Verfahren zur Herstellung von Vertrauen und Gegenseitiger Authentifizierung

Details

Veröffentlichungs-Nr.

EP4811187

Anmeldetag

19. März 2025

Veröffentlichung

23. September 2026

Rechtsraum

EP

Abstract

Provided is a system (100) and method (400) for performing mutual authentication of a protocol between devices based on short-lived certificates and random number nonces. A Personalization Agent (131) is a delegate to a Remote Service (130) and invokes a kernel-level service to check on a revocation status of participating devices and to issue CVC certificates in real-time to those devices, each personalized with a random key. This solves the issues encountered by existing protocol which use static key and hardcoded public key pinning. The use of unique keys for each device instance reduces the risks linked to key leakage or extraction and impersonation since. Short-lived certificates are generated that are valid only for the duration of communication session by clever use of random nonces in the CVC certificates issuance, where the random nonces play the role of a proof of time for the communication session that replaces the need of a synchronized clock to define validity period of the issued certificates. Other embodiments disclosed.

Anmelder

Firma

THALES DIS FRANCE SAS

Land

🇫🇷 Frankreich