From phm@a2e.de  Thu Apr 19 23:57:45 2001
From: phm@a2e.de (PILCH Hartmut)
Date: Fri, 20 Apr 2001 00:57:45 +0200 (CEST)
Subject: [Patents] EPO patent on challenge & response authentification
Message-ID: <Pine.LNX.4.33.0104200049340.12388-100000@mulix.oas.a2e.de>

Under

	http://swpat.ffii.org/vreji/pikta/txt/ep/0427/465/

the EPO awarded ownership of the principle of challenge and response
cryptography to AT&T.

To infringe on the patent, you need to construct a system for
authentification where the key (smartcard) sends a string to
the gate (authentication device) and the latter sends back a testing
number (challenge).  Both key and gate have two secret algorithms
that allow them to produce a response that can then be compared.

The patent also teaches that you can prevent the eavesdropper from
guessing the hidden algorithm by introducing a minimum time interval
between two information exchanges and by using long numbers.

So far I had the impression that crypto patents contain some fairly
non-trivial mathematics and are thus likely to be under-represented
in our horror gallery.  But that impression may be wrong.  At least this
AT&T patent seems to deserve some special honorary place.  Or did I
overlook anything?

-phm



_______________________________________________
Swpat mailing list
Swpat@ffii.org
http://ffii.org/mailman/listinfo/swpat



