公开(公告)号：US09780954B2

公开(公告)日：2017-10-03

申请号：US14573755

申请日：2014-12-17

Applicant: Tata Consultancy Services Ltd.

Inventor： Abhijan Bhattacharya ,  Soma Bandyopadhyay ,  Arijit Ukil ,  Arpan Pal

IPC: H04L9/32 ,  H04L9/08 ,  H04L29/06 ,  H04W4/00 ,  H04L29/08 ,  H04L9/06

CPC classification number: H04L9/3273 ,  H04L9/0637 ,  H04L9/0869 ,  H04L63/0869 ,  H04L63/166 ,  H04L67/12 ,  H04L2209/805 ,  H04W4/70

Abstract: A computer implemented system and method for lightweight authentication on datagram transport for internet of things provides a robust authentication scheme based on challenge-response type of exchanges between two endpoints sharing a pre-shared secret. A symmetric key-based security mechanism is utilized in the present disclosure where key management is integrated with authentication. It provides mutual authentication wherein the end-points in the system are provisioned with a pre-shared secret during a provisioning phase and a client database is provided at the server side for client identification. The system comprises random number generators for generation of nonces, and key generators to generate secret key and session key. The nonces and keys are valid only during the session and thus help in providing secure authentication across sessions.The system can be further adapted on transport layer security protocols like DTLS and can be integrated with application layer protocols like CoAP for constrained devices.

公开(公告)号：US20150222439A1

公开(公告)日：2015-08-06

申请号：US14573755

申请日：2014-12-17

Applicant: Tata Consultancy Services Ltd.

Inventor： Abhijan Bhattacharya ,  Soma Bandyopadhyay ,  Arijit Ukil ,  Arpan Pal

IPC: H04L9/32 ,  H04L9/08 ,  H04L29/06

CPC classification number: H04L9/3273 ,  H04L9/0637 ,  H04L9/0869 ,  H04L63/0869 ,  H04L63/166 ,  H04L67/12 ,  H04L2209/805 ,  H04W4/70

Abstract: A computer implemented system and method for lightweight authentication on datagram transport for internet of things provides a robust authentication scheme based on challenge-response type of exchanges between two endpoints sharing a pre-shared secret. A symmetric key-based security mechanism is utilized in the present disclosure where key management is integrated with authentication. It provides mutual authentication wherein the end-points in the system are provisioned with a pre-shared secret during a provisioning phase and a client database is provided at the server side for client identification. The system comprises random number generators for generation of nonces, and key generators to generate secret key and session key. The nonces and keys are valid only during the session and thus help in providing secure authentication across sessions.The system can be further adapted on transport layer security protocols like DTLS and can be integrated with application layer protocols like CoAP for constrained devices.

Abstract translation: 用于物联网的数据报传输的轻量认证的计算机实现的系统和方法提供了一种基于共享预共享秘密的两个端点之间的质询 - 响应类型的交换的鲁棒认证方案。 在本公开中使用基于对称密钥的安全机制，其中密钥管理与认证集成。 它提供相互认证，其中系统中的端点在供应阶段被提供预共享密钥，并且在服务器端提供客户端数据库以进行客户端识别。 该系统包括用于生成随机数的随机数生成器，以及用于生成密钥和会话密钥的密钥生成器。 随机数和密钥只在会话期间有效，从而有助于跨会话提供安全认证。 该系统可以进一步适用于诸如DTLS之类的传输层安全协议，并且可以与受限设备的应用层协议（如CoAP）集成。