NO950189L - Fremgangsmåte for gjensidig autentifisering - Google Patents

Fremgangsmåte for gjensidig autentifisering

Info

Publication number
NO950189L
NO950189L NO950189A NO950189A NO950189L NO 950189 L NO950189 L NO 950189L NO 950189 A NO950189 A NO 950189A NO 950189 A NO950189 A NO 950189A NO 950189 L NO950189 L NO 950189L
Authority
NO
Norway
Prior art keywords
encryptor
mutual authentication
authentication procedure
perform
card
Prior art date
Application number
NO950189A
Other languages
English (en)
Other versions
NO950189D0 (no
Inventor
Bernd Kowalski
Helmut Stolz
Roland Nehl
Original Assignee
Deutsche Bundespost Telekom
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Deutsche Bundespost Telekom filed Critical Deutsche Bundespost Telekom
Publication of NO950189D0 publication Critical patent/NO950189D0/no
Publication of NO950189L publication Critical patent/NO950189L/no

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/409—Device specific authentication in transaction processing
    • G06Q20/4097—Device specific authentication in transaction processing using mutual authentication between devices and transaction partners
    • G06Q20/40975—Device specific authentication in transaction processing using mutual authentication between devices and transaction partners using encryption therefor
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3234—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
    • H04L9/3273—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response for mutual authentication

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Business, Economics & Management (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Accounting & Taxation (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Signal Processing (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Finance (AREA)
  • Storage Device Security (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Credit Cards Or The Like (AREA)
  • Signal Processing For Digital Recording And Reproducing (AREA)
  • Transition And Organic Metals Composition Catalysts For Addition Polymerization (AREA)
  • Cash Registers Or Receiving Machines (AREA)
  • Lock And Its Accessories (AREA)

Abstract

Ved kjente metoder for autentifisering oppstår problem med huller i sikringen av den hemmelige nøkkelen, som følge av mellomkobling av hurtige moduler SM. Ved hjelp av en metode hvor identitetsbevis (chip-kort) og kodemodulen beskyttes før utleveringen ved personalisering og hvor det ved en kommunikasjon foretar deltagerne ved endestedene en gjensidig autentifisering i forhold til hverandre og frembringer derved et stedsspesifikt tilfeldighetstall. Først deretter utfører de hurtige modulene SM sine gjensidige autentifiseringer, hvorved det dannes sikrede informasjonsoverføringer ved de to deltakerne. Det utelukkes herved misbruk av autentifiseringen og muliggjøres en sikker helautomatisk eller delautomatisk drift såvel som en sikkerhetsadministrasjon.
NO950189A 1994-03-01 1995-01-18 Fremgangsmåte for gjensidig autentifisering NO950189L (no)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
DE4406601A DE4406601A1 (de) 1994-03-01 1994-03-01 Verfahren zur gegenseitigen Authentikation

Publications (2)

Publication Number Publication Date
NO950189D0 NO950189D0 (no) 1995-01-18
NO950189L true NO950189L (no) 1995-09-04

Family

ID=6511480

Family Applications (1)

Application Number Title Priority Date Filing Date
NO950189A NO950189L (no) 1994-03-01 1995-01-18 Fremgangsmåte for gjensidig autentifisering

Country Status (6)

Country Link
EP (1) EP0670646B1 (no)
AT (1) ATE154183T1 (no)
DE (2) DE4406601A1 (no)
DK (1) DK0670646T3 (no)
ES (1) ES2105483T3 (no)
NO (1) NO950189L (no)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE19640526A1 (de) * 1996-10-01 1998-04-02 Deutsche Telekom Ag Verfahren zur Übertragung von Signalen
DE19705620C2 (de) * 1997-02-14 2000-11-09 Esd Information Technology Ent Anordnung und Verfahren zur dezentralen Chipkartenidentifikation
RU2134931C1 (ru) * 1999-03-15 1999-08-20 ОАО "Всероссийский научно-исследовательский институт автоматизации управления в непромышленной сфере" Способ обеспечения доступа к объектам в операционной системе мсвс

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4223403A (en) * 1978-06-30 1980-09-16 International Business Machines Corporation Cryptographic architecture for use with a high security personal identification system
US4349695A (en) * 1979-06-25 1982-09-14 Datotek, Inc. Recipient and message authentication method and system
DE3036804A1 (de) * 1980-09-30 1982-05-13 Licentia Patent-Verwaltungs-Gmbh, 6000 Frankfurt Sicherheitssystem zur verhinderung unerlaubter manipulationen bei der elektronischen textuebertragung in nachrichtennetzen
SU1163744A1 (ru) * 1983-04-22 1992-04-30 Kazakov N M Устройство дл кодировани и декодировани сообщений
FR2601476B1 (fr) * 1986-07-11 1988-10-21 Bull Cp8 Procede pour authentifier une donnee d'habilitation externe par un objet portatif tel qu'une carte a memoire
CH675169A5 (no) * 1988-02-22 1990-08-31 Asea Brown Boveri
GB2227111B (en) * 1989-01-17 1993-05-19 Toshiba Kk Certification system
DE4008971A1 (de) * 1990-03-20 1991-09-26 Siemens Nixdorf Inf Syst Verfahren zur authentifizierung eines eine datenstation benutzenden anwenders
DE4133147C2 (de) * 1991-09-30 1994-12-01 Elmeg Kommunikationstech Fernsprechendgerät
SE468068C (sv) * 1991-09-30 1994-04-11 Comvik Gsm Ab Förfarande för personifiering av ett aktivt kort, för användning i ett mobiltelefonsystem
DE4231789A1 (de) * 1992-09-23 1994-07-14 Dacota Gmbh Ges Fuer Datenvera Fernabfrage- und Autorisierungssystem für Kredit- und Company-Karten mittels eines Tonwahl-Telefons

Also Published As

Publication number Publication date
EP0670646B1 (de) 1997-06-04
DE4406601A1 (de) 1995-09-07
DE59403023D1 (de) 1997-07-10
EP0670646A1 (de) 1995-09-06
ES2105483T3 (es) 1997-10-16
DK0670646T3 (da) 1997-12-29
ATE154183T1 (de) 1997-06-15
NO950189D0 (no) 1995-01-18

Similar Documents

Publication Publication Date Title
CA2202566A1 (en) Digital signatures on a smart card
NO943457D0 (no) "Smartkort" tilpasset flere tjenesteytere og sekundær utnyttelse
WO2003003171A3 (en) A method and system for generating and verifying a key protection certificate.
ATE269614T1 (de) Kryptografische datenverarbeitung unter verwendung einer kaskadierung kryptografischer elemente in einer rückkoppelung
KR970706669A (ko) 이동 사용자의 안전한 식별 방법 및 시스템(method and apparatus for secure identification of a mobile user in a communication network)
DE69535935D1 (de) Verfahren und Vorrichtung zur Erstellung einer kryptographischen Verbindung zwischen Elementen eines Systems
DE58909106D1 (de) Datenträger-gesteuertes Endgerät in einem Datenaustauschsystem.
SE9503343L (sv) Metod för kryptering av information
SE8403867D0 (sv) Autenticitetssystem mellan en kortlesare och ett betalkort som utvexlar data
SG49828A1 (en) Restricted blind signatures
CA2288192A1 (en) Two way authentication protocol
CA2026739A1 (en) Transaction system security method and apparatus
NO923371D0 (no) Framgangsmaate og anordning for etablering av sikker kommunikasjon
GB2334416A (en) A circuit and method for ensuring interconnect security within a multi-chip integrated cirecuit package
CA2184679A1 (en) Apparatus and method for establishing a cryptographic link between elements of a system
CA2141318A1 (en) Method and Apparatus for Efficient Real-Time Authentication and Encryption in a Communication System
CA2115435A1 (en) Method for Personalisation of an Active Card
CA2168812A1 (en) High-Bandwidth Encryption System with Low-Bandwidth Cryptographic Modules
NO316553B1 (no) Fremgangsmåte for tilveiebringelse og fordeling av ikke-personaliserte fortrolige elektroniske nøkler
ATE59720T1 (de) Terminal fuer system mit geschuetztem zugang.
TR199903243T2 (xx) �deme i�lemi ve sistemi
NO950189D0 (no) Fremgangsmåte for gjensidig autentifisering
JPH0231290A (ja) Ｉｃカード装置
DE69733424D1 (de) Datendekorrelationsverfahren
KR20010079902A (ko) 데이터 교환시 1인 이상의 가입자를 인증하기 위한 방법

Legal Events

Date Code Title Description
FC2A Withdrawal, rejection or dismissal of laid open patent application