Communication devices for use in challenge-response rounds and corresponding operating methods
In accordance with a first aspect of the present disclosure, a communication device for use in one or more challenge-response rounds is provided, comprising: a response generation unit configured to generate, in each challenge-response round, a response to a challenge received from an external communication device, wherein said response is generated by performing a cryptographic function on said challenge, and wherein the cryptographic function takes said challenge and a cryptographic key as inputs; a key selection unit configured to select said cryptographic key from a set of cryptographic keys by executing a predefined key selection algorithm that has been shared with the external communication device. Further aspects of the present disclosure relate to another communication device for use in one of more challenge-response rounds, corresponding methods of operating communication devices, and computer programs for carrying out said methods.
1 . A communication device for use in one or more challenge-response rounds, comprising:
a key selection unit configured to:
execute a predefined key selection algorithm that has been shared with an external communication device;
generate a set of cryptographic keys according to the key selection algorithm; and
select a cryptographic key from the set of cryptographic keys; and
a response generation unit coupled to the key selection unit and configured to:
receive the selected cryptographic key from the key selection unit;
receive a challenge from the external communication device;
perform a cryptographic function utilizing the received challenge and the selected cryptographic key; and
generate, in each challenge-response round, a response based on the performed cryptographic function.
2 . The communication device of claim 1 , wherein selecting the cryptographic key comprises selecting a different cryptographic key from the set of cryptographic keys for each challenge-response round.
3 . The communication device of claim 1 , wherein selecting the cryptographic key comprises selecting the cryptographic key from a subset of the set of cryptographic keys, wherein the subset does not include all the cryptographic keys from the set.
4 . The communication device of claim 1 , wherein selecting the cryptographic key comprises selecting the same cryptographic key from the set of cryptographic keys for a predefined number of consecutive challenge-response rounds.
5 . The communication device of claim 1 , wherein selecting the cryptographic key comprises selecting the cryptographic key from the set of cryptographic keys in a predefined order.
6 . The communication device of claim 5 , wherein the predefined order depends on at least one of the following parameters: an identifier of the communication device, a randomization key, and an authentication round.
7 . The communication device of claim 1 , wherein generating the set of cryptographic keys comprises deriving the cryptographic keys from a master key.
8 . The communication device of claim 1 , wherein the communication device acts as a prover in an authentication protocol.
9 . A method of operating a communication device for use in one or more challenge-response rounds, the method comprising performing in each challenge-response round:
executing a predefined key selection algorithm that has been shared with an external communication device;
generating a set of cryptographic keys according to the key selection algorithm;
selecting a cryptographic key from the set of cryptographic keys;
receiving a challenge from the external communication device;
performing a cryptographic function utilizing the received challenge and the selected cryptographic key;
generating a response based on the performed cryptographic function; and
transmitting the response to the external communication device.
10 . The method of claim 9 , wherein the method is embodied in a computer program comprising executable instructions stored in a non-transitory medium which, when executed by a communication device, performs the method.
11 . A communication device for use in one or more challenge-response rounds, comprising:
a key selection unit configured to:
execute a predefined key selection algorithm that has been shared with an external communication device;
generate a set of cryptographic keys according to the key selection algorithm; and
select a cryptographic key from the set of cryptographic keys; and
a response verification unit configured to:
receive a response from the external communication device; and
verify, for each challenge-response round, the response using the selected cryptographic key.
12 . The communication device of claim 11 , wherein selecting the cryptographic key comprises selecting, in each challenge-response round, a different cryptographic key from said set of cryptographic keys.
13 . The communication device of claim 11 , wherein selecting the cryptographic key comprises selecting the cryptographic key from a subset of the set of cryptographic keys, wherein the subset does not include all the cryptographic keys from said set.
14 . The communication device of claim 11 , wherein selecting the cryptographic key comprises selecting the cryptographic key for a predefined number of consecutive challenge-response rounds.
15 . The communication device of claim 11 , wherein selecting the cryptographic key comprises selecting the cryptographic key from the set of cryptographic keys in a predefined order.
16 . The communication device of claim 15 , wherein the predefined order depends on at least one of the following parameters: an identifier of the communication device, a randomization key, and an authentication round.
17 . The communication device of claim 11 , wherein the communication device acts as a verifier in an authentication protocol.
18 . A method of operating a communication device for use in one of more challenge-response rounds, the method comprising performing in each challenge-response round:
executing a predefined key selection algorithm that has been shared with an external communication device;
generating a set of cryptographic keys according to the key selection algorithm;
selecting a cryptographic key from the set of cryptographic keys;
receiving a response from the external communication device; and
verifying, for each challenge-response round, the response using the selected cryptographic key.
19 . The method of claim 18 , wherein the method is implemented as a computer program comprising executable instructions stored in a non-transitory medium which, when executed by a communication device performs the method.