Single packet authentication method and system, storage medium and electronic equipment

Abstract

The invention discloses a single packet authentication method and system, a storage medium and electronic equipment. Comprising the following steps: after receiving first component information of a target component from terminal equipment, remote control equipment sends public key information to the terminal equipment; receiving encryption component information from the terminal equipment, wherein the encryption component information is determined by the terminal equipment based on the second component information of the target component and the public key information; decrypting the encrypted component information to obtain second component information; and when the second component information is consistent with the first component information, the device authentication of the terminal device is passed. According to the method, the terminal equipment is subjected to single-packet authentication based on a mode of matching the credibility measurement value, and a security credential based on a password technology does not need to be used, so that the risk that the security credential based on the password technology of the embedded equipment is used as an access authentication credential can be solved; therefore, the problem that the equipment identity credentials are difficult to uniformly manage and safely store when the embedded equipment uses a zero-trust secure access scheme is further solved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a single-package authentication method and system, a storage medium, and an electronic device. Background Art

[0002] Single-packet authentication technology means that the terminal device only needs to send one data packet to the server, and the server can then identify the legitimacy of the terminal identity. The single-packet authentication technology in the existing zero-trust security architecture is a lightweight terminal access authentication technology.

[0003] Currently in the fields of industrial control and the Internet of Things, single-packet authentication technology solutions can realize device-to-device identity authentication. They generally use security credentials based on cryptographic technology as identity authentication identifiers, such as PKI digital certificates, OTP keys, IBC identity keys, etc.

[0004] However, the inventors found that security credentials based on cryptographic technology require high-level key management capabilities throughout the entire life cycle. In the field of industrial control, most embedded devices lack key management capabilities, such as key generation, distribution, and storage capabilities. If the security credentials of embedded devices are illegally attacked and security leaks occur, there will be risks of illegal access to systems and services.

[0005] In addition, the use of hardware password modules can solve the above-mentioned problem of secure storage of device passwords, but it requires modification of device hardware and has the problem of difficulty in distribution and updating, and it will also increase the maintenance cost of the equipment.

[0006] Based on this, the inventors believe that security credentials based on cryptographic technology are difficult to be widely used on embedded devices, and the single-package authentication technology based on embedded devices needs to be improved. Summary of the invention

[0007] The present application provides a single-package authentication method and system, a storage medium and an electronic device, which are used to solve the problem that security credentials based on cryptographic technology are difficult to be widely used on embedded devices.

[0008] One aspect of the present application provides a single-package authentication method. The single-package authentication method includes: after a remote control device receives first component information of a target component from a terminal device, the remote control device sends public key information to the terminal device; receives encrypted component information from the terminal device, where the encrypted component information is determined by the terminal device based on second component information of the target component and public key information; decrypts the encrypted component information to obtain second component information; and when the second component information is consistent with the first component information, passes device authentication by the terminal device.

[0009] According to some embodiments of the present application, the terminal device includes a first authentication unit and a second authentication unit, and the remote control device receives first component information from the terminal device, including: receiving the first component information sent by the second authentication unit; wherein the first component information is determined by the first authentication unit, and the first component information includes first measurement value information and first device identification information of the target component.

[0010] According to some embodiments of the present application, receiving encrypted component information from a terminal device includes: receiving encrypted component information sent by a second authentication unit; wherein the encrypted component information is determined by the first authentication unit through encryption processing of second component information of a target component, and the second component information includes second measurement value information and second device identification information of the target component.

[0011] According to some embodiments of the present application, when the second component information is consistent with the first component information, passing the device authentication of the terminal device includes: determining whether the second measurement value information is consistent with the first measurement value information; if so, passing the device authentication of the terminal device.

[0012] Another aspect of the present application provides a single-package authentication system. The single-package authentication system includes a trusted registration unit and a trusted authentication unit. After receiving the first component information of the target component from the terminal device, the trusted registration unit sends the public key information to the terminal device; the trusted authentication unit receives the encrypted component information from the terminal device, the encrypted component information is determined by the terminal device based on the second component information and the public key information of the target component, and decrypts the encrypted component information to obtain the second component information. When the second component information is consistent with the first component information, the device authentication of the terminal device is passed.

[0013] According to some embodiments of the present application, a terminal device includes a first authentication unit and a second authentication unit; a trusted registration unit receives first component information sent by the second authentication unit; wherein the first component information is determined by the first authentication unit, and the first component information includes first measurement value information and first device identification information of the target component.

[0014] According to some embodiments of the present application, a trusted authentication unit receives encrypted component information sent by a second authentication unit; wherein the encrypted component information is determined by the first authentication unit through encryption processing of second component information of a target component, and the second component information includes second measurement value information and second device identification information of the target component.

[0015] According to some embodiments of the present application, the trusted authentication unit determines whether the second measurement value information is consistent with the first measurement value information; if so, the trusted authentication unit passes the device authentication of the terminal device.

[0016] According to another aspect of the present application, the present application provides a non-volatile computer-readable storage medium having a computer program stored thereon, the computer program being capable of implementing the single-packet authentication method as described above.

[0017] According to another aspect of the present application, the present application provides an electronic device. The electronic device includes one or more processors and a storage device, the storage device is used to store one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors can implement the single-package authentication method as described above.

[0018] Through the above embodiments, the present application stores the initial system measurement value (first component information) of the terminal device to the remote control device. When the terminal device initiates a single-packet authentication request, the remote control device performs trusted authentication on the terminal device by comparing the current system measurement value (decrypted second component information) with the initial system measurement value. The terminal device can complete identity authentication and secure access without the terminal device providing other identity security credentials. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0020] Figure 1 A flow chart showing a single packet authentication method according to an exemplary embodiment of the present application;

[0021] Figure 2 Another flow chart showing the single packet authentication method of the exemplary embodiment of the present application;

[0022] Figure 3 A schematic diagram showing a single-packet authentication system according to an exemplary embodiment of the present application.

[0023] Description of reference numerals:

[0024] Single-package authentication system 1; trusted registration unit 11; trusted authentication unit 12; terminal device 2; first authentication unit 21; second authentication unit 22; remote control device 3. DETAILED DESCRIPTION

[0025] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in many forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this application will be comprehensive and complete and will fully convey the concepts of the example embodiments to those skilled in the art. The same reference numerals in the figures represent the same or similar parts, and thus their repeated description will be omitted.

[0026] The described features, structures or characteristics may be combined in one or more embodiments in any suitable manner. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present disclosure. However, those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced without one or more of these specific details, or other modes, components, materials, devices, etc. may be adopted. In these cases, known structures, methods, devices, implementations, materials or operations will not be shown or described in detail.

[0027] In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products or devices.

[0028] The terms "first", "second" and the like in the specification and claims of this application and the above drawings are used to distinguish different objects rather than to describe a specific order.

[0029] The following is a clear and complete description of the technical solution of the present application in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present application.

[0030] One aspect of the present application provides a single-packet authentication method for a terminal device. Figure 1 A flow chart of a single packet authentication method according to an exemplary embodiment of the present application is shown. Figure 1 As shown, the single-packet authentication method includes steps S100 to S400. Exemplarily, the single-packet authentication method may be executed by a remote control device.

[0031] According to an example embodiment, the terminal device is in communication connection with the remote control device. For example, the terminal device is a target device for single-packet authentication, and the remote control device can be a terminal device for performing trusted authentication on the terminal device, which is not limited in this application.

[0032] In step S100, after receiving the first component information from the terminal device, the remote control device sends the public key information to the terminal device.

[0033] For example, when the terminal device goes online for the first time and needs to establish an authentication connection with the remote control device, the terminal device determines first component information of a target component of the terminal device.

[0034] The target component may be a key component of a computer system, including but not limited to an operating system kernel component, a local authentication unit component, a software program component for calculating and obtaining a device identification, and a single-package authentication unit component.

[0035] Optionally, the first component information includes first metric value information and first device identification information of a target component of the terminal device.

[0036] For example, the terminal device can determine the first metric value information Simv of the key component of the computer system by calculating _ n1 and the first device identifier Devid1.

[0037] For example, the metric value Simv _ n can be obtained by performing digest calculation on the key components of the computer system through an information digest algorithm, which can obtain a digest value that can uniquely identify the key components of the computer system. The length of the digest value is determined by the digest algorithm, and this application does not impose any restrictions on this.

[0038] In step S100, after the terminal device determines the first component information, the first component information is sent to the remote control device.

[0039] Optionally, the terminal device includes a first authentication unit and a second authentication unit. The first authentication unit determines the first component information, and the second authentication unit sends the first component information to the remote control device.

[0040] For example, the first authentication unit is a local authentication unit, and the second authentication unit is a single-packet authentication unit. The local authentication unit is a module in the terminal device that performs local information management, and the single-packet authentication unit is a software authentication module in the terminal device that interacts with the remote control device through a single message to complete device authentication.

[0041] The local authentication unit determines the first metric information Simv of the key component of the computer system. _ n1 and the first device identifier Devid1, the first metric information Simv _ n1 and the first device identifier Devid1 are sent to the single packet authentication unit. The single packet authentication unit sends the first metric information Simv _n1 and the first device identifier Devid1 are sent to the remote control device to send an online registration request to the remote control device.

[0042] After receiving the online registration request from the terminal device, the remote control device completes the registration of the terminal device based on the preset registration approval process, and sends the first metric value information Simv _ After n1 and the first device identifier Devid1 are bound and stored, the public key information Pubkey_ctrl of the remote control device is sent to the terminal device. The terminal device receives and saves the public key information Pubkey_ctrl of the remote control device.

[0043] Exemplarily, the remote control device is preset with public key information and private key information for communication encryption, which will not be described in detail in this application.

[0044] In step S200, the remote control device receives encrypted component information from the terminal device, where the encrypted component information is determined by the terminal device based on the second component information and public key information of the target component.

[0045] For example, after the terminal device receives the public key information Pubkey_ctrl of the remote control device and completes the online registration of the terminal device, the terminal device calculates the second component information of the key component again.

[0046] Optionally, the second component information includes the second metric information Simv of the target component. _ n2 and the second device identifier Devid2.

[0047] The terminal device encrypts the second component information through the public key information Pubkey_ctrl. _ n2) Encrypt to obtain the encrypted component information Enc _ simv.

[0048] Such as encryption component information Enc _ The calculation method of simv can be:

[0049] Enc _ simv=Enc(Devid2,Simv _ n2, Nonce, Pubkey_ctrl)

[0050] During the encryption process, the terminal device performs encryption processing using a preset encryption algorithm, which is determined by the public key information Pubkey_ctrl of the remote control device. Nonce is a random value selected by the terminal device during the encryption process, and the random value Nonce in each encryption process is different.

[0051] Optionally, in step S200, the local authentication unit obtains the encrypted component information Enc through encryption processing. _ After simv, the encrypted component information Enc _ simv is sent to the single packet authentication unit. The single packet authentication unit encrypts the component information Enc _ simv is sent to the remote control device to send an online authentication request to the remote control device.

[0052] In step S300, the remote control device decrypts the encrypted component information to obtain second component information.

[0053] For example, the remote control device decrypts the encrypted component information using the private key information of the remote control device to obtain the second component information such as the second measurement value information Simv _ n2, second device identification information Devid2 and random number information Nonce.

[0054] In step S400, the remote control device passes the device authentication of the terminal device when the second component information is consistent with the first component information.

[0055] For example, after the remote control device obtains the second component information through decryption processing, it compares the second component information with the first component information. If the second component information is consistent with the first component information, the device authentication of the terminal device is passed, otherwise the device authentication of the terminal device is rejected, so that the single package authentication during the terminal device online process can be completed through trusted computing.

[0056] Figure 2 Another flow chart showing the single packet authentication method of the exemplary embodiment of the present application is shown as follows: Figure 2 As shown, step S400 may include steps S410-430.

[0057] Optionally, in step S410, the remote control device determines whether the second measurement value information is consistent with the first measurement value information, and if not, proceeds to step S420; if consistent, proceeds to step S430.

[0058] In step S420, the remote control device rejects the device authentication of the terminal device.

[0059] In step S430, the remote control device passes the device authentication of the terminal device.

[0060] For example, the remote control device obtains the second measurement value information Simv by decrypting _ n2 and the initial metric value of the terminal device (the first metric value information Simv _ n1) are compared. If the two are consistent, it means the measurement is successful; if they are inconsistent, it means the measurement fails.

[0061] Optionally, before step S410, the remote control device may further verify whether it is a replay attack message through the random number information Nonce. If it is determined to be a replay attack message, the remote control device may reject the device authentication of the terminal device.

[0062] Through the above embodiments, the present application stores the initial system measurement value (first component information) of the terminal device to the remote control device. When the terminal device initiates a single-packet authentication request, the remote control device performs trusted authentication on the terminal device by comparing the current system measurement value (decrypted second component information) with the initial system measurement value. The terminal device can complete identity authentication and secure access without the terminal device providing other identity security credentials.

[0063] The single-package authentication method provided in the present application can perform single-package authentication on the security identity credentials of the terminal device based on matching the trusted measurement value. In the process of single-package authentication, there is no need to rely on security credentials based on cryptographic technology. This can solve the risks of using security credentials based on cryptographic technology of embedded devices as access authentication credentials, thereby further solving the problem that device identity credentials of embedded devices are difficult to uniformly manage and securely store when using zero-trust secure access solutions.

[0064] Another aspect of the present application provides a single-packet authentication system for a terminal device. Figure 3 A schematic diagram of a single-package authentication system according to an exemplary embodiment of the present application is shown. Figure 3 As shown, the single-package authentication system 1 includes a trusted registration unit 11 and a trusted authentication unit 12. The terminal device 2 also includes a first authentication unit 21 and a second authentication unit 22. The remote control device 3 includes the single-package authentication system 1.

[0065] According to an exemplary embodiment, terminal device 2 is in communication connection with remote control device 3. For example, terminal device 2 is a target device for single-packet authentication, and remote control device 3 may be a terminal device for performing trusted authentication on terminal device 2, which is not limited in this application.

[0066] According to the exemplary embodiment, after receiving the first component information of the target component from the terminal device 2 , the trusted registration unit 11 sends the public key information to the terminal device 2 .

[0067] For example, when the terminal device 2 goes online for the first time and needs to establish an authentication connection with the remote control device 3 , the trusted registration unit 11 determines the first component information of the target component of the terminal device 2 .

[0068] The target component may be a key component of a computer system, including but not limited to an operating system kernel component, a local authentication unit component, a software program component for calculating and obtaining a device identification, and a single-package authentication unit component.

[0069] Optionally, the first component information includes first metric value information and first device identification information of the target component of the terminal device 2.

[0070] For example, the terminal device 2 can determine the first metric value information Simv of the key component of the computer system by calculating _ n1 and the first device identifier Devid1.

[0071] For example, the metric value Simv _ n can be obtained by performing digest calculation on the key components of the computer system through an information digest algorithm, which can obtain a digest value that can uniquely identify the key components of the computer system. The length of the digest value is determined by the digest algorithm, and this application does not impose any restrictions on this.

[0072] After determining the first component information, the terminal device 2 sends the first component information to the trusted registration unit 11 .

[0073] Alternatively, if Figure 3 As shown, the terminal device 2 includes a first authentication unit 21 and a second authentication unit 22. The first authentication unit 21 determines the first component information, and the second authentication unit 22 sends the first component information to the remote control device.

[0074] For example, the first authentication unit 21 is a local authentication unit, and the second authentication unit 22 is a single-packet authentication unit. The local authentication unit is a module in the terminal device 2 that performs local information management, and the single-packet authentication unit is a software authentication module in the terminal device 2 that interacts with the remote control device 3 through a single message to complete device authentication.

[0075] The local authentication unit determines the first metric information Simv of the key component of the computer system. _ n1 and the first device identifier Devid1, the first metric information Simv _ n1 and the first device identifier Devid1 are sent to the single packet authentication unit. The single packet authentication unit sends the first metric information Simv _ n1 and the first device identifier Devid1 are sent to the trusted registration unit 11 to send an online registration request to the trusted registration unit 11 .

[0076] After receiving the online registration request from the terminal device 2, the trusted registration unit 11 completes the registration of the terminal device 2 based on the preset registration approval process, and sends the first metric value information Simv of the terminal device 2 to the terminal device 2. _ After binding and storing n1 and the first device identifier Devid1, the public key information Pubkey_ctrl of the remote control device 3 is sent to the terminal device 2. The terminal device 2 receives and stores the public key information Pubkey_ctrl of the remote control device 3.

[0077] Exemplarily, the remote control device 3 is preset with public key information and private key information for communication encryption, which will not be described in detail in this application.

[0078] According to an exemplary embodiment, the trusted authentication unit 12 receives the encrypted component information from the terminal device 2, the encrypted component information being determined by the terminal device 2 based on the second component information and the public key information of the target component.

[0079] For example, after the terminal device 2 receives the public key information Pubkey_ctrl of the remote control device 3 and completes the online registration of the terminal device, the terminal device 2 calculates the second component information of the key component again.

[0080] Optionally, the second component information includes the second metric information Simv of the target component. _ n2 and the second device identifier Devid2.

[0081] The terminal device 2 encrypts the second component information through the public key information Pubkey_ctrl. _ n2) Encrypt to obtain the encrypted component information Enc _ simv.

[0082] Such as encryption component information Enc _ The calculation method of simv can be:

[0083] Enc _ simv=Enc(Devid2,Simv _ n2, Nonce, Pubkey_ctrl)

[0084] During the encryption process, the terminal device 2 performs encryption processing using a preset encryption algorithm, which is determined by the public key information Pubkey_ctrl of the remote control device 3. Nonce is a random value selected by the terminal device 2 during the encryption process, and the random value Nonce in each encryption process is different.

[0085] Optionally, the local authentication unit obtains the encrypted component information Enc through encryption processing. _ After simv, the encrypted component information Enc _ simv is sent to the single packet authentication unit. The single packet authentication unit encrypts the component information Enc _ simv is sent to the trusted authentication unit 12 to send an online authentication request to the remote control device.

[0086] The trusted authentication unit 12 decrypts the encrypted component information to obtain the second component information.

[0087] For example, the trusted authentication unit 12 decrypts the encrypted component information using the private key information of the remote control device 3 to obtain the second component information such as the second measurement value information Simv _ n2, second device identification information Devid2 and random number information Nonce.

[0088] The trusted authentication unit 12 passes the device authentication of the terminal device 2 when the second component information is consistent with the first component information.

[0089] For example, after the trusted authentication unit 12 obtains the second component information through decryption processing, it compares the second component information with the first component information. If the second component information is consistent with the first component information, the device authentication of the terminal device 2 is passed, otherwise the device authentication of the terminal device 2 is rejected, so that the single package authentication of the terminal device 2 during the online process can be completed through trusted computing.

[0090] Optionally, the trusted authentication unit 12 determines whether the second metric information is consistent with the first metric information. If not, the device authentication of the terminal device 2 is rejected; if consistent, the device authentication of the terminal device 2 is passed.

[0091] For example, the trusted authentication unit 12 obtains the second metric value information Simv by decrypting _ n2 and the initial metric value of the terminal device (the first metric value information Simv _ n1) are compared. If the two are consistent, it means the measurement is successful; if they are inconsistent, it means the measurement fails.

[0092] Optionally, the trusted authentication unit 12 may also verify whether it is a replay attack message through the random number information Nonce. If it is determined to be a replay attack message, the remote control device may reject the device authentication of the terminal device.

[0093] Through the above embodiments, the present application stores the initial system measurement value (first component information) of the terminal device in the single-package authentication system. When the terminal device initiates a single-package authentication request, the single-package authentication system performs trusted authentication on the terminal device by comparing the current system measurement value (decrypted second component information) with the initial system measurement value. The terminal device can complete identity authentication and secure access without the terminal device providing other identity security credentials.

[0094] The single-package authentication system provided in the present application can perform single-package authentication on the security identity credentials of the terminal device based on matching trusted measurement values. In the process of single-package authentication, there is no need to rely on security credentials based on cryptographic technology. This can solve the risks of using security credentials based on cryptographic technology of embedded devices as access authentication credentials, thereby further solving the problem that device identity credentials of embedded devices are difficult to uniformly manage and securely store when using zero-trust security access solutions.

[0095] According to another aspect of the present application, the present application provides a non-volatile computer-readable storage medium having a computer program stored thereon, the computer program being capable of implementing the single-packet authentication method as described above.

[0096] According to another aspect of the present application, the present application provides an electronic device. The electronic device includes one or more processors and a storage device, the storage device is used to store one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors can implement the single-package authentication method as described above.

[0097] Finally, it should be noted that the above is only a preferred embodiment of the present application and is not intended to limit the present application. Although the present application is described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions of the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present application shall be included in the protection scope of the present application.

Claims

1. A single packet authentication method for a terminal device, characterized in that: The terminal device is connected to the remote control device for communication, and the single-packet authentication method includes: After receiving the first component information of the target component from the terminal device, the remote control device sends the public key information to the terminal device; Receiving encryption component information from the terminal device, the encryption component information being determined by the terminal device based on the second component information of the target component and the public key information; decrypting the encrypted component information to obtain the second component information; When the second component information is consistent with the first component information, the device authentication of the terminal device is passed.

2. The single packet authentication method according to claim 1, characterized in that: The terminal device includes a first authentication unit and a second authentication unit, and the remote control device receives first component information from the terminal device including: receiving first component information sent by the second authentication unit; The first component information is determined by the first authentication unit, and the first component information includes first measurement value information and first device identification information of the target component.

3. The single packet authentication method according to claim 2, characterized in that: The receiving of encryption component information from the terminal device comprises: receiving the encryption component information sent by the second authentication unit; The encrypted component information is determined by the first authentication unit through encryption processing of second component information of the target component, and the second component information includes second measurement value information and second device identification information of the target component.

4. The single packet authentication method according to claim 3, characterized in that: When the second component information is consistent with the first component information, passing the device authentication of the terminal device includes: Determining whether the second metric value information is consistent with the first metric value information; If yes, the device authentication of the terminal device is passed.

5. A single packet authentication system for a terminal device, characterized in that: include: A trusted registration unit, after receiving first component information of a target component from the terminal device, sends public key information to the terminal device; A trusted authentication unit receives encrypted component information from the terminal device, the encrypted component information is determined by the terminal device based on the second component information of the target component and the public key information, and decrypts the encrypted component information to obtain the second component information, and passes the device authentication of the terminal device when the second component information is consistent with the first component information.

6. The single-package authentication system according to claim 5, characterized in that: The terminal device includes a first authentication unit and a second authentication unit; the trusted registration unit receives the first component information sent by the second authentication unit; The first component information is determined by the first authentication unit, and the first component information includes first measurement value information and first device identification information of the target component.

7. The single-package authentication system according to claim 6, characterized in that: The trusted authentication unit receives the encryption component information sent by the second authentication unit; The encrypted component information is determined by the first authentication unit through encryption processing of second component information of the target component, and the second component information includes second measurement value information and second device identification information of the target component.

8. The single-package authentication system according to claim 7, characterized in that: The trusted authentication unit determines whether the second measurement value information is consistent with the first measurement value information; If yes, the trusted authentication unit passes the device authentication of the terminal device.

9. A non-volatile computer-readable storage medium having a computer program stored thereon, characterized in that: The computer program implements the single packet authentication method as described in any one of claims 1-4.

10. An electronic device, characterized in that: include: one or more processors; A storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the single-packet authentication method as described in any one of claims 1-4.

Images