Patent ID: 9160534
Filing Date: 2015-10-13
Classification: H04L

Abstract:
1. An authentication method between an authenticate and an authenticator, the authenticatee comprising a memory and first circuitry, and which stores in the memory a plurality of pieces of secret information XY and a plurality of pieces of secret information XY E , which are created by encrypting the plurality of pieces of secret information XY, and the authenticator comprising second circuitry, and which authenticates the authenticatee, the method comprising: executing, by the authenticator, a decryption process on the secret information XY receiving, by the authenticatee, a random number B that is generated by the authenticator, and loading the secret information XY; generating, by the authenticatee, a random number A and data ν (ν having a probability η of occurrence of 1 (η<0.5)); generating, by the authenticatee, a first random number D that is composed of at least a part of the generated random number A and the received random number B; generating, by the authenticatee, first data C by executing a compression operation with respect to at least a part of the first random number D and the secret information XY; transmitting, by the authenticatee, a calculated result Z from the data v and the first data C, to the authenticator; generating, by the authenticator, a second random number D that is composed of at least a part of the generated random number A and the received random number B; generating, by the authenticator, second data C by executing a compression operation with respect to at least a part of the second random number D and the secret information XY; determining, by the authenticator, authenticity of the authenticatee by calculating a weighted value from the received calculated result Z and the generated second data C; and authenticating the authenticatee, by the authenticator, when the weighted value is less than a predetermined value.