Patent US4203166A successfully refreshed from Google Patents.
US4203166A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Cryptographic file security for multiple domain networks
Assignee: International Business Machines Corp
•
Filing: 1977-12-05
•
Granted: 1980-05-13
•
Expires: 1997-12-05
Abstract
Abstract A file security system for data files created at a first host system in one domain and recovered at a second host system in another domain of a multiple domain network. Each of said host systems contain a data security device provided with multiple host keys capable of performing a variety of cryptographic operations. Creation and recovery of a secure data file is accomplished without revealing the keys of either of the host systems to the other of the host systems. When the data file is to be created at the first host system, the first host system data security device provides a file recovery key for subsequent recovery of the data file at the second host system and enciphers first host system plaintext under a primary file key, which is related to the file recovery key, to obtain first host system ciphertext as the data file. The file recovery key is used as header information for the data file or maintained as a private file recovery key. When the data file is to be recovered at the second host system, the file recovery key is provided at the second host system and the second host system data security device performs a cryptographic operation to transform the file recovery key into a form which is usable to decipher the data file. The second host system data security device then uses the transformed file recovery key to perform a cryptographic operation to obtain the first host system ciphertext in clear form at the second host system.
Inventors
- 👤 William F. Ehrsam
- 👤 Robert C. Elander
- 👤 Stephen M. Matyas
- 👤 Carl H. W. Meyer
- 👤 Richard J. Sahulka
- 👤 Walter L. Tuchman
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 20:59
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/6236; G06F21/606; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016; H; H04; H04L; H04L9/00; H04L9/06; H04L9/065; H04L9/0656; G06F2221/00; G06F2221/21; G06F2221/2153
Claims Analysis
Total Claims: 60
Claim 1
Independent Claim
120 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, a first host system arrangement for creating said data file comprising: means providing a file recovery key for said data file for subsequent recovery at said second host system representing a primary file key enciphered under a file cross domain key for cross domain file communication between said first and second host systems, means providing first host system plaintext, and means performing a cryptographic operation to encipher said first host system plaintext under said primary file key to obtain first host system ciphertext for said data file.
Claim 2
Dependent Claim
120 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, a first host system arrangement for creating said data file comprising: means providing a file recovery key for said data file for subsequent recovery at said second host system representing a primary file key enciphered under a file cross domain key for cross domain file communication between said first and second host systems, means providing first host system plaintext, and means performing a cryptographic operation to encipher said first host system plaintext under said primary file key to obtain first host system ciphertext for said data file.
Claim 3
Dependent Claim
26 words
In a multiple domain data processing system as defined in claim 1 wherein said file recovery key is provided as header information for said data file.
Claim 4
Dependent Claim
25 words
In a multiple domain data processing system as defined in claim 1 wherein said file recovery key is maintained as a private file recovery key.
Claim 5
Dependent Claim
144 words
In a multiple domain data processing system as defined in claim 1 wherein said system further includes a second host system arrangement for recovery of said data file comprising: means providing said file recovery key at said second host system, means operably responsive to said file recovery key to perform a cryptographic operation for reeinciphering said primary file key from encipherment under said cross domain file key to encipherment under a first key encrypting key of said second host system, means providing said data file of first host system ciphertext at said second host system, and means operably responsive to said primary file key enciphered under said first key encrypting key of said second host system and said data file of first host system ciphertext to perform a cryptographic operation providing said first host system ciphertext in clear form at said second host system.
Claim 6
Dependent Claim
172 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, a first host system arrangement for creating said data file comprising: means providing a primary file key enciphered under a first key encrypting key of said first host system, means providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, means operably responsive to said enciphered cross domain key and said enciphered primary file key to perform a cryptographic operation providing a file recovery key for subsequent recovery of said data file at said second host system, means providing first host system plaintext, and means operably responsive to said primary file key enciphered under said first key encrypting key and said first host system plaintext to perform a cryptographic operation providing first host system ciphertext for said data file.
Claim 7
Dependent Claim
172 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, a first host system arrangement for creating said data file comprising: means providing a primary file key enciphered under a first key encrypting key of said first host system, means providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, means operably responsive to said enciphered cross domain key and said enciphered primary file key to perform a cryptographic operation providing a file recovery key for subsequent recovery of said data file at said second host system, means providing first host system plaintext, and means operably responsive to said primary file key enciphered under said first key encrypting key and said first host system plaintext to perform a cryptographic operation providing first host system ciphertext for said data file.
Claim 8
Dependent Claim
27 words
In a multiple domain processing system as defined in claim 5 wherein said file recovery key is said primary file key enciphered under said cross domain key.
Claim 9
Dependent Claim
29 words
In a multiple domain processing system as defined in claim 6 wherein said first host system ciphertext is said first host system plaintext enciphered under said primary file key.
Claim 10
Dependent Claim
195 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, a first host system arrangement for creating said data file comprising: means providing a primary file key enciphered under a first key encrypting key of said first host system, means providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, means operably responsive to said enciphered cross domain key and said enciphered primary file key to perform a cryptographic operation providing said primary file key enciphered under said cross domain key as a file recovery key for subsequent recovery of said data file at said second host system, means providing first host system plaintext, and means operably responsive to said primary file key enciphered under said first key encrypting key and said first host system plaintext to perform a cryptographic operation providing said first host system plaintext enciphered under said primary file key as first host system ciphertext for said data file.
Claim 11
Dependent Claim
195 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, a first host system arrangement for creating said data file comprising: means providing a primary file key enciphered under a first key encrypting key of said first host system, means providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, means operably responsive to said enciphered cross domain key and said enciphered primary file key to perform a cryptographic operation providing said primary file key enciphered under said cross domain key as a file recovery key for subsequent recovery of said data file at said second host system, means providing first host system plaintext, and means operably responsive to said primary file key enciphered under said first key encrypting key and said first host system plaintext to perform a cryptographic operation providing said first host system plaintext enciphered under said primary file key as first host system ciphertext for said data file.
Claim 12
Dependent Claim
34 words
In a multiple domain data processing system as defined in claim 8 wherein said first key encrypting key is a first master key and said second key encrypting key is a second master key.
Claim 13
Dependent Claim
25 words
In a multiple domain data processing system as defined in claim 9 wherein said second master key is a variant of said first master key.
Claim 14
Dependent Claim
26 words
In a multiple domain data processing system as defined in claim 8 wherein said file recovery key is provided as header information for said data file.
Claim 15
Dependent Claim
25 words
In a multiple domain data processing system as defined in claim 8 wherein said file recovery key is maintained as a private file recovery key.
Claim 16
Dependent Claim
191 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, a first host system arrangement for creating said data file comprising: means providing a primary file key enciphered under a first host system master key, means providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a variant of said first host system master key, means operably responsive to said enciphered cross domain key and said enciphered primary file key to perform a cryptographic operation providing said primary file key enciphered under said cross domain key as a file recovery key for subsequent recovery of said data file at said second host system, means providing first host system plaintext, and means operably responsive to said primary file key enciphered under said first host system master key and said first host system plaintext to perform a cryptographic operation providing said first host system plaintext enciphered under said primary file key as first host system ciphertext for said data file.
Claim 17
Dependent Claim
191 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, a first host system arrangement for creating said data file comprising: means providing a primary file key enciphered under a first host system master key, means providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a variant of said first host system master key, means operably responsive to said enciphered cross domain key and said enciphered primary file key to perform a cryptographic operation providing said primary file key enciphered under said cross domain key as a file recovery key for subsequent recovery of said data file at said second host system, means providing first host system plaintext, and means operably responsive to said primary file key enciphered under said first host system master key and said first host system plaintext to perform a cryptographic operation providing said first host system plaintext enciphered under said primary file key as first host system ciphertext for said data file.
Claim 18
Dependent Claim
169 words
In a multiple domain data processing system as defined in claim 5 wherein said system further includes a second host system arrangement for recovery of said data file comprising: means providing said cross domain key enciphered under a first key encrypting key of said second host system, means providing said file recovery key at said second host system, means operably responsive to said cross domain key enciphered under said first key encrypting key of said second host system and said file recovery key to perform a cryptographic operation providing said primary file key enciphered under a second key encrypting key of said second host system, means providing said data file of first host system ciphertext at said second host system, and means operably responsive to said primary file key enciphered under said second key encrypting key of said second host system and said data file of first host system ciphertext to perform a cryptographic operation providing said first host system ciphertext in clear form at said second host system.
Claim 19
Dependent Claim
31 words
In a multiple domain data processing system as defined in claim 14 wherein said key encrypting keys of said second host system as master keys which are different from each other.
Claim 20
Dependent Claim
37 words
In a multiple domain data processing system as defined in claim 14 wherein said first key encrypting key of said second host system is a variant of said second key encrypting key of said second host system.
Claim 21
Dependent Claim
26 words
In a multiple domain data processing system as defined in claim 14 wherein said file recovery key is provided as header information of said data file.
Claim 22
Dependent Claim
23 words
In a multiple domain data processing system as defined in claim 14 wherein said file recovery key is provided as a private key.
Claim 23
Dependent Claim
242 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain wherein said data file consists of header information comprising a primary file key enciphered under a cross domain key provided by said first host system and first host system plaintext enciphered under said primary file key, a second host system arrangement for recovery of said data file comprising: means providing said cross domain key enciphered under a first key encrypting key of said second host system, means providing said primary file key enciphered under said cross domain key at said second host system, means operably responsive to said cross domain key enciphered under said first key encrypting key of said second host system and said primary file key enciphered under said cross domain key to perform a cryptographic operation providing said primary file key enciphered under a second key encrypting key of said second host system, means providing said data file of first host system plaintext enciphered under said primary file key at said second host system, and means operably responsive to said primary file key enciphered under said second key encrypting key of said second host system and said data file of first host system plaintext enciphered under said primary file key to perform a cryptographic operation providing said first host system plaintext at said second host system.
Claim 24
Dependent Claim
242 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain wherein said data file consists of header information comprising a primary file key enciphered under a cross domain key provided by said first host system and first host system plaintext enciphered under said primary file key, a second host system arrangement for recovery of said data file comprising: means providing said cross domain key enciphered under a first key encrypting key of said second host system, means providing said primary file key enciphered under said cross domain key at said second host system, means operably responsive to said cross domain key enciphered under said first key encrypting key of said second host system and said primary file key enciphered under said cross domain key to perform a cryptographic operation providing said primary file key enciphered under a second key encrypting key of said second host system, means providing said data file of first host system plaintext enciphered under said primary file key at said second host system, and means operably responsive to said primary file key enciphered under said second key encrypting key of said second host system and said data file of first host system plaintext enciphered under said primary file key to perform a cryptographic operation providing said first host system plaintext at said second host system.
Claim 25
Dependent Claim
226 words
In a data processing system providing file security for a data file created by a first host system in one domain for recovery at said first system wherein said data file consists of header information comprising a primary file key enciphered under a secondary file key and first host system plaintext enciphered under said primary file key, a first host system arrangement for replacing said header information with a file recovery key for recovery of said data file at a second host system in another domain comprising: means providing said secondary file enciphered under a first key encrypting key of said first host system, means providing said header information at said first host system, means operably responsive to said enciphered secondary file key and said header information to perform a cryptographic operation providing said primary file key enciphered under a second key encrypting key of said second host system, means providing a cross domain key for cross domain communication between said first and second host systems enciphered under a third key encrypting key of said first host system, and means operably responsive to said enciphered cross domain key and said primary file key enciphered under said second key encrypting key of said first host system to perform a cryptographic operation providing said primary file key enciphered under said cross domain key as said file recovery key.
Claim 26
Dependent Claim
226 words
In a data processing system providing file security for a data file created by a first host system in one domain for recovery at said first system wherein said data file consists of header information comprising a primary file key enciphered under a secondary file key and first host system plaintext enciphered under said primary file key, a first host system arrangement for replacing said header information with a file recovery key for recovery of said data file at a second host system in another domain comprising: means providing said secondary file enciphered under a first key encrypting key of said first host system, means providing said header information at said first host system, means operably responsive to said enciphered secondary file key and said header information to perform a cryptographic operation providing said primary file key enciphered under a second key encrypting key of said second host system, means providing a cross domain key for cross domain communication between said first and second host systems enciphered under a third key encrypting key of said first host system, and means operably responsive to said enciphered cross domain key and said primary file key enciphered under said second key encrypting key of said first host system to perform a cryptographic operation providing said primary file key enciphered under said cross domain key as said file recovery key.
Claim 27
Dependent Claim
28 words
In a data processing system as defined in claim 20 wherein said file recovery key is maintained as a private key for use at said second host system.
Claim 28
Dependent Claim
167 words
In a multiple domain data processing system providing file security for a private data file created by a first host system in one domain and recovered by a second host system in another domain, a first host system arrangement for creating said data file comprising: means providing a primary file key enciphered under a private cross domain key as a private file recovery key, means providing said private cross domain key enciphered under a first key encrypting key of said first host system, means operably responsive to said enciphered private cross domain key and said private recovery key to perform a cryptographic operation providing said primary file key enciphered under a second key encrypting key of said first host system, means providing first host system plaintext, and means operably responsive to said primary file key enciphered under said second key encrypting key of said first host system and said first host system plaintext to perform a cryptographic operation providing first host system ciphertext for said data file.
Claim 29
Dependent Claim
167 words
In a multiple domain data processing system providing file security for a private data file created by a first host system in one domain and recovered by a second host system in another domain, a first host system arrangement for creating said data file comprising: means providing a primary file key enciphered under a private cross domain key as a private file recovery key, means providing said private cross domain key enciphered under a first key encrypting key of said first host system, means operably responsive to said enciphered private cross domain key and said private recovery key to perform a cryptographic operation providing said primary file key enciphered under a second key encrypting key of said first host system, means providing first host system plaintext, and means operably responsive to said primary file key enciphered under said second key encrypting key of said first host system and said first host system plaintext to perform a cryptographic operation providing first host system ciphertext for said data file.
Claim 30
Dependent Claim
176 words
In a multiple domain data processing system as defined in claim 22 wherein said system further includes a second host system arrangement for recovery of said private data file comprising: means providing said private cross domain key enciphered under a first key encrypting key of said second host system, means providing said private file recovery key at said second host system, means operably responsive to said private cross domain key enciphered under said first key encrypting key of said second host system and said private file recovery key to perform a cryptographic operation providing said primary file key enciphered under a second key encrypting key of said second host system, means providing said private data file of first host system ciphertext at said second host system, and means operably responsive to said primary file key enciphered under said second key encrypting key of said second host system and said private data file of first host system ciphertext to perform a cryptographic operation providing said first host system ciphertext in clear form at said second host system.
Claim 31
Dependent Claim
123 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, the method of creating said data file at said first host system comprising the steps of: providing a file recovery key for said data file for subsequent recovery at said second host system representing a primary file key enciphered under a file cross domain key for cross domain file communication between said first and second host systems, providing first host systems plaintext, and carrying out a cryptographic operation to encipher said first host system plaintext under said primary file key to obtain first host system ciphertext for said data file.
Claim 32
Dependent Claim
123 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, the method of creating said data file at said first host system comprising the steps of: providing a file recovery key for said data file for subsequent recovery at said second host system representing a primary file key enciphered under a file cross domain key for cross domain file communication between said first and second host systems, providing first host systems plaintext, and carrying out a cryptographic operation to encipher said first host system plaintext under said primary file key to obtain first host system ciphertext for said data file.
Claim 33
Dependent Claim
22 words
In the method as defined in claim 24 wherein said file recovery key is provided as header information for said data file.
Claim 34
Dependent Claim
21 words
In the method as defined in claim 24 wherein said file recovery key is maintained as a private file recovery key.
Claim 35
Dependent Claim
140 words
In the method as defined in claim 24 which further includes the method of recovery of said data file at said second host system comprising the steps of: providing said file recovery key at said second host system, carrying out a cryptographic operation in accordance with said file recovery key for reenciphering said primary file key from encipherment under said cross domain file key to encipherment under a first key encrypting key of said second host system, providing said data file of first host system ciphertext at said second host system, and carrying out a cryptographic operation in accordance with said primary file key enciphered under said first key encrypting key of said second host system and said data file of first host system ciphertext to provide said first host system ciphertext in clear form at said second host system.
Claim 36
Dependent Claim
174 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, the method of creating said data file at said first host system comprising the steps of: providing a primary file key enciphered under a first key encrypting key of said first host system, providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, carrying out a cryptographic operation in accordance with said enciphered cross domain key and said enciphered primary file key to provide a file recovery key for subsequent recovery of said data file at said second host system, providing first host system plaintext and, carrying out a cryptographic operation in accordance with said primary file key enciphered under said first key encrypting key and said first host system plaintext to provide first host system ciphertext for said data file.
Claim 37
Dependent Claim
174 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, the method of creating said data file at said first host system comprising the steps of: providing a primary file key enciphered under a first key encrypting key of said first host system, providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, carrying out a cryptographic operation in accordance with said enciphered cross domain key and said enciphered primary file key to provide a file recovery key for subsequent recovery of said data file at said second host system, providing first host system plaintext and, carrying out a cryptographic operation in accordance with said primary file key enciphered under said first key encrypting key and said first host system plaintext to provide first host system ciphertext for said data file.
Claim 38
Dependent Claim
24 words
In the method as defined in claim 28 wherein said file recovery key is said primary file key enciphered under said cross domain key.
Claim 39
Dependent Claim
26 words
In the method as defined in claim 29 wherein said first host system ciphertext is said first host system plaintext enciphered under said primary file key.
Claim 40
Dependent Claim
197 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, the method of creating said data file at said first host system comprising the steps of: providing a primary file key enciphered under a first key encrypting key of said first host system, providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, carrying out a cryptographic operation in accordance with said enciphered cross domain key and said enciphered primary file key to provide said primary file key enciphered under said cross domain key as a file recovery key for subsequent recovey of said data file at said second host system, providing first host system plaintext, and carrying out a cryptographic operation in accordance with said primary file key enciphered under said first key encrypting key and said first host system plaintext to provide said first host system plaintext enciphered under said primary file key as first host system ciphertext for said data file.
Claim 41
Dependent Claim
197 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain, the method of creating said data file at said first host system comprising the steps of: providing a primary file key enciphered under a first key encrypting key of said first host system, providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, carrying out a cryptographic operation in accordance with said enciphered cross domain key and said enciphered primary file key to provide said primary file key enciphered under said cross domain key as a file recovery key for subsequent recovey of said data file at said second host system, providing first host system plaintext, and carrying out a cryptographic operation in accordance with said primary file key enciphered under said first key encrypting key and said first host system plaintext to provide said first host system plaintext enciphered under said primary file key as first host system ciphertext for said data file.
Claim 42
Dependent Claim
22 words
In the method as defined in claim 31 wherein said file recovery key is provided as header information for said data file.
Claim 43
Dependent Claim
21 words
In the method as defined in claim 31 wherein said file recovery key is maintained as a private file recovery key.
Claim 44
Dependent Claim
165 words
In the method as defined in claim 28 which further includes the method of recovery of said data file at said second host system comprising the steps of: providing said cross domain key enciphered under a first key encrypting key of said second host system, providing said file recovery key at said second host system, carrying out a cryptographic operation in accordance with said cross domain key enciphered under said first key encrypting key of said second host system and said file recovery key to provide said primary file key enciphered under a second key encrypting key of said second host system, providing said data file of first host system ciphertext at said second host system, and carrying out a cryptographic operation in accordance with said primary file key enciphered under said second key encrypting key of said second host system and said data file of first host system ciphertext to provide said first host system ciphertext in clear form at said second host system.
Claim 45
Dependent Claim
239 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain wherein said data file consists of header information comprising a primary file key enciphered under a cross domain key provided by said first host system and first host system plaintext enciphered under said primary file key, the method of recovery of said data file comprising the steps of: providing said cross domain key enciphered under a first key encrypting key of said second host system, providing said primary file key enciphered under said cross domain key at said second host system, carrying out a cryptographic operation in accordance with said cross domain key enciphered under said first key encrypting key of said second host system and said primary file key enciphered under said cross domain key to provide said primary file key enciphered under a second key encrypting key of said second host system, providing said data file of first host system plaintext enciphered under said primary file key at said second host system, and carrying out a cryptographic operation in accordance with said primary file key enciphered under said second key encyrpting key of said second host system and said data file of first host system plaintext enciphered under said primary file key to provide said first host system plaintext at said second host system.
Claim 46
Dependent Claim
239 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain and recovered by a second host system in another domain wherein said data file consists of header information comprising a primary file key enciphered under a cross domain key provided by said first host system and first host system plaintext enciphered under said primary file key, the method of recovery of said data file comprising the steps of: providing said cross domain key enciphered under a first key encrypting key of said second host system, providing said primary file key enciphered under said cross domain key at said second host system, carrying out a cryptographic operation in accordance with said cross domain key enciphered under said first key encrypting key of said second host system and said primary file key enciphered under said cross domain key to provide said primary file key enciphered under a second key encrypting key of said second host system, providing said data file of first host system plaintext enciphered under said primary file key at said second host system, and carrying out a cryptographic operation in accordance with said primary file key enciphered under said second key encyrpting key of said second host system and said data file of first host system plaintext enciphered under said primary file key to provide said first host system plaintext at said second host system.
Claim 47
Dependent Claim
223 words
In a data processing system providing file security for a data file created by a first host system in one domain for recovery at said first system wherein said data file consists of header information comprising a primary file key enciphered under a secondary file key and first host system plaintext enciphered under said primary file key, the method of replacing said header information with a file recovery key for recovery of said data file at a second host system in another domain comprising the steps of: providing said secondary file key enciphered under a first key encrypting key of said first host system, providing said header information at said first host system, carrying out a cryptographic operation in accordance with said enciphered secondary file key and said header information to provide said primary file key enciphered under a second key encrypting key of said second host system, providing a cross domain key for cross domain communication between said first and second host systems enciphered under a third key encrypting key of said first host system, and carrying out a cryptographic operation in accordance with enciphered cross domain key and said primary file key enciphered under said second key encrypting key of said first host system to provide said primary file key enciphered under said cross domain key as said file recovery key.
Claim 48
Dependent Claim
223 words
In a data processing system providing file security for a data file created by a first host system in one domain for recovery at said first system wherein said data file consists of header information comprising a primary file key enciphered under a secondary file key and first host system plaintext enciphered under said primary file key, the method of replacing said header information with a file recovery key for recovery of said data file at a second host system in another domain comprising the steps of: providing said secondary file key enciphered under a first key encrypting key of said first host system, providing said header information at said first host system, carrying out a cryptographic operation in accordance with said enciphered secondary file key and said header information to provide said primary file key enciphered under a second key encrypting key of said second host system, providing a cross domain key for cross domain communication between said first and second host systems enciphered under a third key encrypting key of said first host system, and carrying out a cryptographic operation in accordance with enciphered cross domain key and said primary file key enciphered under said second key encrypting key of said first host system to provide said primary file key enciphered under said cross domain key as said file recovery key.
Claim 49
Dependent Claim
26 words
In the method as defined in claim 36 wherein said file recovery key is maintained as a private key for use at said second host system.
Claim 50
Dependent Claim
164 words
In a multiple domain data processing system providing file security for a private data file created by a first host system in one domain and recovered by a second host system in another domain, the method of creating said data file comprising the steps of: providing a primary file key enciphered under a private cross domain key as a private file recovery key, providing said private cross domain key enciphered under a first key encrypting key of said first host system, carrying out a cryptographic operation in accordance with said enciphered private cross domain key and said private recovery key to provide said primary file key enciphered under a second key encrypting key of said first host system, providing first host system plaintext, and carrying out a cryptographic operation in accordance with said primary file key enciphered under said second key encrypting key of said first host system and said first host system plaintext to provide first host system ciphertext for said data file.
Claim 51
Dependent Claim
164 words
In a multiple domain data processing system providing file security for a private data file created by a first host system in one domain and recovered by a second host system in another domain, the method of creating said data file comprising the steps of: providing a primary file key enciphered under a private cross domain key as a private file recovery key, providing said private cross domain key enciphered under a first key encrypting key of said first host system, carrying out a cryptographic operation in accordance with said enciphered private cross domain key and said private recovery key to provide said primary file key enciphered under a second key encrypting key of said first host system, providing first host system plaintext, and carrying out a cryptographic operation in accordance with said primary file key enciphered under said second key encrypting key of said first host system and said first host system plaintext to provide first host system ciphertext for said data file.
Claim 52
Dependent Claim
171 words
In a multiple domain data processing system as defined in claim 36 which further includes the method of recovery of said private data file comprising the steps of: providing said private cross domain key enciphered under a first key encrypting key of said second host system, providing said private file recovery key at said second host system, carrying out a cryptographic operation in accordance with said private cross domain key enciphered under said first key encrypting key of said second host system and said private file recovery key to provide said primary file key enciphered under a second key encrypting key of said second host system, providing said private data file of first host system ciphertext at said second host system, and carrying out a cryptographic operation in accordance with said primary file key enciphered under said second key encrypting key of said second host system and said private data file of first host system ciphertext to provide said first host system ciphertext in clear form at said second host system.
Claim 53
Dependent Claim
291 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain having cryptographic apparatus provided with multiple keys and recovered by a second host system in another domain having crytopgraphic apparatus provided with multiple keys, an arrangement for creating said data file at one of said host systems using a protected file key and recovering said data file at the other of said host systems without revealing the multiple keys of either of said host systems to the other of said host systems comprising: means providing a file recovery key for said data file at said first host system for subsequent recovery at said second host system representing a file key enciphered under a file cross domain key for cross domain file communication between said first and second host systems, means providing first host system plaintext, means performing a cryptographic operation for enciphering said first host system plaintext under control of said protected file key to obtain first host system ciphertext for said data file, means providing said file recovery key at said second host system, means operably responsive to said file recovery key to perform a cryptographic operation for reenicphering said file key from encipherment under said cross domain file key to encipherment under a first key encrypting key of said second host system, means providing said data file of first host system ciphertext at said second host system, and means operably responsive to said file key enciphered under said first key encrypting key of said second host system and said data file of first host system ciphertext for performing a cryptographic operation to provide said first host system ciphertext in clear form at said second host system.
Claim 54
Dependent Claim
291 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain having cryptographic apparatus provided with multiple keys and recovered by a second host system in another domain having crytopgraphic apparatus provided with multiple keys, an arrangement for creating said data file at one of said host systems using a protected file key and recovering said data file at the other of said host systems without revealing the multiple keys of either of said host systems to the other of said host systems comprising: means providing a file recovery key for said data file at said first host system for subsequent recovery at said second host system representing a file key enciphered under a file cross domain key for cross domain file communication between said first and second host systems, means providing first host system plaintext, means performing a cryptographic operation for enciphering said first host system plaintext under control of said protected file key to obtain first host system ciphertext for said data file, means providing said file recovery key at said second host system, means operably responsive to said file recovery key to perform a cryptographic operation for reenicphering said file key from encipherment under said cross domain file key to encipherment under a first key encrypting key of said second host system, means providing said data file of first host system ciphertext at said second host system, and means operably responsive to said file key enciphered under said first key encrypting key of said second host system and said data file of first host system ciphertext for performing a cryptographic operation to provide said first host system ciphertext in clear form at said second host system.
Claim 55
Dependent Claim
358 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain having cryptographic apparatus provided with multiple keys and recovered by a second host system in another domain having cryptograhic apparatus provided with multiple keys, an arrangement for creating said data file at one of said host systems using a protected file key and recovering said data file at the other of said host systems without revealing the multiple keys of either of said host systems to the other of said host systems comprising: means providing a file key enciphered under a first key encrypting key of said first host system, means providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, means operably responsive to said enciphered cross domain key and said enciphered file key to perform a cryptographic operation providing a file recovery key for subsequent recovery of said data file at said second host system, means providing first host system plaintext, means operably responsive to said file key enciphered under said first key encrypting key and said first host system plaintext to perform a cryptographic operation providing first host system ciphertext for said data file, means providing said cross domain key enciphered under a first key encrypting key of said second host system, means providing said file recovery key at said second host system, means operably responsive to said cross domain key enciphered under said first key encrypting key of said second host system and said file recovery key to perform a cryptographic operation providing said file key enciphered under a second key encrypting key of said second host system, means providing said data file of first host system ciphertext at said second host system, and means operably responsive to said file key enciphered under said second key encrypting key of said second host system and said data file of first host system ciphertext to perform a cryptographic operation providing said first host system ciphertext in clear form at said second host system.
Claim 56
Dependent Claim
358 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain having cryptographic apparatus provided with multiple keys and recovered by a second host system in another domain having cryptograhic apparatus provided with multiple keys, an arrangement for creating said data file at one of said host systems using a protected file key and recovering said data file at the other of said host systems without revealing the multiple keys of either of said host systems to the other of said host systems comprising: means providing a file key enciphered under a first key encrypting key of said first host system, means providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, means operably responsive to said enciphered cross domain key and said enciphered file key to perform a cryptographic operation providing a file recovery key for subsequent recovery of said data file at said second host system, means providing first host system plaintext, means operably responsive to said file key enciphered under said first key encrypting key and said first host system plaintext to perform a cryptographic operation providing first host system ciphertext for said data file, means providing said cross domain key enciphered under a first key encrypting key of said second host system, means providing said file recovery key at said second host system, means operably responsive to said cross domain key enciphered under said first key encrypting key of said second host system and said file recovery key to perform a cryptographic operation providing said file key enciphered under a second key encrypting key of said second host system, means providing said data file of first host system ciphertext at said second host system, and means operably responsive to said file key enciphered under said second key encrypting key of said second host system and said data file of first host system ciphertext to perform a cryptographic operation providing said first host system ciphertext in clear form at said second host system.
Claim 57
Dependent Claim
288 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain having cryptographic apparatus provided with multiple keys and recovered by a second host system in another domain having cryptographic apparatus provided with multiple keys, the method of creating said data file at one of said host systems using a protected file key and recovering said data file at the other of said host systems without revealing the multiple keys of either of said host systems to the other of said host systems comprising the steps of: providing a file recovery key for said data file at said first host system for subsequent recovery at said second host system representing a file key enciphered under a file cross domain key for cross domain file communication between said first and second host systems, providing first host system plaintext, carrying out a cryptographic operation to encipher said first host system plaintext under control of said protected file key to obtain first host system ciphertext for said data file, providing said file recovery key at said second host system, carrying out a cryptographic operation in accordance with said file recovery key for reenciphering said file key from encipherment under said cross domain file key to encipherment under a first key encrypting key of said second host system, providing said data file of first host system ciphertext at said second host system, and carrying out a crytographic operation in accordance with said file key enciphered under said first key encrypting key of said second host system and said data file of first host system ciphertext to provide said first host system ciphertext in clear form at said second host system.
Claim 58
Dependent Claim
288 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain having cryptographic apparatus provided with multiple keys and recovered by a second host system in another domain having cryptographic apparatus provided with multiple keys, the method of creating said data file at one of said host systems using a protected file key and recovering said data file at the other of said host systems without revealing the multiple keys of either of said host systems to the other of said host systems comprising the steps of: providing a file recovery key for said data file at said first host system for subsequent recovery at said second host system representing a file key enciphered under a file cross domain key for cross domain file communication between said first and second host systems, providing first host system plaintext, carrying out a cryptographic operation to encipher said first host system plaintext under control of said protected file key to obtain first host system ciphertext for said data file, providing said file recovery key at said second host system, carrying out a cryptographic operation in accordance with said file recovery key for reenciphering said file key from encipherment under said cross domain file key to encipherment under a first key encrypting key of said second host system, providing said data file of first host system ciphertext at said second host system, and carrying out a crytographic operation in accordance with said file key enciphered under said first key encrypting key of said second host system and said data file of first host system ciphertext to provide said first host system ciphertext in clear form at said second host system.
Claim 59
Dependent Claim
352 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain having cryptographic apparatus provided with multiple keys and recovered by a second host system in another domain having cryptographic apparatus provided with multiple keys, the method of creating said data file at one of said host systems using a protected file key and recovering said data file at the other of said host systems without revealing the multiple keys of either of said host systems to the other of said host systems comprising: providing a file key enciphered under a first key encrypting key of said first host system, providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, carrying out a cryptographic operation in accordance with said enciphered cross domain key and said enciphered file key to provide a file recovery key for subsequent recovery of said data file at said second host system, providing first host system plaintext, carrying out a cryptographic operation in accordance with said file key enciphered under said first key encrypting key and said first host system plaintext to provide first host system ciphertext for said data file, providing said cross domain key enciphered under a first key encrypting key of said second host system, providing said file recovery key at said second host system, carrying out a cryptographic operation in accordance with said cross domain key enciphered under said first key encrypting key of said second host system and said file recovery key to provide said file key enciphered under a second key encrypting key of said second host system, providing said data file of first host system ciphertext at said second host system, and carrying out a cryptographic operation in accordance with said file key enciphered under said second key encrypting key of said second host system and said data file of first host system ciphertext to provide said first host system ciphertext in clear form at said second host system.
Claim 60
Dependent Claim
352 words
In a multiple domain data processing system providing file security for a data file created by a first host system in one domain having cryptographic apparatus provided with multiple keys and recovered by a second host system in another domain having cryptographic apparatus provided with multiple keys, the method of creating said data file at one of said host systems using a protected file key and recovering said data file at the other of said host systems without revealing the multiple keys of either of said host systems to the other of said host systems comprising: providing a file key enciphered under a first key encrypting key of said first host system, providing a file cross domain key for cross domain file communication between said first and second host systems enciphered under a second key encrypting key of said first host system, carrying out a cryptographic operation in accordance with said enciphered cross domain key and said enciphered file key to provide a file recovery key for subsequent recovery of said data file at said second host system, providing first host system plaintext, carrying out a cryptographic operation in accordance with said file key enciphered under said first key encrypting key and said first host system plaintext to provide first host system ciphertext for said data file, providing said cross domain key enciphered under a first key encrypting key of said second host system, providing said file recovery key at said second host system, carrying out a cryptographic operation in accordance with said cross domain key enciphered under said first key encrypting key of said second host system and said file recovery key to provide said file key enciphered under a second key encrypting key of said second host system, providing said data file of first host system ciphertext at said second host system, and carrying out a cryptographic operation in accordance with said file key enciphered under said second key encrypting key of said second host system and said data file of first host system ciphertext to provide said first host system ciphertext in clear form at said second host system.
References Cited (Backward Citations)
US3962539A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1983-05-13 | 1983-11-12 | 1984-05-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1987-05-13 | 1987-11-12 | 1988-05-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 1991-05-13 | 1991-11-12 | 1992-05-13 | $7700.00 | Window Closed / Lapsed |