Sudia
patent: 6189096 (2001-02-01), Haverty
patent: 6189098 (2001-02-01), Kaliski, Jr.
patent: 6198096 (2001-03-01), Le Cocq
patent: 6198098 (2001-03-01), Laou
patent: 7136903 (2006-11-01), Phillips et al.
patent: 2001/0005883 (2001-06-01), Wray et al.
patent: 2002/0166048 (2002-11-01), Coulier
patent: 2003/0041244 (2003-02-01), Buttyan et al.
patent: 2003/0097592 (2003-05-01), Adusumilli
patent: 2003/0172280 (2003-09-01), Scheidt et al.
patent: 2004/0049687 (2004-03-01), Orsini et al.
patent: 2004/0199768 (2004-10-01), Nail
patent: 2004/0230799 (2004-11-01), Davis
patent: 2006/0080352 (2006-04-01), Boubez et al.
patent: 2008/0046728 (2008-02-01), Lyle
patent: 2008/0123850 (2008-05-01), Bhatnagar et al.
patent: 2008/0229104 (2008-09-01), Ju et al.
patent: 2010/0005297 (2010-01-01), Ganesan
patent: 2010/0042839 (2010-02-01), Ho
patent: 2010/0131761 (2010-05-01), Kim et al.
International Search Report for PCT/US2006/025340 dated Jan. 8, 2007 (3 pages).
International Preliminary Report on Patentability for PCT/US2006/025340 dated Jan. 9, 2008 (4 pages).

Affiliated with

Also associated with

Rating

Establishing secure mutual trust using an insecure password does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Establishing secure mutual trust using an insecure password, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Establishing secure mutual trust using an insecure password will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4191477