Patent · US Expired

Challenge-response authentication and key exchange for a connectionless security protocol

US6377691B1 · kind B1 · utility

138Cited by
21References
28Claims
0Family size

Assignee

Inventors

Key dates

Filing dateDec 9, 1996
Grant dateApr 23, 2002
Priority date
Expiry dateDec 9, 2016

Classification

  • Technology area (CPC H)Electricity
  • CPC primaryH04L63/12
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

The disclosed system uses a challenge-response authentication protocol for datagram-based remote procedure calls. Using a challenge-response authentication protocol has many advantages over using a conventional authentication protocol. There are two primary components responsible for communication using the challenge-response protocol: a challenge-response protocol component on the client computer (client C-R component) and a challenge-response protocol component on the server computer (server C-R component). In order to start a session using the challenge-response protocol, the client C-R component first generates a session key. The session key is used by both the client C-R component and the server C-R component for encrypting and decrypting messages. After creating the session key, the client C-R component encrypts a message containing a request for a remote procedure call and sends it to the server C-R component. In response, the server C-R component sends a challenge to the client C-R component. The challenge contains a unique identifier generated by the server C-R component. The client C-R component responds to the challenge by sending a challenge response and the session key…

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.