초록 ▼

An entity such as a smart card includes microprocessor means, input/output means, and PROM storage means which stores a set of transformations Si (i=1, . . . , n) of a corresponding set of public factors F1 (i=1, . . . , n), where Si=Fid (mod N), d being the secret key counterpart of a public key e

An entity such as a smart card includes microprocessor means, input/output means, and PROM storage means which stores a set of transformations Si (i=1, . . . , n) of a corresponding set of public factors F1 (i=1, . . . , n), where Si=Fid (mod N), d being the secret key counterpart of a public key e associated with the modulus N, which is the product of two primes. An authentication device which stores the public factors Fi and the values of N and e, generates an n bit random vector v=vi which is transmitted to the card where a product Y of the values Si selected according to the 1 bits of v is computed and transmitted to the authentication device which computes Xact=Ye (mod N) and also computes Xref, the product of the Fi selected according to the 1 bits of v. If Xact and Xref are equal, then the card is authenticated to within a certain probability. An analogous method is disclosed for certifying messages to be transmitted. In further embodiments, a higher degree of security is achieved by arranging for the entity being authenticated, or the certifying entity, to select an additional secret factor or plurality of secret factors.

대표청구항 ▼

A method for preparing an entity to be authenticated by an authenticating device including: selecting a modulus N which is a product of two or more prime numbers; selecting an integer e which is relatively prime to FF1 (mod F1, . . . , Fn, 0i Si=Fid (mod N) for i=1, . . , n; and storing the n values

A method for preparing an entity to be authenticated by an authenticating device including: selecting a modulus N which is a product of two or more prime numbers; selecting an integer e which is relatively prime to FF1 (mod F1, . . . , Fn, 0i Si=Fid (mod N) for i=1, . . , n; and storing the n values Si, i=1, . . . , n, and the value N in said entity.