Patent · US Expired

Computing device communication with replay protection

US6633980B1 · kind B1 · utility

19Cited by
3References
21Claims
0Family size

Assignee

Inventor

Key dates

Filing dateJun 14, 1999
Grant dateOct 14, 2003
Priority date
Expiry dateJun 14, 2019

Classification

  • Technology area (CPC H)Electricity
  • CPC primaryH04L63/1466
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

A replay attack prevention technique uses a secret algorithm exchanged between client and servers computers. The algorithm is used to periodically alter a special replay key. The replay key may then be used to alter the message sent or alter the digest appended to the message such that the message and or its digest varies as time progresses. An unscrupulous third party who replays a stolen operation message would be unaware of the replay key and its variation. Any stolen message that is replayed by the third party would not include the time varying aspect as expected by the server computer. The server computer would thus be able to detect the attempted fraud. The secret replay key may be exchanged during the communication session in an encrypted form, or may be exchanged earlier.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.