公开(公告)号：US20080270798A1

公开(公告)日：2008-10-30

申请号：US10593124

申请日：2005-03-04

申请人： Olivier Charles ,  David Arditti ,  Sebastien Nguyen Ngoc ,  Thierry Baritaud

发明人： Olivier Charles ,  David Arditti ,  Sebastien Nguyen Ngoc ,  Thierry Baritaud

IPC分类号： H04L9/00

CPC分类号： H04L9/3247 ,  H04L9/3271 ,  H04L2209/42

摘要： An authentication method based on an encryption algorithm with a secret key. According to the invention, the anonymity of the entity being authenticated is guaranteed, so that only a legitimate authentication entity may recognize the identity of the entity which is being authenticated.

摘要翻译： 一种基于具有秘密密钥的加密算法的认证方法。 根据本发明，保证被认证的实体的匿名性，使得只有合法认证实体可以识别被认证的实体的身份。

公开(公告)号：US20090019282A1

公开(公告)日：2009-01-15

申请号：US11659296

申请日：2005-07-20

申请人： David Arditti ,  Olivier Charles ,  Sebastien Nguyen Ngoc

发明人： David Arditti ,  Olivier Charles ,  Sebastien Nguyen Ngoc

IPC分类号： H04L9/00

CPC分类号： H04L9/3236 ,  H04L2209/42

摘要： A method for authenticating at least one client entity (A) by means of an authentication entity (B) based on a public key encryption (ASYM(PB,R))/decryption (ASYM(SB,R′)) algorithm, implemented on the client entity side and authentication entity side, respectively, including, on the client entity side: generation of a cryptogram (R′) by encryption of a message (R) containing identification data (idA) of said entity, secret data (KA), and an authentication counter value (CA, CB), guaranteeing that said authentication is not replayed, sending of the cryptogram to the authentication entity and, on the authentication entity side: decryption of said cryptogram, from a data base (DB) storing, for each client entity capable of being authenticated, a record containing at least the identification data for said client entity, determination of the record of said data base corresponding to the decrypted identification data, and verification of the correspondence between the decrypted secret data and the secret data of said client entity, obtained from said record.

摘要翻译： 一种用于基于公钥加密（ASYM（PB，R））/解密（ASYM（SB，R'））算法借助于认证实体（B）来认证至少一个客户端实体（A）的方法， 客户实体侧和认证实体侧分别包括在客户端实体侧：通过加密包含所述实体的标识数据（idA）的消息（R）生成密码（R'），秘密数据（KA） ，以及认证计数器值（CA，CB），保证不重放所述认证，将密码发送给认证实体，并且在认证实体侧：从所述密码的数据库（DB）中解密所述密码， 对于能够被认证的每个客户端实体，至少包含用于所述客户端实体的识别数据的记录，对与解密的识别数据相对应的所述数据库的记录的确定，以及验证所解密的秘密数据a 找出从所述记录获得的所述客户实体的秘密数据。