Erstes Verfahren zum Sicheren Austausch eines Ersten im Voraus Geteilten Schlüssels zwischen einem Ersten Knoten und einem Zweiten Knoten für eine Ipsec-Kommunikation
Anmelder: Valeo Comfort and Driving Assistance 🇫🇷
Details
- Veröffentlichungs-Nr.
- EP4804455
- Anmeldetag
- 4. März 2025
- Veröffentlichung
- 9. September 2026
- Rechtsraum
- EP
- IPC
- H04L9/08
Abstract
The invention relates to a first method (Mth) for secure exchanging a first pre-shared key (PSK) between a first node (A) and a second node (B) for an IPSec communication, said first node (A) comprising a first secure zone (Z'<sub>A</sub>) where a master key (MK) is stored and a first non-secure zone (Z'<sub>A</sub>), and said second node (B) comprising a second secure zone (Z<sub>B</sub>) where the master key (MK) is stored and a second non-secure zone (Z'<sub>B</sub>), wherein said first method (Mth) comprises:- generating by said first node (A) a first nonce (N) at each boot session (Bt),- deriving by said first node (A) in the first unsecured zone (Z'<sub>A</sub>) a first pre-shared key (PSK) based on said first nonce (N) and on said master key (MK)- encrypting by said first node (A) the first pre-shared key (PSK) with the master key (MK) to generate a first encrypted nonce (ENM),- transmitting by said first node (A) said first encrypted nonce (ENM) to the second node (B),- receiving by said second node (B) from said first node (A) said first encrypted nonce (ENM),- decrypting by said second node (B) said first encrypted nonce (ENM) with the master key (MK) to retrieve a second nonce (N'),- deriving by said second node (B) in the second unsecured zone (Z'<sub>B</sub>) a second pre-shared key (PSK') based on said second nonce (N') and on the master key (MK) using said key derivation function (KDF),- encrypting by said second node (B) the second nonce (N') with said second pre-shared key (PSK') to generate a second encrypted nonce (ENS),- transmitting by said second node (B) said second encrypted nonce (ENS) to the first node (A),- receiving by said first node (A) said second encrypted nonce (ENS) from the second node (B),- decrypting by said first node (A) said second encrypted nonce (ENS) with the first pre-shared key (PSK) to retrieve a second nonce (N'),- comparing by said first node (A) the second nonce (N') with the first nonce (N),- upon the result of said comparison, sending by said first node (A) a result notification (R) to the second node (B),- receiving by said second node (B) from said first node (A) said result notification (R).
Anmelder
- Firma
- Valeo Comfort and Driving Assistance
- Land
- 🇫🇷 Frankreich
Valeo Comfort and Driving Assistance ist eine Sparte des französischen Automobilzulieferers Valeo für Fahrerassistenz- und Komfortsysteme. Das Patentportfolio konzentriert sich auf Fahrzeugtechnik sowie Optik- und Fototechnik, ergänzt um Nachrichtentechnik und Software. Anmeldungen reichen von 2001 bis 2025.
538 Patente in unserer Datenbank