Key management system for on-line communication

Claim 2

A transaction terminal having a cryptographic key generator suitable for on-line encrypted communication between the terminal and a central host comprising: means for encrypting data; means for receiving and storing a base generator value; storage means containing a plurality of modifier values; means for generating a matrix table of encryption keys wherein the keys in a first column in the matrix table are generated by encrypting said modifier values using the base generator value as the encrypting key and wherein the keys of the second and each successive column in the table are generated by encrypting the modifier values with the first unused key in the previous column, and wherein any key that is used to generate a column of keys is immediately erased; and counter means, having at least as many digits as columns in said matrix, with the location of the digits in the counter means corresponding to a particular column in the matrix and with the value of each digit corresponding to a particular row in the matrix, whereby transmission of the value in the counter means to the host during a transaction will enable the host to determine the key used to encrypt the communication.

Claim 3

A terminal as recited in claim 1 wherein during a transaction, said encrypting means selects a key from the first unused row in the last column of the matrix to encrypt the communication and erases that key when the transaction is complete.

Claim 4

A terminal as recited in claim 2 arranged such that when a column of keys has been erased, the generator means generates a new column by encrypting the modifier values with the first unused key in the previous row and thereafter erases that key.

Claim 5

A terminal as recited in claim 1 including a means for replacing the gas generator value when all the keys in said matrix have been erased, said means including a table of secondary modifier values and wherein said generation means functions to generate a secondary key table by encrypting the secondary modifier values in said table using the base generator value, with said keys in said secondary key table being available to replace the base generator value.

Claim 6

A terminal as recited in claim 4 wherein said counter includes an overflow digit, with the value of said overflow digit corresponding to the key from the secondary key table that was utilized to generate the matrix.

Claim 7

A terminal as recited in claim 1 wherein the counter is decimal based.

Claim 8

A secure communication system including a transaction terminal and a central host, with said system comprising: a terminal including; means for encrypting data; means for receiving and storing a base generator value; storage means containing a plurality of modifier values; means for generating a matrix table of encryption keys wherein the keys in a first column in the matrix table are generated by encrypting said modifier values using the base generator value as the encrypting key and wherein the keys of the second and each successive column in the table are generated by encrypting the modifier values with the first unused key in the previous column and wherein any key that is used to generate a column of keys is immediately erased; and counter means, having at least as many digits as columns in said matrix, with the location of the digits in the counter means corresponding to a particular column in the matrix and with the value of each digit corresponding to a particular row in the matrix; means for transmitting to the central host the value of the counter means along with transaction data encrypted using an encryption key from the matrix; and means at the central host for deriving the encryption key utilizing the counter value received from the terminal permitting evaluation of the encrypted transaction information.

Claim 9

A secure communication system including a transaction terminal and a central host, with said system comprising: a terminal including; means for encrypting data; means for receiving and storing a base generator value; storage means containing a plurality of modifier values; means for generating a matrix table of encryption keys wherein the keys in a first column in the matrix table are generated by encrypting said modifier values using the base generator value as the encrypting key and wherein the keys of the second and each successive column in the table are generated by encrypting the modifier values with the first unused key in the previous column and wherein any key that is used to generate a column of keys is immediately erased; and counter means, having at least as many digits as columns in said matrix, with the location of the digits in the counter means corresponding to a particular column in the matrix and with the value of each digit corresponding to a particular row in the matrix; means for transmitting to the central host the value of the counter means along with transaction data encrypted using an encryption key from the matrix; and means at the central host for deriving the encryption key utilizing the counter value received from the terminal permitting evaluation of the encrypted transaction information.

Claim 10

A communication system as recited in claim 7, where the means for deriving the key at the central host encrypts the modifier value associated with the most significant digit of the counter using the base generator value and thereafter, the modifier values associated with each of the successive digits of the counter are encrypted utilizing the result from the previous encryption step as the encryption key, with the final result being representative of the key used to encrypt the transaction data.

Claim 11

A communication system as recited in claim 7 wherein during a transaction, said encrypting means selects a key from the first unused row in the last column of the matrix to encrypt the communication and erases that key when the transaction is complete.

Claim 12

A communication system as recited in claim 9 arranged such that when a column of keys has been erased, the generator means generates a new column by encrypting the modifier values with the first unused key in the previous row and thereafter erases that key.

Claim 13

A communication system as recited in claim 7 including a means for replacing the base generator value when all the keys in said matrix have been erased, said means including a table of secondary modifier values and wherein said generation means functions to generate a secondary key table by encrypting the secondary modifier values in said table using the base generator value, with said keys in said secondary key table being available to replace the base generator value.

Claim 14

A communication system as recited in claim 11 wherein said counter includes an overflow digit, with the value of said overflow digit corresponding to the key from the secondary key table that was utilized to generate the matrix.

Claim 15

A communication system as recited in claim 7 wherein the counter is decimal based.