Lightweight and escrow-less authenticated key agreement for the internet of things

摘要

A method for computing a shared key (K) for encrypting data between a first device and a second device. The method includes communicating a first private ephemeral key (XA), and a first parameter set (YA) to a second device. The first parameter set (YA) includes identity data (IDA) that identifies the first device, a random point (VA) on an elliptic curve, and a first public key (UA). The first device receives a second private ephemeral key (XB) and a second parameter set (YB). The second parameter set (YB) includes identity data (IDB) that identifies the second device, a random point (VB) on the elliptic curve, and a second public key (UB). Verifying operations are performed to verify the second public key (UB) and the second private ephemeral key (XB) as valid. A shared key (K) is then computed based at least on the first parameter set (YA), the second parameter set (YB), the first private ephemeral key (XA), and the second private ephemeral key (XB).