US4771461A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Initialization of cryptographic variables in an EFT/POS network with a large number of terminals
Assignee: International Business Machines Corp
•
Filing: 1986-06-27
•
Granted: 1988-09-13
•
Expires: 2006-06-27
Abstract
Abstract A procedure is disclosed for initializing with security and integrity a large number of terminals in an EFT/POS network with cryptographic variables. Each terminal in the network is provided with a cryptographic facility which performs the necessary cryptographic functions. A key distribution center is established, and a public and secret key pair is generated for the key distribution center. Each terminal in the network is provided with a terminal identification known to the key distribution center, the public key of the key distribution center is stored in the cryptographic facility of each terminal. A terminal initializer is designated for each terminal, and the terminal initializer for each terminal is notified of two expiration times for the purposes of registering the terminal's cryptovariable with the key distribution center. The cryptovariable is generated by the terminal using its cryptographic facility. Prior to the first expiration time, a registration request is prepared and transmitted to the key distribution center. The registration request includes the terminal identification and the cryptovariable. When the key distribution center receives this request, the cryptovariable is temporarily registered and that fact is acknowledged to the requesting terminal. After the expiration of the second time, the registration is complete. Provisions are also made for invalidating a terminal identification in the event that more than one registration is attempted for a given terminal identification or that the registration was not made in time. The same procedure can be used to initialize cryptovariables of users of a network. The protocol is basically the same except that a user identification is used instead of a terminal identification, and the users may be provided with a transportable media, such as a magnetic stripe card or the like, which stores the user cryptovariable and can be read by terminals in the network.
Inventors
- 👤 Stephen M. Matyas
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 01:11
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06Q; G06Q20/00; G06Q20/02; G06Q20/04; G06Q20/08; G06Q20/10; G06Q20/14; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/382; G06Q20/3825; G06Q20/3829; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/083; H04L9/0833; H04L9/32; H04L9/3271
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
203 words
A method for initialization of cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a terminal identification known to the key distribution center and a cryptographic facility in which is stored the public key of the key distribution center; designating a terminal initializer for each terminal in the network and notifying the terminal initializer for each terminal of two expiration times for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the first expiration time, preparing and transmitting to said key distribution center a registration request message which includes the terminal identification and said cryptovariable; temprarily registering said cryptovariable at said key distribution center in association with said terminal identification; invalidating said terminal identification whenever a second attempt is made to register a cryptovariable in association with said terminal identification, prior to said first expiration time; and after the expiration of said second time, permanently registering said cryptovariable at said key distribution center.
Claim 2
Independent Claim
203 words
A method for initialization of cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a terminal identification known to the key distribution center and a cryptographic facility in which is stored the public key of the key distribution center; designating a terminal initializer for each terminal in the network and notifying the terminal initializer for each terminal of two expiration times for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the first expiration time, preparing and transmitting to said key distribution center a registration request message which includes the terminal identification and said cryptovariable; temprarily registering said cryptovariable at said key distribution center in association with said terminal identification; invalidating said terminal identification whenever a second attempt is made to register a cryptovariable in association with said terminal identification, prior to said first expiration time; and after the expiration of said second time, permanently registering said cryptovariable at said key distribution center.
Claim 3
Dependent Claim
83 words
The method for initialization of cryptographic variables in a network as recited in claim 1 wherein the request message transmitted to said key distribution center includes time variant data and the step of temporarily registering said cryptovariable includes the step of acknowledging the temporary registration of the cryptovariable to the requesting terminal by sending a message to the requesting terminal containing the terminal identification, the cryptovariable, the time variant data echoed, and a signature using the secret key of the key distribution center.
Claim 4
Dependent Claim
65 words
The method for initialization of cryptographic variables in a network as recited in claim 1 further comprising the steps of: installing the public key of the key distribution center in each terminal at a central location before shipping the terminal to its point of use; and shipping the terminals to their respective points of use with the public key of the key distribution center installed.
Claim 5
Dependent Claim
43 words
The method for initialization of cryptographic variables in a network as recited in claim 1 further comprising the step of installing the public key of the key distribution center in each terminal after the terminal has been installed at its point of use.
Claim 6
Dependent Claim
31 words
The method for initialization of cryptographic variables as recited in claim 1 wherein the step of generating is performed by generating a public key and secret key pair for the terminal.
Claim 7
Dependent Claim
29 words
The method for initialization of cryptographic variables as recited in claim 1 wherein the step of generating is performed by generating a secret terminal key using a symmetric algorithm.
Claim 8
Dependent Claim
93 words
The method for initialization of cryptographic variables as recited in claim 1 further comprising the step of preparing and transmitting to said key distribution center prior to the second expiration time a terminal identification invalidation request message in the event that the terminal fails to receive a positive acknowledgement from the key distribution center stating that the requested cryptovariable was temporarily registered at the key distribution center or fails to receive a positive acknowledgement from the key distribution center stating that the requested terminal identification has been invalidated by the key distribution center.
Claim 9
Dependent Claim
58 words
The method for initialization of cryptographic variables as recited in claim 1 further comprising the steps of: proving the identification of the designated terminal initializer for a terminal after the second expiration time has passed; and requesting the invalidation of the terminal identification of that terminal if the requested cryptovariable was not registered with the key distribution center.
Claim 10
Dependent Claim
59 words
The method for initialization of cryptographic variables as recited in claim 1 further comprising the steps of: requesting the key distribution center to provide a verification of the cryptovariable registration for the terminal identification after the second expiration time has passed; and providing verification of the registration if the terminal identification is valid and a cryptovariable was previously registered.
Claim 11
Dependent Claim
49 words
The method for initialization of cryptographic variables as recited in claim 9 wherein the step of providing verification of the registration is provided by sending a message specifying the registered cryptovariable for that terminal, the terminal identification and a signature using the secret key of the key distribution center.
Claim 12
Independent Claim
205 words
A method for initialization of cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a terminal identification known to the key distribution center and a cryptographic facility in which is stored the public key of the key distribution center; designating a terminal initializer for each terminal in the network and notifying the terminal initializer for each terminal of two expiration times for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the first expiration time, preparing and transmitting to said key distribution center a registration request message which includes the terminal identification, time variant data, and said cryptovariable; temprarily registering said cryptovariable at said key distribution center in association with said terminal identification; acknowledging the temporary registration of the cryptovariable to the requesting terminal by sending a message to the requesting terminal containing the terminal identification, the cryptovariable, the time variant data echoed, and a signature using the secret key of the key distribution center;
Claim 13
Independent Claim
205 words
A method for initialization of cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a terminal identification known to the key distribution center and a cryptographic facility in which is stored the public key of the key distribution center; designating a terminal initializer for each terminal in the network and notifying the terminal initializer for each terminal of two expiration times for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the first expiration time, preparing and transmitting to said key distribution center a registration request message which includes the terminal identification, time variant data, and said cryptovariable; temprarily registering said cryptovariable at said key distribution center in association with said terminal identification; acknowledging the temporary registration of the cryptovariable to the requesting terminal by sending a message to the requesting terminal containing the terminal identification, the cryptovariable, the time variant data echoed, and a signature using the secret key of the key distribution center;
Claim 14
Dependent Claim
43 words
invalidating said terminal identification whenever a second attempt is made to register a cryptovariable in association with said terminal identification, prior to said first expiration time; and after the expiration of said second time, permanently registering said cryptovariable at said key distribution center.
Claim 15
Dependent Claim
43 words
invalidating said terminal identification whenever a second attempt is made to register a cryptovariable in association with said terminal identification, prior to said first expiration time; and after the expiration of said second time, permanently registering said cryptovariable at said key distribution center.
Claim 16
Independent Claim
245 words
The method for initialization of cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a terminal identification known to the key distribution center and a cryptographic facility in which is stored the public key of the key distribution center; designating a terminal initializer for each terminal in the network and notifying the terminal initializer for each terminal of two expiration times for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the first expiration time, preparing and transmitting to said key distribution center a registration request message which includes the terminal identification, time variant data, and said cryptovariable; temprarily registering said cryptovariable at said key distribution center in association with said terminal identification; acknowledging the temporary registration of the cryptovariable to the requesting terminal by sending a message to the requesting terminal containing the terminal identification, the cryptovariable, the time variant data echoed, and a signature using the secret key of the key distribution center; invalidating said terminal identification whenever a second attempt is made to register a cryptovariable in association with said terminal identification, prior to said first expiration time; and after the expiration time, permanently registering said cryptovariable at said key distribution center.
Claim 17
Independent Claim
245 words
The method for initialization of cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a terminal identification known to the key distribution center and a cryptographic facility in which is stored the public key of the key distribution center; designating a terminal initializer for each terminal in the network and notifying the terminal initializer for each terminal of two expiration times for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the first expiration time, preparing and transmitting to said key distribution center a registration request message which includes the terminal identification, time variant data, and said cryptovariable; temprarily registering said cryptovariable at said key distribution center in association with said terminal identification; acknowledging the temporary registration of the cryptovariable to the requesting terminal by sending a message to the requesting terminal containing the terminal identification, the cryptovariable, the time variant data echoed, and a signature using the secret key of the key distribution center; invalidating said terminal identification whenever a second attempt is made to register a cryptovariable in association with said terminal identification, prior to said first expiration time; and after the expiration time, permanently registering said cryptovariable at said key distribution center.
Claim 18
Independent Claim
301 words
The method for initialization of cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a terminal identification known to the key distribution center and a cryptographic facility in which is stored the public key of the key distribution center; designating a terminal initializer for each terminal in the network and notifying the terminal initializer for each terminal of two expiration times for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the expiration time, preparing at the terminal and transmitting to said key distribution center a registration request message which includes the terminal identification, time variant data, and said cryptovariable; temprarily registering said cryptovariable at said key distribution center in association with said terminal identification; acknowledging in a first acknowledgement, the temporary registration of the cryptovariable by sending a message to the requesting terminal containing the terminal identification, the cryptovariable, the time variant data echoed, and a signature using the secret key of the key distribution center; invalidating at the key distribution center said terminal identification whenever a second attempt is made to register a cryptovariable in association with said terminal identification, prior to said first expiration time; acknowledging said invalidating step to said terminal in a second acknowledgement; preparing at the terminal and transmitting to said key distribution center prior to said expiration time a terminal identification invalidation request message in the event that the terminal fails to receive either said first or said second acknowledgement; and after the expiration time, permanently registering said cryptovariable at said key distribution center.
Claim 19
Independent Claim
301 words
The method for initialization of cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a terminal identification known to the key distribution center and a cryptographic facility in which is stored the public key of the key distribution center; designating a terminal initializer for each terminal in the network and notifying the terminal initializer for each terminal of two expiration times for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the expiration time, preparing at the terminal and transmitting to said key distribution center a registration request message which includes the terminal identification, time variant data, and said cryptovariable; temprarily registering said cryptovariable at said key distribution center in association with said terminal identification; acknowledging in a first acknowledgement, the temporary registration of the cryptovariable by sending a message to the requesting terminal containing the terminal identification, the cryptovariable, the time variant data echoed, and a signature using the secret key of the key distribution center; invalidating at the key distribution center said terminal identification whenever a second attempt is made to register a cryptovariable in association with said terminal identification, prior to said first expiration time; acknowledging said invalidating step to said terminal in a second acknowledgement; preparing at the terminal and transmitting to said key distribution center prior to said expiration time a terminal identification invalidation request message in the event that the terminal fails to receive either said first or said second acknowledgement; and after the expiration time, permanently registering said cryptovariable at said key distribution center.
Claim 20
Independent Claim
311 words
The method for initialization of cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a terminal identification known to the key distribution center and a cryptographic facility in which is stored the public key of the key distribution center; designating a terminal initializer for each terminal in the network and notifying the terminal initializer for each terminal of two expiration times for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the expiration time, preparing at the terminal and transmitting to said key distribution center a registration request message which includes the terminal identification, time variant data, and said cryptovariable; invalidating said terminal identification at the key distribution center in the event that a cryptovariable has been previously transmitted and temporarily registered at the key distribution center by an imposter using said terminal identification, prior to said expiration time; acknowledging said invalidating step to said terminal; temprarily registering said cryptovariable at said key distribution center in association with said terminal identification in the event that there has been no prior registration under said terminal identification; acknowledging the temporary registration of the cryptovariable to the requesting terminal by sending a message to the requesting terminal containing the terminal identification, the cryptovariable, the time variant data echoed, and a signature using the secret key of the key distribution center; invalidating said temporarily registered cryptovariable whenever a subsequent attempt is made by an imposter to register a different cryptovariable in association with said terminal identification, prior to said expiration time; and after the expiration time, permanently registering said cryptovariable at said key distribution center.
Claim 21
Independent Claim
311 words
The method for initialization of cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a terminal identification known to the key distribution center and a cryptographic facility in which is stored the public key of the key distribution center; designating a terminal initializer for each terminal in the network and notifying the terminal initializer for each terminal of two expiration times for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the expiration time, preparing at the terminal and transmitting to said key distribution center a registration request message which includes the terminal identification, time variant data, and said cryptovariable; invalidating said terminal identification at the key distribution center in the event that a cryptovariable has been previously transmitted and temporarily registered at the key distribution center by an imposter using said terminal identification, prior to said expiration time; acknowledging said invalidating step to said terminal; temprarily registering said cryptovariable at said key distribution center in association with said terminal identification in the event that there has been no prior registration under said terminal identification; acknowledging the temporary registration of the cryptovariable to the requesting terminal by sending a message to the requesting terminal containing the terminal identification, the cryptovariable, the time variant data echoed, and a signature using the secret key of the key distribution center; invalidating said temporarily registered cryptovariable whenever a subsequent attempt is made by an imposter to register a different cryptovariable in association with said terminal identification, prior to said expiration time; and after the expiration time, permanently registering said cryptovariable at said key distribution center.
Claim 22
Independent Claim
235 words
The method for initialization of user cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a user identification known to the key distribution center and each terminal in the network with a cryptographic facility in which is stored the public key of the key distribution center; notifying each user of an expiration time for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the expiration time, preparing and transmitting to said key distribution center a registration request message which includes the user identification, time variant data, and said cryptovariable; temprarily registering said cryptovariable at said key distribution center in association with said user identification; acknowledging the temporary registration of the cryptovariable to the requesting terminal by sending a message to the requesting terminal containing the user identification, the cryptovariable, the time variant data echoed, and a signature using the secret key of the key distribution center; invalidating said user identification whenever a second attempt is made to register a cryptovariable in association with said user identification, prior to said expiration time; and after the expiration time, permanently registering said cryptovariable at said key distribution center.
Claim 23
Independent Claim
235 words
The method for initialization of user cryptographic variables in a network with a predetermined number of terminals using a public key algorithm comprising the steps of: establishing a key distribution center and generating a public and secret key pair for the key distribution center; providing each terminal in the network with a user identification known to the key distribution center and each terminal in the network with a cryptographic facility in which is stored the public key of the key distribution center; notifying each user of an expiration time for purposes of registering a terminal cryptovariable with said key distribution center; generating at a terminal a cryptovariable using said cryptographic facility; prior to the expiration time, preparing and transmitting to said key distribution center a registration request message which includes the user identification, time variant data, and said cryptovariable; temprarily registering said cryptovariable at said key distribution center in association with said user identification; acknowledging the temporary registration of the cryptovariable to the requesting terminal by sending a message to the requesting terminal containing the user identification, the cryptovariable, the time variant data echoed, and a signature using the secret key of the key distribution center; invalidating said user identification whenever a second attempt is made to register a cryptovariable in association with said user identification, prior to said expiration time; and after the expiration time, permanently registering said cryptovariable at said key distribution center.
References Cited (Backward Citations)
US4386233A
Cited
US4438824A
Cited
US4453074A
Cited
US4458109A
Cited
US4578531A
Cited
US4536647A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1991-09-13 | 1992-03-14 | 1992-09-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1995-09-13 | 1996-03-14 | 1996-09-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 1999-09-13 | 2000-03-14 | 2000-09-13 | $7700.00 | Window Closed / Lapsed |