A method of authenticating at least one identification device by a verification device and device for its implementation.

摘要

The present invention relates to a method for authenticating at least one identification device by a verification device. BR/ In the context of the method, the authentication is performed by a zero-input protocol of knowledge based on the problem of syndrome decoding. The method comprises the establishment of a secret vector s with a Hamming weight d, a known matrix M of dimensions nxk and a public vector K such that K = Ms, the production of a random vector y and a random permutation p at the level of the identification device, a commitment on parameters dependent on y and / or p and / or s based on the use of the cryptographic hash function H and the matrix M, an exchange of data. information concerning y, p, s enabling the questions posed by the verification device to be answered without revealing directly or indirectly to it and a verification using K and / or the information previously transmitted of the validity of the commitments chopped. The invention applies in particular to pay television. / P