IP Library Granted Patent US 11,849,043
Granted Patent B2
US 11,849,043 · App. 17/097,795 · Granted Dec 19, 2023

Zero-knowledge authentication based on device information

Inventors: Priyanka Savitkumar Vedeshwar (Bangalore, IN); Vittal K Biradar (Bangalore, IN)
Assignee: SONY GROUP CORPORATION
H04L9/3218H04L9/0866H04L9/3073H04L9/3242
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,849,043
App. No.
17/097,795
Granted
Dec 19, 2023
Kind
B2
Abstract

An electronic device generates a first key pair associated with the electronic device. A first secret key of the first key pair is generated based on device properties including identification information of the electronic device. The electronic device transmits a communication request to a verifier device. The electronic device generates zero-knowledge information which is based on the generated first secret key. A first public key of the first key pair is stored in the verifier device. The electronic device transmits the zero-knowledge information to the verifier device for a verification of the transmitted communication request. The verification of the communication request is based on the first public key. The electronic device receives verification information from the verifier device based on the transmitted zero-knowledge information and a successful verification of the verification of the transmitted communication request. The electronic device communicates with the verifier device based on the received verification information.

Claims (103)

1. An electronic device, comprising:

a processor configured to:

generate a first key pair associated with the electronic device, wherein

a secret key of the first key pair is generated based on time information, location information, and at least one device property including identification information of the electronic device, and

the time information indicates a date and a time of the generation of the secret key;

transmit a communication request to a verifier device, wherein the communication request corresponds to a request for communication between the electronic device and the verifier device;

determine at least one random number;

generate a first parameter of a set of randomized parameters based on the determined at least one random number;

generate a random message of the set of randomized parameters associated with the electronic device;

concatenate the generated first parameter and the generated random message;

determine first hash information based on application of a first hash function on the concatenated first parameter and the generated random message;

generate first zero-knowledge information, wherein

the first zero-knowledge information is based on the generated secret key of the first key pair, the generated random message, and the first hash information, and

a first public key of the first key pair is stored in the verifier device;

transmit the first zero-knowledge information to the verifier device for a verification of the transmitted communication request, wherein the verification of the transmitted communication request is based on the first public key associated with the electronic device and stored in the verifier device;

receive verification information from the verifier device based on the transmitted first zero-knowledge information and a successful verification of the verification of the transmitted communication request; and

communicate with the verifier device based on the received verification information.

2. The electronic device according to claim 1 , wherein the processor is further configured to generate the first public key of the first key pair based on the generated secret key.

3. The electronic device according to claim 1 , wherein the processor is further configured to:

determine the first hash information based on an application of the first hash function on the set of randomized parameters; and

transmit the determined first hash information with the generated first zero-knowledge information to the verifier device.

4. The electronic device according to claim 3 , wherein the verifier device

generates second hash information based on an application of a second hash function on the first public key stored in the verifier device and on the set of randomized parameters included in the transmitted first zero-knowledge information;

compares the received first hash information with the generated second hash information; and

generates the verification information based on the comparison.

5. The electronic device according to claim 4 , wherein the generation of the verification information indicates that the received first hash information and the generated second hash information are same.

6. The electronic device according to claim 1 , wherein the processor is further configured to:

generate a second parameter of the set of randomized parameters based on the determined first hash information, the secret key and the determined at least one random number;

generate second zero-knowledge information based on the determined first hash information, the generated random message, and the generated second parameter that is based on the secret key associated with the electronic device; and

transmit the generated second zero-knowledge information to the verifier device.

7. The electronic device according to claim 1 , wherein the processor is further configured to:

transmit the first public key of the first key pair to the verifier device for a setup of the communication between the electronic device and the verifier device; and

receive a second public key of a second key pair associated with the verifier device for completion of the setup of the communication between the electronic device and the verifier device.

8. A method, comprising:

in an electronic device:

generating a first key pair associated with the electronic device, wherein

a secret key of the first key pair is generated based on time information, location information, and at least one device property including identification information of the electronic device, and

the time information indicates a date and a time of the generation of the secret key;

transmitting a communication request to a verifier device, wherein the communication request corresponds to a request for communication between the electronic device and the verifier device;

determining at least one random number;

generating a first parameter of a set of randomized parameters based on the determined at least one random number;

generating a random message of the set of randomized parameters associated with the electronic device;

concatenating the generated first parameter and the generated random message;

determining first hash information based on application of a first hash function on the concatenated first parameter and the generated random message;

generating first zero-knowledge information, wherein

the first zero-knowledge information is based on the generated secret key of the first key pair associated with the electronic device, the generated random message, and the first hash information, and

a first public key of the first key pair is stored in the verifier device;

transmitting the first zero-knowledge information to the verifier device for a verification of the transmitted communication request, wherein the verification of the transmitted communication request is based on the first public key of the first key pair associated with the electronic device and stored in the verifier device;

receiving verification information from the verifier device based on the transmitted first zero-knowledge information and a successful verification of the verification of the transmitted communication request; and

communicating with the verifier device based on the received verification information.

9. The method according to claim 8 , wherein

the first public key of the first key pair is generated based on the generated secret key.

10. The method according to claim 8 , further comprising:

determining the first hash information based on an application of the first hash function on the set of randomized parameters; and

transmitting the determined first hash information with the generated first zero-knowledge information to the verifier device.

11. The method according to claim 10 , further comprising:

determining the first hash information based on the application of the first hash function on the generated first parameter of the set of randomized parameters.

12. A verifier device, comprising:

a processor; and

a memory configured to store a first public key associated with a first electronic device, wherein the processor is configured to:

receive a communication request from the first electronic device, wherein the communication request corresponds to a request for communication between the verifier device and the first electronic device;

receive zero-knowledge information from the first electronic device, wherein

the first electronic device generates the zero-knowledge information based on a first secret key of a first key pair associated with the first electronic device, a random message, and a first hash information,

the random message is generated from a set of randomized parameters associated with the first electronic device,

the first secret key of the first key pair is generated based on time information, location information, and at least one device property including identification information of the first electronic device,

the time information indicates a date and a time of the generation of the secret key, and

the first hash information is determined based on concatenation of a first parameter and the random message;

generate verification information based on the received zero-knowledge information and the stored first public key associated with the first electronic device; and

transmit the generated verification information to the first electronic device for the communication between the verifier device and the first electronic device.

13. The verifier device according to claim 12 , wherein the processor is further configured to:

receive first hash information from the first electronic device with the zero-knowledge information;

generate second hash information based on an application of a second hash function on the first public key stored in the verifier device and on the set of randomized parameters included in the received zero-knowledge information;

compare the received first hash information with the generated second hash information; and

generate the verification information based on the comparison, wherein the generation of the verification information indicates that the received first hash information and the generated second hash information are same.

14. The verifier device according to claim 13 , wherein the processor is further configured to:

generate a third parameter of the set of randomized parameters based on a second parameter received from the first electronic device, the first public key associated with the first electronic device, and the received first hash information; and

generate the second hash information based on the application of the second hash function on the generated third parameter of the set of randomized parameters and the random message included in the received zero-knowledge information.

15. The verifier device according to claim 12 , wherein the processor is further configured to:

generate a second key pair that includes a second secret key and a second public key based on at least one device property of the verifier device, wherein the at least one device property of the verifier device includes identification information of the verifier device;

transmit the second public key of the second key pair to the first electronic device for a setup of the communication between the verifier device with the first electronic device; and

receive the first public key of the first key pair associated with the first electronic device for completion of the setup of the communication between the verifier device with the first electronic device.

16. The verifier device according to claim 12 , wherein the processor is further configured to:

receive a disable command from a second electronic device communicatively coupled to the verifier device, wherein the disable command relates to disablement of the first public key stored in the verifier device;

remove the stored first public key associated with the first electronic device from the memory based on the received disable command from the second electronic device;

receive a third public key of a third key pair associated with the second electronic device for a setup of the communication between the verifier device and the second electronic device; and

transmit a second public key associated with the verifier device to the second electronic device for completion of the setup of the communication between the verifier device and the second electronic device.

17. A method, comprising:

in a verifier device:

receiving a communication request from an electronic device, wherein the communication request corresponds to a request for communication between the verifier device and the electronic device;

receiving zero-knowledge information from the electronic device, wherein

the electronic device generates the zero-knowledge information based on a first secret key of a first key pair associated with the electronic device, a random message, and a first hash information,

the random message is generated from a set of randomized parameters associated with the electronic device,

the first secret key of the first key pair is generated based on time information, location information, and at least one device property including identification information of the electronic device,

the time information indicates a date and a time of the generation of the secret key, and

the first hash information is determined based on concatenation of a first parameter and the random message;

generating verification information based on the received zero-knowledge information and a first public key associated with the electronic device and stored in the verifier device; and

transmitting the generated verification information to the electronic device for the communication between the verifier device and the electronic device.

18. The method according to claim 17 , further comprising:

receiving the first hash information from the electronic device with the zero-knowledge information;

generating second hash information based on an application of a second hash function on the first public key stored in the verifier device and on the set of randomized parameters included in the received zero-knowledge information;

comparing the received first hash information with the generated second hash information; and

generating the verification information based on the comparison.

19. The method according to claim 18 , wherein the verification information indicates that the received first hash information and the generated second hash information are same.

Assignments (3)
CHANGE OF NAME Recorded Sep 8, 2021
From: SONY CORPORATION
To: SONY GROUP CORPORATION
Reel/Frame 057437/0093 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 13, 2020
From: VEDESHWAR/, PRIYANKA SAVITKUMAR; BIRADAR/, VITTAL K
To: SONY CORPORATION
Reel/Frame 054364/0407 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 13, 2020
From: VEDESHWAR, PRIYANKA SAVITKUMAR; BIRADAR, VITTAL K
To: SONY CORPORATION
Reel/Frame 054365/0979 →
Continuity (1)
Related Publication 20220158835A1 · May 19, 2022