ECDHE key exchange for server authentication and a key server

    公开(公告)号:US11683163B2

    公开(公告)日:2023-06-20

    申请号:US17253111

    申请日:2019-06-19

    发明人: John A. Nix

    摘要: A server can receive a device public key and forward the device public key to a key server. The key server can perform a first elliptic curve Diffie-Hellman (ECDH) key exchange using the device public key and a network private key to derive a secret X1. The key server can send the secret X1 to the server. The server can derive an ECC PKI key pair and send to the device the server public key. The server can conduct a second ECDH key exchange using the derived server secret key and the device public key to derive a secret X2. The server can perform an ECC point addition using the secret X1 and secret X2 to derive a secret X3. The device can derive the secret X3 using (i) the server public key, a network public key, and the device private key and (ii) a third ECDH key exchange.

    BLOCKCHAIN BASED SECURE NAMING AND UPDATE VERIFICATION

    公开(公告)号:US20190245680A1

    公开(公告)日:2019-08-08

    申请号:US16270534

    申请日:2019-02-07

    IPC分类号: H04L9/06 H04L9/00 G06F8/65

    摘要: A secure update is provided from a server to an end-point device. The server registers digital information, such as a name or a software package, and a verifiable key, such as a cryptographic hash, derived from the digital information. A publicly accessible transaction log stores the verifiable key in a block and provides an identifier of the block to the server. An end-point device receives the digital information and the identifier, and computes a separate verifiable key. The end-point device retrieves the verifiable key from the block of the publicly accessible transaction log, and compares the retrieved verifiable key to the separate verifiable key to determine whether the digital information has been compromised.