Patent ID: 9049026
Filing Date: 2015-06-02
Classification: H04L

Abstract:
1. An authentication method between an authenticatee, including first circuitry and which stores first secret information, second secret information, third secret information and fourth secret information, where the third and fourth secret information are created by encrypting the first and second secret information, respectively (data size: the second secret information<the first secret information the fourth secret information<the third secret information), and an authenticator including second circuitry and which authenticates the authenticatee, comprising: executing, by the authenticator including the second circuitry, a decryption process on the third and fourth secret information, which is received from the authenticatee, and sharing the first and second secret information; generating, by the authenticator including the second circuitry, fifth secret information based on the first and second secret information; receiving, by the authenticatee including the first circuitry, a random number B which is generated by the authenticator, and loading the first and second secret information; generating, by the authenticatee including the first circuitry, fifth secret information based on the first and second secret information; generating, by the authenticatee including the first circuitry, a random number A and data ν (ν having a probability η of occurrence of 1 (η<0.5)); generating, by the authenticatee including the first circuitry, a random number D which is composed of at least a part of the generated random number A and the received random number B; generating, by the authenticatee including the first circuitry, data C by executing a compression operation with respect to at least a part of the random number D and the fifth secret information; transmitting, by the authenticatee including the first circuitry, a calculated result Z from the data ν and the data C, to the authenticator; generating, by the authenticator including the second circuitry, a random number D which is composed of at least a part of the generated random number B and the received random number A; generating, by the authenticator including the second circuitry, data C by executing a compression operation with respect to at least a part of the random number D and the fifth secret information; and executing, by the authenticator including the second circuitry, a determination process by using the received calculated result Z and the generated data C, a successful result of the determination process by the authenticator authenticating the authenticatee.