US20100189253A1 - Privacy-enhanced e-passport authentication protocol - Google Patents
Privacy-enhanced e-passport authentication protocol Download PDFInfo
- Publication number
- US20100189253A1 US20100189253A1 US12/752,831 US75283110A US2010189253A1 US 20100189253 A1 US20100189253 A1 US 20100189253A1 US 75283110 A US75283110 A US 75283110A US 2010189253 A1 US2010189253 A1 US 2010189253A1
- Authority
- US
- United States
- Prior art keywords
- machine
- machine readable
- readable document
- sensitive information
- key
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
- 238000000034 method Methods 0.000 claims description 17
- 238000012545 processing Methods 0.000 claims description 7
- 238000011084 recovery Methods 0.000 claims description 5
- 230000005540 biological transmission Effects 0.000 claims description 3
- 238000009795 derivation Methods 0.000 claims description 3
- 238000004891 communication Methods 0.000 claims 8
- 230000007774 longterm Effects 0.000 claims 6
- 230000000977 initiatory effect Effects 0.000 claims 1
- 238000012546 transfer Methods 0.000 abstract description 2
- 230000006870 function Effects 0.000 description 4
- 230000003213 activating effect Effects 0.000 description 1
- 238000013459 approach Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000001815 facial effect Effects 0.000 description 1
- 230000002452 interceptive effect Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
- H04L9/3231—Biological data, e.g. fingerprint, voice or retina
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/30—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
- H04L9/3066—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy involving algebraic varieties, e.g. elliptic or hyper-elliptic curves
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/80—Wireless
- H04L2209/805—Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/40—Security arrangements using identity modules
- H04W12/47—Security arrangements using identity modules using near field communication [NFC] or radio frequency identification [RFID] modules
Definitions
- the reader uses the private session key b to compute a value equal to R, namely (b ⁇ 1 mod n) W and then uses the KDF to get the value corresponding to e.
- the cyphertext C is decrypted and the biometric data in the message part M 2 is recovered. The redundancy of the recovered data is checked and, if above the required level it is accepted.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- Pure & Applied Mathematics (AREA)
- Computing Systems (AREA)
- Mathematical Analysis (AREA)
- Mathematical Optimization (AREA)
- Mathematical Physics (AREA)
- Algebra (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Health & Medical Sciences (AREA)
- Life Sciences & Earth Sciences (AREA)
- Biodiversity & Conservation Biology (AREA)
- Biomedical Technology (AREA)
- General Health & Medical Sciences (AREA)
- Storage Device Security (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
Description
- This application is a divisional of U.S. patent application Ser. No. 11/436,986 filed on May 19, 2006 and claims priority from U.S. Provisional Patent Application No. 60/682,862 filed on May 20, 2005 hereby incorporated by reference.
- The present invention relates to protocols for restricting access to sensitive information embedded in documents such as passports and identity cards.
- Existing passport security technology links identity of an individual by embedding a photograph within the passport.
- The existing linkage is not cryptographically strong as substituting a different photograph is relatively easy. Also, the photograph is compared manually to the face of the traveller by the border control inspector, which has certain problems.
- To enhance security, it has been proposed to provide machine-readable passport or identity card in which biometric data is stored in a chip within the document and can be retrieved for examination. Typically, the biometric data will be an iris scan, fingerprint or images of the face of the bearer.
- The International Civil Aviation Organisation (ICAO) has proposed machine readable travel documents (MRTD), i.e. e-Passport system that authenticates the identity of individuals to border control stations by cryptographically linking the identity of the individual (such as name and nationality) to biometric data for the individual.
- The cryptographic linkage is obtained by digitally signing the identity data and biometric data of the individual. The resulting signed identity and biometric information is conveyed from the passport to a passport reader. The signature binds the identity of the individual to the biometric identity, which makes faking a passport a cryptographically hard problem. A concern arises however that each individual's biometric information is highly sensitive and should not be inadvertently made available.
- It is therefore an object of the present invention to obviate or mitigate the above disadvantages by making it more difficult for unauthorized parties to obtain the biometric information and other sensitive information from a document such as a passport.
- An embodiment of the invention will now be described with reference to the appended drawings wherein:
-
FIG. 1 is a schematic representation of a passport examination station; -
FIG. 2 is a schematic representation of the components of the passport and reader; -
FIG. 3 is a representation of an exchange of data within the station. - Referring therefore to
FIG. 1 , apassport 10 includes achip 12 and a radio frequency identification (RFID)tag 14 with anantenna 16. Areader 20 includes anantenna 22 to communicate with theantenna 16 and ascanner 24 to obtain a reference input from the 18, bearer of thepassport 10. The reference input may be a real time fingerprint scan or iris scan or a facial image. Thereader 20 includes adata processing engine 26 to manipulate data received from thepassport 10 and scanner 24 and ascreen 28 to view the results of such manipulation. Aninput device 30, such as a keyboard or mouse is included to permit user inputs. - As shown in
FIG. 2 , the chip12 contains amemory 32 to store biometric data and personal information such as name, nationality and date of birth. Thememory 32 is designed to be tamperproof and communicates with acryptographic unit 34 and data transmission network 36 connected to theantenna tag 14. - The
cryptographic unit 34 includes anarithmetic processor 38 for performing cryptographic operations and asecure memory 40 for storing private keys and certificates. Preferably, the underlying cryptographic system is an elliptic curve cryptosystem. Thecryptographic unit 34 includes the parameters of the underlying system, such as the curve, and the generator G of the points on the curve and has access to the public key Q of the passport. - In the preferred embodiment, the
memory 40 includes a private signing key d, the corresponding public key Q=dG, and a certificate, Cert Q, which is issued by a certification authority, such as the passport issuer, which certifies the public key Q. Theprocessor 38 can perform cryptographic operations such as point addition, key derivation and hash functions. Thecryptographic unit 34 also includes a random number generator (RNG) 42 to provide integers for use as private session keys. - The
data processing engine 26 of thereader 20 also includes acryptographic unit 50 including arandom number generator 52 and anarithmetic processor 54. - In operation, the
scanner 20 initiates a message transfer by activating thechip 12 through theRFID tag 14. A message M is assembled consisting of the data required for processing the passport and confirming identity such as the biometric data, bearer's name, nationality and date of birth together with the certificate of the bearer's public key Cert Q. The data utilized will depend on the information required by the passport control. - The message M is divided into two, parts, M1, M2, with the sensitive information to be maintained confidential such as the biometric data within the message part M1. Less sensitive or publicly available information such as the country of issue or visa is included in the message part M2.
- A random number k is generated by the
RNG 42 and a value R=kQ computed. The value R is used in a key derivation function (KDF) performed in theprocessor 38 to obtain a session encryption key e. Any suitable KDF may be utilized, typically one utilizing a secure hash function. - The message part M1, is checked for a predetermined level of redundancy and, if that is not met, additional data added. The session encryption key e, is used to encrypt the message part M1 to cyphertext C. The cyphertext C is then concatenated with the message part M2 and hashed using a secure hash function H to obtain a value, h, i.e. h=H(C,M2).
- A signature component s is then computed using the relationship s=k+dh mod n where n is the order of the generator G.
- Data is then transferred through the
RF ID tag 14 including the signature component s, the public part of the message M2, (which includes the certificate of the public key Q) and the cyphertext C. - The
reader 20 captures the data and initially verifies the public key Q from the certificate. It then computes a value V=sG-hQ and generates a private session key b from theRNG 52. A public session key U=bV is then computed and sent to thechip 12 through the RF ID connection. Thechip 12 confirms that the point U is a point on the curve and generates a further public key W=dU that is sent back to thereader 20. - The reader then uses the private session key b to compute a value equal to R, namely (b−1 mod n) W and then uses the KDF to get the value corresponding to e. Using the computed value of e, the cyphertext C is decrypted and the biometric data in the message part M2 is recovered. The redundancy of the recovered data is checked and, if above the required level it is accepted.
- The recovered data is then compared the reference data obtained from the scanner to authenticate the bearer of the passport.
- By separating the message and encrypting the biometric data, its confidentiality may be maintained even to an eavesdropper.
- The signing process above is quite efficient for the signer. The computation of R=kQ can be done in advance, or with assistance of fixed pre-computed multiples of Q. The most expensive step for the signer is computing W=dU.
- The data exchange may also be enhanced by providing for authentication of the
reader 20. In this way, the signer can choose whether or not to interact with the verifier. Ideally, the verifier should authenticate itself to the signer, such as by a digital signature or some symmetric key system. In this way, the signer can control to whom the message portion M1 is revealed. This can be done prior to the initial exchange of data or during the exchange before the value W is transferred. - If the signing is too expensive computationally, then the following modification is possible. The verifier sets b=1. Then W=R, which the signer has already computed during signature generation. To keep M1 confidential, this alternate approach requires that R can be sent to the verifier confidentially. In particular, passive eavesdroppers should bot be able to intercept R. This might be accomplished by physical means, such as weak RF signals, or by some form of encryption, such as the e-passport basic access control encryption system.
- By utilizing the bearer's public key Q in the computation of R, the signature cannot be verified without involvement of the bearer. In particular, the cyphertext C cannot be decrypted without the acquiescence of the bearer.
- It will be noted that once the verifier recovers R, it can compute dQ, which can be seen to enable message recovery from the signature, that is, without the interactive verification process.
Claims (17)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US12/752,831 US20100189253A1 (en) | 2005-05-20 | 2010-04-01 | Privacy-enhanced e-passport authentication protocol |
Applications Claiming Priority (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US68286205P | 2005-05-20 | 2005-05-20 | |
US11/436,986 US7720221B2 (en) | 2005-05-20 | 2006-05-19 | Privacy-enhanced e-passport authentication protocol |
US12/752,831 US20100189253A1 (en) | 2005-05-20 | 2010-04-01 | Privacy-enhanced e-passport authentication protocol |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/436,986 Division US7720221B2 (en) | 2005-05-20 | 2006-05-19 | Privacy-enhanced e-passport authentication protocol |
Publications (1)
Publication Number | Publication Date |
---|---|
US20100189253A1 true US20100189253A1 (en) | 2010-07-29 |
Family
ID=37430915
Family Applications (3)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/436,986 Active 2029-03-18 US7720221B2 (en) | 2005-05-20 | 2006-05-19 | Privacy-enhanced e-passport authentication protocol |
US12/752,831 Abandoned US20100189253A1 (en) | 2005-05-20 | 2010-04-01 | Privacy-enhanced e-passport authentication protocol |
US12/776,803 Active 2027-01-23 US8880888B2 (en) | 2005-05-20 | 2010-05-10 | Privacy-enhanced E-passport authentication protocol |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/436,986 Active 2029-03-18 US7720221B2 (en) | 2005-05-20 | 2006-05-19 | Privacy-enhanced e-passport authentication protocol |
Family Applications After (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US12/776,803 Active 2027-01-23 US8880888B2 (en) | 2005-05-20 | 2010-05-10 | Privacy-enhanced E-passport authentication protocol |
Country Status (6)
Country | Link |
---|---|
US (3) | US7720221B2 (en) |
EP (2) | EP2490366B1 (en) |
JP (1) | JP4870155B2 (en) |
CN (1) | CN101176299A (en) |
CA (1) | CA2606574C (en) |
WO (1) | WO2006122433A1 (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN104639329A (en) * | 2015-02-02 | 2015-05-20 | 浙江大学 | Method for mutual authentication of user identities based on elliptic curve passwords |
US20210320906A1 (en) * | 2014-06-23 | 2021-10-14 | Airwatch Llc | Cryptographic proxy service |
Families Citing this family (36)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE102005025806B4 (en) * | 2005-06-02 | 2008-04-17 | Bundesdruckerei Gmbh | Method for access from a terminal to an electronic device |
BRPI0712152A2 (en) * | 2006-06-09 | 2012-02-22 | Verisign, Inc. | method and apparatus for providing authentication and privacy with low complexity devices |
US7952466B2 (en) * | 2006-10-11 | 2011-05-31 | International Business Machines Corporation | Method and system for protecting RFID tags on purchased goods |
DE202007000708U1 (en) * | 2007-01-17 | 2007-04-26 | Eurodelta Gmbh | Electronic identification document e.g. identification card, reading device, has radio frequency identification chip reader as reading device for enabling execution of authenticity testing and/or function testing of identification document |
US8689296B2 (en) | 2007-01-26 | 2014-04-01 | Microsoft Corporation | Remote access of digital identities |
FR2913550A1 (en) * | 2007-03-07 | 2008-09-12 | Inside Contactless Sa | METHOD FOR SECURELY LOADING ACCESS DATA TO A SERVICE IN AN NFC CHIPSET |
KR101520617B1 (en) * | 2007-04-17 | 2015-05-15 | 삼성전자주식회사 | Method for encrypting message for keeping integrity of message and apparatus and Method for decrypting message for keeping integrity of message and apparatus |
MX2008007447A (en) * | 2007-06-07 | 2010-06-21 | Neology Inc | Systems and methods for authenticating and providing anti-counterfeiting features for import documents. |
FR2925993A1 (en) | 2007-12-31 | 2009-07-03 | Radiotelephone Sfr | USING TOOL FOR AUTHENTICATION OF DOCUMENTS, METHODS OF USING THE TOOL AND DOCUMENTS PRODUCED BY THE METHOD (S) |
WO2009095143A1 (en) * | 2008-01-28 | 2009-08-06 | Siemens Aktiengesellschaft | Asymmetrical cryptosystem |
US10169598B1 (en) | 2008-04-10 | 2019-01-01 | United Services Automobile Association | Systems and methods for sending and receiving encrypted submessages |
US8742891B2 (en) | 2008-07-16 | 2014-06-03 | Morton Greene | System and method for identifying a genuine printed document |
CA2642399C (en) * | 2008-10-30 | 2016-08-16 | Certicom Corp. | Collision-resistant elliptic curve hash functions |
US8891756B2 (en) * | 2008-10-30 | 2014-11-18 | Certicom Corp. | Collision-resistant elliptic curve hash functions |
EP2290876A1 (en) * | 2009-08-24 | 2011-03-02 | Gemalto SA | Method for establishing an electronic authorisation for a user having an electronic identity document and method for controlling said authorization. |
US8074878B1 (en) * | 2009-09-04 | 2011-12-13 | F3M3 Companies, Inc. | System and method of pre-approving applicants for visa processing using an emerging country's international travel approval control card |
CN102196423B (en) * | 2010-03-04 | 2016-07-06 | 腾讯科技(深圳)有限公司 | A kind of safety data transferring method and system |
CN101853369B (en) * | 2010-04-01 | 2012-09-26 | 西北工业大学 | Random Harsh based two-way authentication method |
CN101867474B (en) * | 2010-04-26 | 2012-09-05 | 武汉大学 | Digital signature method |
WO2013097027A1 (en) | 2011-12-28 | 2013-07-04 | Certicom Corp. | Generating digital signatures |
US20130243266A1 (en) * | 2012-03-16 | 2013-09-19 | L-1 Secure Credentialing, Inc. | iPassport Apparatus and Method |
ITRM20130114A1 (en) * | 2013-02-28 | 2014-08-29 | Marcello Bertozzi | IT SYSTEM FOR THE MANAGEMENT AND TRANSMISSION OF INFORMATION AND IMAGES IN RELATIONS BETWEEN INSTITUTIONS AND USERS |
US9495586B1 (en) | 2013-09-18 | 2016-11-15 | IDChecker, Inc. | Identity verification using biometric data |
US8995774B1 (en) | 2013-09-19 | 2015-03-31 | IDChecker, Inc. | Automated document recognition, identification, and data extraction |
US9665754B2 (en) * | 2014-05-28 | 2017-05-30 | IDChecker, Inc. | Identification verification using a device with embedded radio-frequency identification functionality |
US11640582B2 (en) | 2014-05-28 | 2023-05-02 | Mitek Systems, Inc. | Alignment of antennas on near field communication devices for communication |
US11461567B2 (en) | 2014-05-28 | 2022-10-04 | Mitek Systems, Inc. | Systems and methods of identification verification using hybrid near-field communication and optical authentication |
JP6708958B2 (en) * | 2016-06-14 | 2020-06-10 | コニカミノルタ株式会社 | Information processing terminal, information processing system, program, and control method |
JP7009743B2 (en) * | 2017-01-23 | 2022-01-26 | 凸版印刷株式会社 | Wireless communication devices and information communication systems |
GB2563925B (en) * | 2017-06-30 | 2022-02-09 | Cryptomathic Ltd | System and method |
CN111149324B (en) * | 2017-09-21 | 2023-12-29 | Lg电子株式会社 | Cryptography method and system for managing digital certificates with linked values |
GB2593116A (en) * | 2018-07-16 | 2021-09-22 | Sita Information Networking Computing Uk Ltd | Self sovereign identity |
EP3949463A1 (en) * | 2019-04-05 | 2022-02-09 | Global Id Sa | Method, electronic identity object, and terminal for recognizing and/or identifying a user |
JP7312130B2 (en) * | 2020-03-09 | 2023-07-20 | 株式会社日立製作所 | Identity verification support device, identity verification support method, and identity verification support system |
KR20240094060A (en) * | 2022-11-21 | 2024-06-25 | 주식회사 로드시스템 | Passport Information-Based Authentication Key Generation System and Method |
KR20240077653A (en) * | 2022-11-24 | 2024-06-03 | 주식회사 로드시스템 | Passport Authenticity Authentication and Information Provision System and Method |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6041410A (en) * | 1997-12-22 | 2000-03-21 | Trw Inc. | Personal identification fob |
US20020062451A1 (en) * | 1998-09-01 | 2002-05-23 | Scheidt Edward M. | System and method of providing communication security |
US20030044019A1 (en) * | 1995-04-21 | 2003-03-06 | Vanstone Scott A. | Key agreement and transport protocol |
US20040030921A1 (en) * | 2002-05-03 | 2004-02-12 | Jane Aldridge | Secure data delivery |
US20050091501A1 (en) * | 2002-01-18 | 2005-04-28 | Harro Osthoff | Loading data into a mobile terminal |
Family Cites Families (28)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20020013898A1 (en) * | 1997-06-04 | 2002-01-31 | Sudia Frank W. | Method and apparatus for roaming use of cryptographic values |
US6487661B2 (en) * | 1995-04-21 | 2002-11-26 | Certicom Corp. | Key agreement and transport protocol |
US6279110B1 (en) * | 1997-11-10 | 2001-08-21 | Certicom Corporation | Masked digital signatures |
US6230269B1 (en) * | 1998-03-04 | 2001-05-08 | Microsoft Corporation | Distributed authentication system and method |
CA2255285C (en) * | 1998-12-04 | 2009-10-13 | Certicom Corp. | Enhanced subscriber authentication protocol |
GB2364513B (en) * | 1998-12-23 | 2003-04-09 | Kent Ridge Digital Labs | Method and apparatus for protecting the legitimacy of an article |
US6636968B1 (en) * | 1999-03-25 | 2003-10-21 | Koninklijke Philips Electronics N.V. | Multi-node encryption and key delivery |
US6598161B1 (en) * | 1999-08-09 | 2003-07-22 | International Business Machines Corporation | Methods, systems and computer program products for multi-level encryption |
US7249259B1 (en) * | 1999-09-07 | 2007-07-24 | Certicom Corp. | Hybrid signature scheme |
US6792113B1 (en) * | 1999-12-20 | 2004-09-14 | Microsoft Corporation | Adaptable security mechanism for preventing unauthorized access of digital data |
US20020021804A1 (en) * | 2000-02-18 | 2002-02-21 | Ledzius Robert C. | System and method for data encryption |
US20020165912A1 (en) * | 2001-02-25 | 2002-11-07 | Storymail, Inc. | Secure certificate and system and method for issuing and using same |
AU2001288679A1 (en) * | 2000-09-11 | 2002-03-26 | Sentrycom Ltd. | A biometric-based system and method for enabling authentication of electronic messages sent over a network |
US7178027B2 (en) * | 2001-03-30 | 2007-02-13 | Capital One-Financial Corp. | System and method for securely copying a cryptographic key |
JP3859983B2 (en) * | 2001-04-27 | 2006-12-20 | 日本電信電話株式会社 | Blind signature method, apparatus thereof, program thereof and recording medium thereof |
US20030023858A1 (en) * | 2001-07-26 | 2003-01-30 | International Business Machines Corporation | Method for secure e-passports and e-visas |
JP2005500740A (en) * | 2001-08-13 | 2005-01-06 | ザ ボード オブ トラスティーズ オブ ザ リーランド スタンフォード ジュニア ユニバーシティ | ID-based encryption and related cryptosystem systems and methods |
US7146009B2 (en) * | 2002-02-05 | 2006-12-05 | Surety, Llc | Secure electronic messaging system requiring key retrieval for deriving decryption keys |
JP2005537711A (en) * | 2002-08-28 | 2005-12-08 | ドコモ コミュニケーションズ ラボラトリーズ ユー・エス・エー インコーポレーティッド | Certificate-based encryption and public key structure infrastructure |
US7418101B2 (en) * | 2003-01-07 | 2008-08-26 | Hewlett-Packard Development Company, L.P. | Securely transferring user data using first and second communication media |
JP4563037B2 (en) * | 2003-01-24 | 2010-10-13 | シャープ株式会社 | ENCRYPTION APPARATUS, DECRYPTION APPARATUS, ENCRYPTION SYSTEM HAVING THEM, ENCRYPTION METHOD, AND DECRYPTION METHOD |
EP1687931B1 (en) * | 2003-10-28 | 2021-12-29 | BlackBerry Limited | Method and apparatus for verifiable generation of public keys |
MXPA06010776A (en) * | 2004-03-22 | 2006-12-15 | Samsung Electronics Co Ltd | Authentication between device and portable storage. |
US20080000969A1 (en) * | 2004-03-25 | 2008-01-03 | Cryptomathic A/S | Electronic Voting Systems |
US8918900B2 (en) * | 2004-04-26 | 2014-12-23 | Ivi Holdings Ltd. | Smart card for passport, electronic passport, and method, system, and apparatus for authenticating person holding smart card or electronic passport |
KR100677152B1 (en) * | 2004-11-17 | 2007-02-02 | 삼성전자주식회사 | Method for transmitting content in home network using user-binding |
US7571471B2 (en) * | 2006-05-05 | 2009-08-04 | Tricipher, Inc. | Secure login using a multifactor split asymmetric crypto-key with persistent key security |
KR100867130B1 (en) * | 2007-02-23 | 2008-11-06 | (주)코리아센터닷컴 | System and method of transmitting/receiving security data |
-
2006
- 2006-05-19 US US11/436,986 patent/US7720221B2/en active Active
- 2006-05-23 EP EP12167844.5A patent/EP2490366B1/en active Active
- 2006-05-23 CA CA2606574A patent/CA2606574C/en active Active
- 2006-05-23 JP JP2008511526A patent/JP4870155B2/en active Active
- 2006-05-23 EP EP06741548A patent/EP1886437B1/en active Active
- 2006-05-23 WO PCT/CA2006/000836 patent/WO2006122433A1/en not_active Application Discontinuation
- 2006-05-23 CN CNA2006800168805A patent/CN101176299A/en active Pending
-
2010
- 2010-04-01 US US12/752,831 patent/US20100189253A1/en not_active Abandoned
- 2010-05-10 US US12/776,803 patent/US8880888B2/en active Active
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030044019A1 (en) * | 1995-04-21 | 2003-03-06 | Vanstone Scott A. | Key agreement and transport protocol |
US6041410A (en) * | 1997-12-22 | 2000-03-21 | Trw Inc. | Personal identification fob |
US20020062451A1 (en) * | 1998-09-01 | 2002-05-23 | Scheidt Edward M. | System and method of providing communication security |
US20050091501A1 (en) * | 2002-01-18 | 2005-04-28 | Harro Osthoff | Loading data into a mobile terminal |
US20040030921A1 (en) * | 2002-05-03 | 2004-02-12 | Jane Aldridge | Secure data delivery |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20210320906A1 (en) * | 2014-06-23 | 2021-10-14 | Airwatch Llc | Cryptographic proxy service |
CN104639329A (en) * | 2015-02-02 | 2015-05-20 | 浙江大学 | Method for mutual authentication of user identities based on elliptic curve passwords |
Also Published As
Publication number | Publication date |
---|---|
US8880888B2 (en) | 2014-11-04 |
EP1886437A4 (en) | 2010-11-03 |
JP4870155B2 (en) | 2012-02-08 |
WO2006122433A1 (en) | 2006-11-23 |
US7720221B2 (en) | 2010-05-18 |
EP1886437A1 (en) | 2008-02-13 |
US20070122004A1 (en) | 2007-05-31 |
JP2008541633A (en) | 2008-11-20 |
EP2490366A1 (en) | 2012-08-22 |
EP1886437B1 (en) | 2012-06-27 |
CA2606574A1 (en) | 2006-11-23 |
CN101176299A (en) | 2008-05-07 |
CA2606574C (en) | 2015-11-24 |
US20100250945A1 (en) | 2010-09-30 |
EP2490366B1 (en) | 2015-01-07 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8880888B2 (en) | Privacy-enhanced E-passport authentication protocol | |
US7188362B2 (en) | System and method of user and data verification | |
US8285991B2 (en) | Electronically signing a document | |
US7490240B2 (en) | Electronically signing a document | |
WO2001008352A1 (en) | Method and apparatus for implementing a biometric-based digital signature of document | |
Subramanya et al. | Digital signatures | |
CN111541713A (en) | Identity authentication method and device based on block chain and user signature | |
US20230344643A1 (en) | Digital signature system using scalable servers | |
Avoine et al. | epassport: Securing international contacts with contactless chips | |
JPH0962596A (en) | Electronic mail system | |
US7360238B2 (en) | Method and system for authentication of a user | |
Pasupathinathan et al. | An on-line secure e-passport protocol | |
US20230094432A1 (en) | Method, electronic identity object, and terminal for recognizing and/or identifying a user | |
Saxena et al. | A novel digital signature algorithm based on biometric hash | |
WO2020121459A1 (en) | Authentication system, client, and server | |
Balli et al. | BioID: a privacy-friendly identity document | |
Amin et al. | An efficient remote mutual authentication scheme using smart mobile phone over insecure networks | |
Li et al. | E-passport EAC scheme based on Identity-Based Cryptography | |
Seo et al. | Fuzzy vector signature and its application to privacy-preserving authentication | |
EP1267516B1 (en) | Method for securing data relating to users of a public-key infrastructure | |
US11601284B2 (en) | Digital signature system based on a cloud of dedicated local devices | |
Jiang et al. | An indirect fingerprint authentication scheme in cloud computing | |
CN116662950A (en) | Identity authentication method and device based on blockchain | |
Yu | Remote user authentication in distributed networks and systems | |
Pomykala et al. | Biometric cards with advanced signing system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: CERTICOM CORP., CANADA Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:BROWN, DANIEL R.L.;VANSTONE, SCOTT A.;SIGNING DATES FROM 20060721 TO 20060811;REEL/FRAME:024203/0035 |
|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |
|
AS | Assignment |
Owner name: OT PATENT ESCROW, LLC, ILLINOIS Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:BLACKBERRY LIMITED;REEL/FRAME:064007/0061 Effective date: 20230320 Owner name: MALIKIE INNOVATIONS LIMITED, IRELAND Free format text: NUNC PRO TUNC ASSIGNMENT;ASSIGNOR:OT PATENT ESCROW, LLC;REEL/FRAME:064015/0001 Effective date: 20230511 |