US4578531A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Encryption system key distribution method and apparatus
Assignee: Nokia Bell Labs
•
Filing: 1982-06-09
•
Granted: 1986-03-25
•
Expires: 2002-06-09
Abstract
Abstract Encryption systems typically rely on the distribution of cipher keys between terminals for scrambling and unscrambling transmitted messages. Elaborate security precautions are necessary to protect the cipher keys since a compromise of the key could result in a compromise of the transmission. There is disclosed a key distribution method and apparatus which uses a channel from identified terminals to a central key distribution center for the establishment, on a one-session basis, of the key which is to be used for the next session between those terminals. The key establishing link is itself encoded using a cipher key which changes after each usage. Provision is made to verify, for each new connection, that a compromise has not priorly occurred.
Inventors
- 👤 Joseph R. Everhart
- 👤 Jeffrey G. Osborn
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 11:22
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0838; H04L9/0841; A; A61; A61F; A61F7/00; A61F7/12; A61M; A61M31/00; H04L9/0819; H04L9/083; A61F2007/0001; A61F2007/0018; A61F2007/0028; A61F2007/009
Claims Analysis
Total Claims: 24
Claim 1
Independent Claim
123 words
A key distribution method for communicating cipher keys between two terminals via a key distribution center, KDC, said method comprising establishing between any one terminal and said key distribution center a terminal-unique cipher key for controlling the generating of session keys, cooperating by transmitting information using said established terminal-unique cipher key between said KDC and said one terminal on a subsequent connection between said KDC and said one terminal to establish a session key for use by said one terminal in a subsequent secure transmission between said one terminal and a second terminal, and changing said priorly established terminal-unique cipher key in response to use of said priorly established terminal-unique cipher key on said subsequent connection between said one terminal and said KDC.
Claim 2
Dependent Claim
123 words
A key distribution method for communicating cipher keys between two terminals via a key distribution center, KDC, said method comprising establishing between any one terminal and said key distribution center a terminal-unique cipher key for controlling the generating of session keys, cooperating by transmitting information using said established terminal-unique cipher key between said KDC and said one terminal on a subsequent connection between said KDC and said one terminal to establish a session key for use by said one terminal in a subsequent secure transmission between said one terminal and a second terminal, and changing said priorly established terminal-unique cipher key in response to use of said priorly established terminal-unique cipher key on said subsequent connection between said one terminal and said KDC.
Claim 3
Dependent Claim
38 words
The invention set forth in claim 1 wherein said session key is generated from the asymmetric exchange of information between said one terminal and said KDC plus the subsequent exchange of information between said first and second terminals.
Claim 4
Dependent Claim
24 words
The invention set forth in claim 2 wherein said session key at said one terminal is random with respect to information at said KDC.
Claim 5
Dependent Claim
25 words
The invention set forth in claim 2 wherein said session key at said one terminal is underivable with respect to any information at said KDC.
Claim 6
Dependent Claim
130 words
A key distribution center for controlling the dissemination of session cipher keys between remotely located terminals, said center arranged for switched access to a plurality of said terminals, said center comprising means for establishing communication cipher keys between said center and each said terminal having access thereto, each cipher key unique to each said terminal, means operative when said terminals access said center for bidirectional asymmetrically exchanging information with said accessing terminals using, as a foundation for said exchange, said priorly established communication cipher keys, and means responsive to said exchanged information between said center and two of said terminals and the subsequent bidirectional asymmetrical exchange of information between said two terminals for allowing said two terminals to establish a session cipher key for secure transmission between said two terminals.
Claim 7
Dependent Claim
130 words
A key distribution center for controlling the dissemination of session cipher keys between remotely located terminals, said center arranged for switched access to a plurality of said terminals, said center comprising means for establishing communication cipher keys between said center and each said terminal having access thereto, each cipher key unique to each said terminal, means operative when said terminals access said center for bidirectional asymmetrically exchanging information with said accessing terminals using, as a foundation for said exchange, said priorly established communication cipher keys, and means responsive to said exchanged information between said center and two of said terminals and the subsequent bidirectional asymmetrical exchange of information between said two terminals for allowing said two terminals to establish a session cipher key for secure transmission between said two terminals.
Claim 8
Dependent Claim
29 words
The invention set forth in claim 5 wherein said key distribution center further comprising means for changing said established communication cipher keys as a result of said exchanged information.
Claim 9
Dependent Claim
32 words
The invention set forth in claim 5 wherein said cipher key establishing means uses information from a prior transmission from a particular terminal for establishing said cipher keys to said particular terminal.
Claim 10
Dependent Claim
42 words
The invention set forth in claim 5 wherein said exchanged information includes information generated in part at said center for the random generation of said session key allowing said session key to be underivable with respect to any information at said center.
Claim 11
Dependent Claim
133 words
A key distribution center for controlling the distribution of cipher control information among a number of terminals, said center comprising means for individually exchanging encoded information between any of said terminals, said exchange for any particular terminal based partially upon a last information exchange between said particular terminal and said center, means for identifying at least two terminals where encrypted session information is to be exchanged and for accepting from said identified terminals certain encryption control information, and means for modifying, according to a preestablished pattern, accepted information from said identified terminals and for communicating said modified information to the other of said terminals so as to allow each of said terminals to thereafter establish, independent of any information available at said center, a cipher key allowing said session information to be encrypted.
Claim 12
Dependent Claim
133 words
A key distribution center for controlling the distribution of cipher control information among a number of terminals, said center comprising means for individually exchanging encoded information between any of said terminals, said exchange for any particular terminal based partially upon a last information exchange between said particular terminal and said center, means for identifying at least two terminals where encrypted session information is to be exchanged and for accepting from said identified terminals certain encryption control information, and means for modifying, according to a preestablished pattern, accepted information from said identified terminals and for communicating said modified information to the other of said terminals so as to allow each of said terminals to thereafter establish, independent of any information available at said center, a cipher key allowing said session information to be encrypted.
Claim 13
Dependent Claim
121 words
An encryption terminal operable for communicating with other said terminals for the exchange of encrypted information, said encryption occurring under control of a session encryption key, said terminal including means for establishing between said terminal and a key distribution center a unique cipher key for exchanging information between said terminal and said center, means for storing information pertaining to established exchanged cipher keys with said center, means for comparing said stored information against information received from said center during an information exchange for verifying that the information on the last exchange to said center was not modified, and session means for enabling a secure transmission with a selected other terminal, said session means controlled in part by said accepted exchanged information.
Claim 14
Dependent Claim
121 words
An encryption terminal operable for communicating with other said terminals for the exchange of encrypted information, said encryption occurring under control of a session encryption key, said terminal including means for establishing between said terminal and a key distribution center a unique cipher key for exchanging information between said terminal and said center, means for storing information pertaining to established exchanged cipher keys with said center, means for comparing said stored information against information received from said center during an information exchange for verifying that the information on the last exchange to said center was not modified, and session means for enabling a secure transmission with a selected other terminal, said session means controlled in part by said accepted exchanged information.
Claim 15
Dependent Claim
27 words
The invention set forth in claim 10 wherein said terminal also includes means for modifying said unique cipher key after each said information exchange with said center.
Claim 16
Dependent Claim
25 words
The invention set forth in claim 10 wherein said exchanged cipher keys are based, in part, on a bidirectional asymmetric information exchange with said center.
Claim 17
Dependent Claim
38 words
The invention set forth in claim 10 wherein said session means includes the establishment of symmetric session keys with said selected other terminal, said session keys derived by information from said center, said terminal and said other terminal.
Claim 18
Dependent Claim
121 words
An encryption terminal operable for communicating with other said terminals for the exchange of encrypted information, said encryption occurring under control of a session encryption key, said terminal including means for establishing between said terminal and a key distribution center a unique cipher key for exchanging information between said terminal and said center, means for storing information pertaining to established exchanged cipher keys with said center, means for exchanging information with said center, said information exchange enabled by said stored cipher key information, session means for enabling a secure transmission with a selected other terminal, said session means controlled in part by said information exchange, and means for modifying said unique cipher key after each said information exchange with said center.
Claim 19
Dependent Claim
121 words
An encryption terminal operable for communicating with other said terminals for the exchange of encrypted information, said encryption occurring under control of a session encryption key, said terminal including means for establishing between said terminal and a key distribution center a unique cipher key for exchanging information between said terminal and said center, means for storing information pertaining to established exchanged cipher keys with said center, means for exchanging information with said center, said information exchange enabled by said stored cipher key information, session means for enabling a secure transmission with a selected other terminal, said session means controlled in part by said information exchange, and means for modifying said unique cipher key after each said information exchange with said center.
Claim 20
Dependent Claim
25 words
The invention set forth in claim 14 wherein said exchanged cipher keys are based, in part, on a bidirectional asymmetric information exchange with said center.
Claim 21
Dependent Claim
38 words
The invention set forth in claim 14 wherein said session means includes the establishment of symmetric session keys with said selected other terminal, said session keys derived by information from said center, said terminal and said other terminal.
Claim 22
Dependent Claim
147 words
A cipher key distribution method for controlling the dissemination of session cipher keys between remotely located terminals and a key distribution center, said center arranged for switched access to a plurality of said terminals, said method comprising establishing pairs of communication cipher keys between said center and each said terminal having access thereto, each said pair being unique to each said terminal, exchanging, when one of said terminals accesses said center, information with said accessed terminal using, as a foundation for said exchange, said priorly established communication cipher key, communicating to said terminal, in response to said exchanged information, other information allowing said terminal to establish a session cipher key for use with an identified other terminal also having access to said center, said information exchanged between said center and said terminal includes receiving from said center the base Y and modulus Q of a Diffie-Hellman algorithm.
Claim 23
Dependent Claim
147 words
A cipher key distribution method for controlling the dissemination of session cipher keys between remotely located terminals and a key distribution center, said center arranged for switched access to a plurality of said terminals, said method comprising establishing pairs of communication cipher keys between said center and each said terminal having access thereto, each said pair being unique to each said terminal, exchanging, when one of said terminals accesses said center, information with said accessed terminal using, as a foundation for said exchange, said priorly established communication cipher key, communicating to said terminal, in response to said exchanged information, other information allowing said terminal to establish a session cipher key for use with an identified other terminal also having access to said center, said information exchanged between said center and said terminal includes receiving from said center the base Y and modulus Q of a Diffie-Hellman algorithm.
Claim 24
Dependent Claim
22 words
The invention set forth in claim 14 further including the step of modifying said communication cipher keys during each said information exchange.
References Cited (Backward Citations)
US4182933A
Cited
US4200770A
Cited
US4203166A
Cited
US4238853A
Cited
US4218738A
Cited
US4418275A
Cited
US4386233A
Cited
US4417338A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1989-03-24 | 1989-09-23 | 1990-03-25 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1993-03-24 | 1993-09-23 | 1994-03-25 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 1997-03-24 | 1997-09-23 | 1998-03-25 | $7700.00 | Window Closed / Lapsed |