Granted Patent B2

US 12,250,321 · App. 17/429,137 · Granted Mar 11, 2025

Inventors: Dacfey Dzung (Wettingen, CH); Thanikesavan Sivanthi (Würenlingen, CH)

Assignee: Hitachi Energy Ltd

H04L9/3242H04L9/50H04L2209/30

Abstract

Claims (57)

1. A method for message authentication, comprising preparing a data block having a block length;

determining an available length based on the block length and a maximum length of a data frame;

calculating a message authentication code (MAC) based on the data block, the MAC having a MAC length not greater than the available length;

calculating an additional MAC based on the data block, the additional MAC having an additional MAC length not greater than the available length;

creating the data frame that comprises the data block and the MAC; and

creating an additional data frame that comprises the data block and the additional MAC.

2. The method of claim 1 , further comprising encrypting the data block.

3. The method of claim 1 , further comprising transmitting or storing the data frame and transmitting or storing the additional data frame.

4. The method of claim 3 , wherein the MAC or the additional MAC is calculated based on the data block and a previously transmitted or stored data block.

5. The method of claim 3 , further comprising:

receiving or retrieving the data frame and the additional data frame; and

verifying the MAC and the additional MAC.

6. The method of claim 5 , further comprising attributing a trust level to the data frame and to the additional data frame.

7. The method of claim 6 , further comprising verifying that the trust level is above a threshold of acceptance.

8. The method of claim 5 , further comprising attributing a trust level to the data block and verifying that the trust level is above a threshold of acceptance.

9. The method of claim 1 , wherein preparing the data block comprises:

preparing the data block having an uncompressed length; and

compressing the data block to obtain a compressed data block that has a compressed length that is smaller than the uncompressed length, the compressed length being the block length.

10. The method of claim 9 , further comprising encrypting the data block.

11. The method of claim 9 , further comprising transmitting or storing the data frame.

12. The method of claim 11 , wherein the MAC is calculated based on the data block and a previously transmitted or stored data block.

13. The method of claim 11 , further comprising receiving or retrieving the data frame and verifying the MAC.

14. The method of claim 13 , further comprising attributing a trust level to the data frame and verifying that the trust level is above a threshold of acceptance.

15. The method of claim 13 , further comprising attributing a trust level to the data block.

16. The method of claim 15 , further comprising verifying that the trust level is above a threshold of acceptance.

17. The method of claim 9 , further comprising:

preparing a second data block having a second uncompressed length;

compressing the second data block to obtain a second compressed data block that has a second compressed length that is smaller than the second uncompressed length;

determining a second available length based on the second compressed length and the maximum length of a second data frame;

calculating a second MAC based on the second data block, the second MAC having a second MAC length not greater than the second available length, wherein the second MAC length is different than the MAC length; and

creating the second data frame comprising the second data block and the second MAC.

18. A non-transitory computer-readable data carrier having stored thereon a computer program comprising instructions which, when the computer program is executed by a computer or a computer system, cause the computer or the computer system to carry out the method of claim 1 .

19. A non-transitory computer-readable data carrier having stored thereon a computer program comprising instructions which, when the computer program is executed by a computer or a computer system, cause the computer or the computer system to carry out the method of claim 9 .

20. A device for generating authenticated messages, the device comprising:

a non-transitory computer-readable memory storing instructions; and

a computer processing device coupled to the memory and configured to execute the instructions to:

prepare a data block having an uncompressed length or a block length;

compress the data block such that the compressed data block has a compressed length smaller than the uncompressed length;

determine an available length based on the compressed length and a maximum length of a data frame;

calculate a message authentication code (MAC) based on the data block, the MAC having a MAC length not greater than the available length; and

create the data frame, which comprises the data block and the MAC;

calculate an additional MAC having an additional MAC length not greater than the available length; and

create an additional data frame that comprises the data block and the additional MAC.

21. A system for authenticating messages comprising:

the device according to claim 20 ; and

a device for receiving authenticated messages, wherein the device for receiving authenticated messages is configured to:

receive a data frame that comprises a data block and a received MAC;

verify the received MAC;

receive an additional data frame that comprises the data block and an additional received MAC; and

verify the additional received MAC.

22. A device for receiving authenticated messages, the device comprises:

a non-transitory computer-readable memory storing instructions; and

a computer processing device coupled to the memory and configured to execute the instructions to:

receive a data frame that comprises a data block and a Message Authentication Code (MAC);

verify the MAC;

receive an additional data frame that comprises the same data block and an additional MAC; and

verify the additional MAC.

Assignments (5)

Priority Claims (1)

Continuity (1)

References Cited (26)