Method, system and device for synchronizing between server and mobile device
An arrangement and corresponding method for authentication synchronizing cryptographic key information between a server and a client device, via data signals, where the client device at least comprises one client. The server is at least configured to generate and send to the client device a current encryption key and a next encryption key. The client device is at least configured to encrypt information on the client device using the next encryption key and the client device is at least configured to return a correct One Time Password using the current encryption key. As a consequence of the received correct One Time Password the server then knows that the client has received the current encryption key, used it and stored the information with the next encryption key.
1. A client device for synchronizing cryptographic key information in a client server arrangement, comprising:
a processor and a memory, wherein
the client device is configured to receive a current encryption key and to receive a next encryption key from a server, and
the client device is configured to encrypt information using the next encryption key and to store the encrypted information with the next encryption key,
the client device is configured to return at least one One Time Password using the current encryption key,
the client device is further configured to request encryption keys from the server,
a state of the client device is not communicated to the server, and
the client device is configured to receive at least two encryption keys from the server, and
the client device is configured to generate two One Time Passwords as a response using the at least two encryption keys received from the server.
2. The client device of claim 1 ,
wherein the client device is configured to receive the current encryption key and the next encryption key, the encryption keys are used to encrypt the information, to obtain the encrypted information, and store the encrypted information on the client device, and
wherein the client device is configured to return a One Time Password to the server.
3. A server for synchronizing cryptographic key information in a client server arrangement, comprising:
a processor and a memory,
wherein the server is configured to generate and send, to a client device, a current encryption key and a next encryption key,
the server is configured to receive at least one One Time Password generated by the client device using the current encryption key to decrypt information,
the server is configured to verify that the client device has received the next encryption key, used the next encryption key to encrypt information, and stored the encrypted information,
the server is further:
configured to respond, to the request for encryption keys, by generating and sending a candidateKeyl and candidateKey 2 to the client device when the server does not include information about which encryption key selected from a group consisting of the current encryption key and the next encryption key is being used by the client device to encrypt information at the client device, and
configured to receive from the client device two One Time Passwords generated by the client device by using the respective ones of the candidateKeys sent from the server.
4. A method for synchronizing cryptographic key information between a server and a client device, comprising:
delivering, from the server, a current encryption key and a next encryption key usable to encrypt information on the client device,
receiving, from the server, a current encryption key and a next encryption key at the client device,
encrypting information on the client device using the next encryption key,
generating at least one One Time Passwords at the client device using the current encryption key, and
sending from the client device the at least one One Time Password to the server, wherein the server is configured to confirm that the client device has received the current encryption key, used the current encryption key to encrypt information and stored the encrypted information with the next encryption key based upon receipt of the One Time Password,
requesting, by the client device, encryption keys from the server, wherein the server upon receipt of the request is configured to generate and send a candidateKey 1 and candidateKey 2 to the client device when the server does not include information about which encryption key selected from a group consisting of the current encryption key and the next encryption key was used by the client device to encryption of information at the client device, and
generating, by the client device, at least a first One Time Password using the candidateKey 1 and a second One Time Password using the candidateKey 2 when the information on the client device is not being encrypted with a new encryption key.