AU2014265030B2 - A computer implemented system and method for lightweight authentication on datagram transport for internet of things - Google Patents

A computer implemented system and method for lightweight authentication on datagram transport for internet of things Download PDF

Info

Publication number
AU2014265030B2
AU2014265030B2 AU2014265030A AU2014265030A AU2014265030B2 AU 2014265030 B2 AU2014265030 B2 AU 2014265030B2 AU 2014265030 A AU2014265030 A AU 2014265030A AU 2014265030 A AU2014265030 A AU 2014265030A AU 2014265030 B2 AU2014265030 B2 AU 2014265030B2
Authority
AU
Australia
Prior art keywords
random number
client
server
session key
response
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
AU2014265030A
Other languages
English (en)
Other versions
AU2014265030A1 (en
Inventor
Soma Bandyopadhyay
Abhijan Bhattacharya
Arpan Pal
Arijit UKIL
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Tata Consultancy Services Ltd
Original Assignee
Tata Consultancy Services Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Tata Consultancy Services Ltd filed Critical Tata Consultancy Services Ltd
Publication of AU2014265030A1 publication Critical patent/AU2014265030A1/en
Application granted granted Critical
Publication of AU2014265030B2 publication Critical patent/AU2014265030B2/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
    • H04L9/3273—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response for mutual authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0869—Network architectures or network communication protocols for network security for authentication of entities for achieving mutual authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0869—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/70—Services for machine-to-machine communication [M2M] or machine type communication [MTC]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/80—Wireless
    • H04L2209/805—Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/166—Implementing security features at a particular protocol layer at the transport layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • H04L9/0618—Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
    • H04L9/0637—Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Medical Informatics (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer And Data Communications (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
AU2014265030A 2014-02-03 2014-11-18 A computer implemented system and method for lightweight authentication on datagram transport for internet of things Active AU2014265030B2 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
IN377/MUM/2014 2014-02-03
IN377MU2014 2014-02-03

Publications (2)

Publication Number Publication Date
AU2014265030A1 AU2014265030A1 (en) 2015-08-20
AU2014265030B2 true AU2014265030B2 (en) 2016-04-21

Family

ID=51903835

Family Applications (1)

Application Number Title Priority Date Filing Date
AU2014265030A Active AU2014265030B2 (en) 2014-02-03 2014-11-18 A computer implemented system and method for lightweight authentication on datagram transport for internet of things

Country Status (7)

Country Link
US (1) US9780954B2 (enExample)
EP (1) EP2903204A1 (enExample)
JP (1) JP6301244B2 (enExample)
KR (1) KR102068367B1 (enExample)
CN (2) CN112217794A (enExample)
AU (1) AU2014265030B2 (enExample)
ZA (1) ZA201408487B (enExample)

Families Citing this family (47)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9258303B1 (en) * 2014-08-08 2016-02-09 Cellcrypt Group Limited Method of providing real-time secure communication between end points in a network
JP6850530B2 (ja) * 2014-10-20 2021-03-31 タタ コンサルタンシー サービシズ リミテッドＴＡＴＡ Ｃｏｎｓｕｌｔａｎｃｙ Ｓｅｒｖｉｃｅｓ Ｌｉｍｉｔｅｄ セキュアセッションの確立と暗号化データ交換のためのコンピュータ利用システム及びコンピュータ利用方法
KR101611944B1 (ko) * 2015-03-13 2016-04-12 한국전자통신연구원 데이터 암호화 기능 선택적 적용 방법
JP6023853B1 (ja) * 2015-05-29 2016-11-09 日本電信電話株式会社 認証装置、認証システム、認証方法、およびプログラム
US10469464B2 (en) * 2015-06-09 2019-11-05 Intel Corporation Self-configuring key management system for an internet of things network
KR101707602B1 (ko) * 2015-09-25 2017-02-17 상명대학교 천안산학협력단 해시 트리 기반 보안 메시지 인증 방법 및 이를 위한 장치
TWI576779B (zh) * 2015-10-13 2017-04-01 Nat Sun Yat-Sen Univ Method and Method of Payment Authentication System for Internet of Things
CN107113172B (zh) * 2015-12-10 2019-03-29 深圳市大疆创新科技有限公司 无人机认证方法，安全通信方法及对应系统
KR101709086B1 (ko) 2015-12-24 2017-02-23 서강대학교산학협력단 사물 인터넷 환경에서의 컨텍스트 기반 보안방법 및 그에 따른 시스템
EP3395091B1 (en) 2015-12-24 2021-05-26 Nokia Technologies Oy Authentication and key agreement in communication network
CN108476224B (zh) * 2016-01-19 2020-12-04 英国电讯有限公司 认证通信连接的方法、数据通信装置和存储介质
CN105763321B (zh) * 2016-04-06 2018-09-28 深圳市奔迈科技有限公司 一种物联网通讯加密方法和装置
KR101838511B1 (ko) * 2016-05-17 2018-03-14 현대자동차주식회사 암호화를 적용한 제어기 보안 방법 및 그 장치
US10271209B2 (en) * 2016-06-12 2019-04-23 Apple Inc. Session protocol for backward security between paired devices
CN106330941A (zh) * 2016-08-31 2017-01-11 成都秦川科技发展有限公司 物联网私密通道的信息私密分送及对象控制方法、装置
CN106330943A (zh) * 2016-08-31 2017-01-11 成都秦川科技发展有限公司 物联网私密通道和公共网络模糊信息分送控制方法及装置
WO2018048411A1 (en) * 2016-09-08 2018-03-15 Hewlett-Packard Development Company, L.P. Establishing shared key data for wireless pairing
CN108156126B (zh) * 2016-12-02 2020-12-08 阿里巴巴集团控股有限公司 物联网设备的烧录校验方法及装置、身份认证方法及装置
JP2018092099A (ja) * 2016-12-07 2018-06-14 キヤノン株式会社 画像形成装置、画像形成方法
US10943005B2 (en) 2017-11-22 2021-03-09 Aeris Communications, Inc. Secure authentication of devices for internet of things
US11582233B2 (en) 2017-11-22 2023-02-14 Aeris Communications, Inc. Secure authentication of devices for Internet of Things
CN108040042B (zh) * 2017-12-05 2020-07-03 重庆邮电大学 一种针对多播情况下CoAP协议的安全方法
US10715511B2 (en) * 2018-05-03 2020-07-14 Honeywell International Inc. Systems and methods for a secure subscription based vehicle data service
CN110719248B (zh) * 2018-07-12 2021-08-17 中移（杭州）信息技术有限公司 用户数据报协议报文的转发方法及装置
CN110839240B (zh) * 2018-08-17 2022-07-05 阿里巴巴集团控股有限公司 一种建立连接的方法及装置
CN110912852B (zh) * 2018-09-14 2022-04-08 阿里巴巴集团控股有限公司 获取密钥的方法、装置和系统，存储介质和计算机终端
WO2020056272A1 (en) * 2018-09-14 2020-03-19 Spectrum Brands, Inc. Authentication of internet of things devices, including electronic locks
CN109257170A (zh) * 2018-11-02 2019-01-22 美的集团股份有限公司 密钥协商方法、设备、终端、存储介质以及系统
CN109245885A (zh) * 2018-11-02 2019-01-18 美的集团股份有限公司 密钥协商方法、设备、存储介质以及系统
US11362837B2 (en) 2018-12-10 2022-06-14 Cisco Technology, Inc. Generating trustable RPL messages having root-signed rank values
US11057211B2 (en) * 2018-12-10 2021-07-06 Cisco Technology, Inc. Secured protection of advertisement parameters in a zero trust low power and lossy network
CN111342956B (zh) * 2018-12-19 2021-06-15 美的集团股份有限公司 一种家电设备通信的方法、存储介质、家电设备和装置
CN110138772B (zh) * 2019-05-13 2022-02-25 上海英恒电子有限公司 一种通信方法、装置、系统、设备和存储介质
CN110234115A (zh) * 2019-05-23 2019-09-13 深圳和而泰家居在线网络科技有限公司 多设备通信系统和数据通信方法
WO2020258336A1 (zh) * 2019-06-28 2020-12-30 Oppo广东移动通信有限公司 一种资源配置方法、设备及存储介质
KR20220051306A (ko) * 2019-08-23 2022-04-26 삼성전자주식회사 전자 디바이스 및 전자 디바이스가 타겟 디바이스에게 제어 명령을 전달하는 방법
CN112448809B (zh) * 2019-08-30 2022-07-22 华为技术有限公司 密钥配置系统及相关方法和产品
CN113132087B (zh) * 2019-12-30 2025-07-29 国民技术股份有限公司 物联网、身份认证及保密通信方法、芯片、设备及介质
CN111835752B (zh) * 2020-07-09 2022-04-12 国网山西省电力公司信息通信分公司 基于设备身份标识的轻量级认证方法及网关
ES2788976B2 (es) * 2020-07-24 2022-03-16 Vega Crespo Jose Agustin Francisco Javier Sistema para el cifrado y autenticacion de comunicaciones con autenticacion mutua de los comunicantes
CN111917619B (zh) * 2020-07-29 2022-07-29 华人运通(江苏)技术有限公司 通信方法、装置、电子设备和可读存储介质
CN112118223B (zh) * 2020-08-11 2023-06-20 北京智芯微电子科技有限公司 主站与终端的认证方法、主站、终端及存储介质
CN112291773B (zh) 2020-12-31 2021-04-06 飞天诚信科技股份有限公司 一种认证器及其通信方法
CN112954680B (zh) * 2021-03-02 2022-12-09 西安电子科技大学 抗追溯攻击的无线传感器网络轻量级接入认证方法及系统
CN114040390B (zh) * 2021-11-17 2023-05-09 国网福建省电力有限公司 一种基于量子安全的5g虚商密钥库分发方法
TWI802447B (zh) * 2022-06-21 2023-05-11 桓達科技股份有限公司 感測器無線傳訊的封包加解密方法
WO2024160678A1 (en) * 2023-01-30 2024-08-08 Giesecke+Devrient Mobile Security Germany Gmbh Secure session capability by encryption of random numbers in handshake messages under a preshared key

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100316217A1 (en) * 2009-06-10 2010-12-16 Infineon Technologies Ag Generating a session key for authentication and secure data transfer
WO2013014609A1 (en) * 2011-07-25 2013-01-31 Koninklijke Philips Electronics N.V. Methods, devices and systems for establishing end-to-end secure connections and for securely communicating data packets

Family Cites Families (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6377691B1 (en) * 1996-12-09 2002-04-23 Microsoft Corporation Challenge-response authentication and key exchange for a connectionless security protocol
DE69839305T2 (de) * 1997-02-27 2009-04-09 Takeda Pharmaceutical Co. Ltd. Aminderivate, ihre herstellung und verwendung als inhibitoren der produktion von amyloid-beta
US6148405A (en) * 1997-11-10 2000-11-14 Phone.Com, Inc. Method and system for secure lightweight transactions in wireless data networks
WO2001013201A2 (en) 1999-08-12 2001-02-22 Sarnoff Corporation Peer-to-peer network user authentication protocol
US7424615B1 (en) 2001-07-30 2008-09-09 Apple Inc. Mutually authenticated secure key exchange (MASKE)
US20030093680A1 (en) * 2001-11-13 2003-05-15 International Business Machines Corporation Methods, apparatus and computer programs performing a mutual challenge-response authentication protocol using operating system capabilities
US20030221126A1 (en) * 2002-05-24 2003-11-27 International Business Machines Corporation Mutual authentication with secure transport and client authentication
JP2004241802A (ja) * 2003-02-03 2004-08-26 Matsushita Electric Ind Co Ltd コンテンツ配信システム及びコンテンツ蓄積装置
CN100552661C (zh) 2004-06-28 2009-10-21 Nds有限公司 用于确定接近度的系统
US8660268B2 (en) * 2008-04-29 2014-02-25 Red Hat, Inc. Keyed pseudo-random number generator
US8281134B2 (en) * 2009-01-29 2012-10-02 Symbol Technologies, Inc. Methods and apparatus for layer 2 and layer 3 security between wireless termination points
EP2276278A1 (en) * 2009-07-13 2011-01-19 Research In Motion Limited Methods and apparatus for maintaining secure connections in a wireless communication network
CN101789934B (zh) * 2009-11-17 2012-09-05 飞天诚信科技股份有限公司 网上安全交易方法和系统
US8467532B2 (en) * 2010-01-04 2013-06-18 Tata Consultancy Services Limited System and method for secure transaction of data between a wireless communication device and a server
US8842833B2 (en) * 2010-07-09 2014-09-23 Tata Consultancy Services Limited System and method for secure transaction of data between wireless communication device and server
CN102571702B (zh) * 2010-12-22 2014-11-05 中兴通讯股份有限公司 物联网中的密钥生成方法、系统和设备

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20100316217A1 (en) * 2009-06-10 2010-12-16 Infineon Technologies Ag Generating a session key for authentication and secure data transfer
WO2013014609A1 (en) * 2011-07-25 2013-01-31 Koninklijke Philips Electronics N.V. Methods, devices and systems for establishing end-to-end secure connections and for securely communicating data packets

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
LIU, C. -X. et al., "The Novel Authentication Scheme Based on Theory of Quadratic Residues for Wireless Sensor Networks", International Journal of Distributed Sensor Networks, 2013 *
UKIL, A. et al., "Lightweight Security Scheme for Vehicle Tracking System Using CoAP", International Workshop on Adaptive Security (ASPI '13), 08-12 September 2013 *

Also Published As

Publication number Publication date
ZA201408487B (en) 2016-06-29
KR20150091969A (ko) 2015-08-12
JP2015146567A (ja) 2015-08-13
US9780954B2 (en) 2017-10-03
EP2903204A1 (en) 2015-08-05
AU2014265030A1 (en) 2015-08-20
CN112217794A (zh) 2021-01-12
CN104821930A (zh) 2015-08-05
US20150222439A1 (en) 2015-08-06
KR102068367B1 (ko) 2020-01-20
JP6301244B2 (ja) 2018-03-28

Similar Documents

Publication Publication Date Title
AU2014265030B2 (en) A computer implemented system and method for lightweight authentication on datagram transport for internet of things
JP6844908B2 (ja) セキュアセッションの確立と暗号化データ交換のためのコンピュータ利用システム及びコンピュータ利用方法
CN111835752B (zh) 基于设备身份标识的轻量级认证方法及网关
JP6168415B2 (ja) 端末認証システム、サーバ装置、及び端末認証方法
US20220141004A1 (en) Efficient Internet-Of-Things (IoT) Data Encryption/Decryption
JP5345675B2 (ja) トークンとベリファイアとの間の認証のためのネットワーク・ヘルパー
JP6548172B2 (ja) 端末認証システム、サーバ装置、及び端末認証方法
WO2011017099A3 (en) Secure communication using asymmetric cryptography and light-weight certificates
CN113612797A (zh) 一种基于国密算法的Kerberos身份认证协议改进方法
JP2015146567A5 (enExample)
KR101495070B1 (ko) Ｐｔｐ프로토콜을 위한 키들을 분배하기 위한 방법들 및 장치들
RU2018103183A (ru) Взаимная аутентификация конфиденциальной связи
CN103763356A (zh) 一种安全套接层连接的建立方法、装置及系统
US10158636B2 (en) Method for setting up a secure end-to-end communication between a user terminal and a connected object
CN115766119B (zh) 通信方法、装置、通信系统及存储介质
Claeys et al. Securing complex IoT platforms with token based access control and authenticated key establishment
JP2017017686A5 (enExample)
JP2019507971A5 (enExample)
JPWO2020205217A5 (enExample)
WO2015180399A1 (zh) 一种认证方法及装置系统
CN103986716A (zh) Ssl连接的建立方法以及基于ssl连接的通信方法及装置
EP2905717A1 (en) Device and method for device and user authentication
US20240430244A1 (en) System and methods for authenticated secure session key establishment for protecting a communication between nodes in a communication network
CN110719169A (zh) 传输路由器安全信息的方法及装置
CN105991277A (zh) 基于sip通信系统的密钥分发方法

Legal Events

Date Code Title Description
DA3 Amendments made section 104

Free format text: THE NATURE OF THE AMENDMENT IS: AMEND THE PRIORITY DETAILS TO READ 377/MUM/2014 03 FEB 2014 IN

FGA Letters patent sealed or granted (standard patent)