초록 ▼

The system includes a first card-like unit adapted to communicate with a second unit. The second unit grants conditional access to a function or service in accordance with an authentication operation. Both units are capable of running software for generating passwords by means of encryption of sever

The system includes a first card-like unit adapted to communicate with a second unit. The second unit grants conditional access to a function or service in accordance with an authentication operation. Both units are capable of running software for generating passwords by means of encryption of several dynamic variables as for example a time dependent variable and/or a variable representing the number of formulated authentication requests. The encryption may be performed using a dynamic key. In order to synchronize the values of the variables generated in concert but independently in the units, only some of the least significant digits of the variables are transferred from the card-like unit to the other unit, with the transfer being performed by adding the digits to the password. This synchronization information is combined with corresponding variables in the second unit and used to calculate therein a value which has to match with the password calculated in the second unit in order to gain access to the function or service.

대표청구항 ▼

[ I claim:] [1.] A system for authentication of individuals and/or messages, including at least one first portable unit personalized for an individual and at least one second verification unit capable of delivering an authentication function authenticating said individual and/or said messages,(a) sa

[ I claim:] [1.] A system for authentication of individuals and/or messages, including at least one first portable unit personalized for an individual and at least one second verification unit capable of delivering an authentication function authenticating said individual and/or said messages,(a) said first unit comprising:first generating means for generating at least a first variable;first calculating means for producing a first password with the aid of at least a first encryption algorithm using an encryption key for encrypting at least said first variable;transmission means for transmitting said first password to said second unit;(b) said second unit comprising:second generating means for, in response to an authentication request made by way of a specified one of said first units, generating at least a second variable assigned to this first unit;second calculating means for producing a second password with the aid of at least one second encryption algorithm using an encryption key for encrypting at least said second variable, said first and second variables being produced in concert, but independently in said first and second units;means for comparing said first and second passwords;delivering means for, in the event of a predetermined consistency of said passwords, deliver said authentication function;said transmission means being configured so as to transmit with said first password n digits having the least significant weight of said first variable from said first unit to said second unit;(c) said second unit further comprising:j) substituting means for, based on the current value of said second variable, generating a substituted value wherein n digits having the least significant weight are replaced by said n digits having the least significant weight of said first variable, said second variable thereby comprising a replaced first group of n least significant digits and a second group of m highest significant digits;jj) third calculating means fork) retaining as second variable for the calculation of said second password said substituted variable, if said substituted variable and said current value of said second variable are consistent with at least a first predetermined condition,kk) if said first predetermined condition is not satisfied, adjusting in said substituted value by one unit said second group of m highest significant digits, said adjusting being dependent from a second predetermined condition, said adjusting generating a substituted and adjusted variable, andkkk) retaining as second variable for the calculation of said second password said substituted and adjusted variable.