公开(公告)号：US20110249815A1

公开(公告)日：2011-10-13

申请号：US13139637

申请日：2009-12-16

Applicant: Matthew Robshaw ,  Henri Gilbert

Inventor： Matthew Robshaw ,  Henri Gilbert

IPC: H04L9/28

CPC classification number: H04L9/0637 ,  H04L2209/805

Abstract: A method is provided of implementing a block cipher algorithm by a device storing a fixed initialization datum, comprising, before execution of a first iteration of the algorithm in the course of a session, a step of determining a modified initialization datum by way of a determined function supplied as input with the fixed initialization datum and a state value specific to the session, the state value being stored in the device, said modified initialization datum being usable to implement the first iteration of the algorithm.

Abstract translation: 提供了一种通过存储固定的初始化数据的设备实现块密码算法的方法，包括：在会话过程中执行算法的第一迭代之前，通过确定的确定的修改的初始化数据的步骤 功能作为输入提供固定的初始化数据和特定于会话的状态值，状态值被存储在设备中，所述修改的初始化数据可用于实现算法的第一次迭代。

公开(公告)号：US09332430B2

公开(公告)日：2016-05-03

申请号：US13576586

申请日：2011-01-26

Applicant: Matthew Robshaw ,  Henri Gilbert

Inventor： Matthew Robshaw ,  Henri Gilbert

IPC: G06K7/01 ,  G05B19/00 ,  H04W12/06

CPC classification number: H04W12/06

Abstract: A method and apparatus are provided for identifying and authenticating a radio tag by a radio reader. The tag forms part of a set of tags in a radio range of the reader and has selected a time slot from a set of available time slots. The method includes: a step of the reader sending a query message during the selected time slot; and a step of the reader receiving a reply message from the tag that selected the time slot. The reply message includes a random value selected by the tag. The tag stores authentication coupons and the reply from the tag received by the reader during the time slot contains, as a random value selected by the tag, a value that is a function of one of the coupons.

Abstract translation: 提供了一种用于通过无线电读取器识别和认证无线电标签的方法和装置。 标签形成读取器的无线电范围内的一组标签的一部分，并且从一组可用时隙中选择了时隙。 该方法包括：读取器在所选择的时隙期间发送查询消息的步骤; 以及读取器从选择时隙的标签接收回复消息的步骤。 回复消息包括由标签选择的随机值。 标签存储认证优惠券，并且在时隙期间由读者接收的标签的答复作为由标签选择的随机值，包含作为优惠券之一的函数的值。

公开(公告)号：US08595506B2

公开(公告)日：2013-11-26

申请号：US12741638

申请日：2008-11-21

Applicant: Matthew Robshaw ,  Henri Gilbert

Inventor： Matthew Robshaw ,  Henri Gilbert

IPC: G06F21/00

CPC classification number: H04L9/3271 ,  G06F21/10 ,  G06F21/445 ,  G06F2221/2103 ,  G06F2221/2129 ,  G11B20/00086 ,  G11B20/00876 ,  H04L9/0827 ,  H04L2209/603 ,  H04L2209/805

Abstract: An authentication method of a prover device by a verifier device using cryptographic coupons is provided, where a coupon includes a pseudo-random number ri, where i is an index for labeling the coupon, and a reduced-coupon xi such that xi=ƒ(ri), where ƒ is a predetermined one-way function, the method including the following steps: the verifier device sends a challenge consisting of a random value c to the prover device; the prover device sends to the verifier device a response y calculated by using the pseudo-random number ri, the challenge c, and a secret key s belonging to the prover device; and the verifier device checks the validity of the response y based on the challenge c, the reduced-coupon xi corresponding to the pseudo-random number ri, and a public key V corresponding to the secret key s, the reduced-coupon xi being received by the verifier device from a source external to the prover device.

Abstract translation: 提供了使用加密优惠券的验证器设备的验证器设备的验证方法，其中优惠券包括伪随机数ri，其中i是用于标记优惠券的索引，以及减价券xi，使得xi = f（ ri），其中f是预定的单向功能，该方法包括以下步骤：验证器设备将由随机值c组成的挑战发送到证明器设备; 证明者设备通过使用伪随机数ri，质询c和属于证明者设备的秘密密钥s向验证者设备发送响应y; 并且验证器设备基于挑战c来检查响应y的有效性，对应于伪随机数ri的缩减优惠券xi和对应于秘密密钥s的公开密钥V，被接收的优惠券xi 通过验证器设备从证明器设备外部的源。

公开(公告)号：US08588408B2

公开(公告)日：2013-11-19

申请号：US13139637

申请日：2009-12-16

Applicant: Matthew Robshaw ,  Henri Gilbert

Inventor： Matthew Robshaw ,  Henri Gilbert

IPC: H04K1/00

CPC classification number: H04L9/0637 ,  H04L2209/805

Abstract: A method of implementing a block cipher algorithm by a device storing a fixed initialization datum includes determining, before execution of a first iteration of the algorithm in the course of a session, a modified initialization datum by way of a determined function supplied as input with the fixed initialization datum and a state value specific to the session. The state value may be stored in the device. The modified initialization datum may be used to implement the first iteration of the algorithm.

Abstract translation: 一种通过存储固定的初始化数据的设备实现块密码算法的方法包括：在会话过程中，在执行算法的第一迭代之前，通过确定的功能确定修改的初始化数据，该确定的函数作为输入提供作为输入， 固定的初始化数据和特定于会话的状态值。 状态值可以存储在设备中。 修改的初始化数据可以用于实现算法的第一次迭代。

公开(公告)号：US20100161988A1

公开(公告)日：2010-06-24

申请号：US12600304

申请日：2008-05-21

Applicant: Matthew Robshaw ,  Henri Gilbert

Inventor： Matthew Robshaw ,  Henri Gilbert

IPC: H04L9/32

CPC classification number: H04L9/3271 ,  H04L2209/805

Abstract: A method of authenticating an entity by a verification entity, said entities sharing a pair of secret keys X and Y. According to the invention said secret keys X and Y are n×m (n, m>1) binary matrices, said method comprising steps repeated r times (r≧1) of: the entity (1) to be authenticated and the verification entity (2) exchanging binary vectors a and b of n bits respectively drawn at random by the verification entity (2) and the entity (1) to be authenticated and the entity (1) to be authenticated drawing at random a noise binary vector c of m bits, each of said m bits being equal to 1 with a probability η less than ½, and calculating and sending to the verification entity (2) a response vector z of m bits equal to z=aX⊕bY⊕c; the verification entity calculating the Hamming weight (220′) of an error vector e=z⊕aX⊕bY; and then accepting (240′) the authentication if the Hamming weights of the r error vectors e satisfy a relationship of comparison (230′) to a parameter (T, t) that is a function of the probability η. Application to cryptographic protocols for authenticating electronic chips of very low cost.

Abstract translation: 根据本发明，所述秘密密钥X和Y是n×m（n，m> 1）个二进制矩阵，所述方法包括： 步骤重复r次（r≥1）：要认证的实体（1）和验证实体（2）交换由验证实体（2）和实体（2）分别随机绘制的n位的二进制向量a和b， 1）被认证，并且被认证的实体（1）被随机绘制一个m比特的噪声二进制向量c，每个所述m比特以概率等于1; 小于1/2，并且向验证实体（2）计算并发送m比特等于z =aX⊕bY⊕c的响应向量z; 所述验证实体计算误差向量的所述汉明权重（220'）e =z⊕aX⊕bY; 然后如果r个误差向量e的汉明权重满足比较（230'）与作为概率的函数的参数（T，t）的关系，则接受认证（240'）。 应用于非常低成本的认证电子芯片的加密协议。