Patent US4888801A successfully refreshed from Google Patents.
US4888801A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Hierarchical key management system
Assignee: General Dynamics Mission Systems Inc
•
Filing: 1988-05-02
•
Granted: 1989-12-19
•
Expires: 2008-05-02
Abstract
Abstract A hierarchical key management system includes a number of secure terminals. These terminals provide secure access to a corresponding number of users. A user inserts a security activation device or key into the secure terminal to access a secure connection through the established communication network. A group of secure wireline terminals is connected to a key certification authority. There may be several groups of key certification authorities and corresponding secure terminal users. At the highest level, a key certification center authorizes secure communications by the key certification authorities. In turn, the key certification authorities authorize secure communications between the users. As a result, if one level of key management is compromised, other levels and users are not affected.
Inventors
- 👤 Robert I. Foster
- 👤 Robert F. Pfeifer
- 👤 Thomas J. Mihm, Jr.
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 12:03
CPC Classifications
H; H04; H04K; H04K1/00; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/083; H04L9/0833; H04L9/0836; H04L9/32; H04L9/3263
Claims Analysis
Total Claims: 27
Claim 1
Independent Claim
145 words
A hierarchical key management system for enabling ones of a plurality of users to establish secure communications via a switching network, said hierarchical key management system comprising: predefined user groups of said users; each of said users prior to communication with one another having certification by a common authority said certification comprising the generation a a set asymmetric domain keys which are encrypted and modified to include the authorization predetermined time interval for which said certification is valid; terminal means connected to said switching network, said terminal means for establishing secure communications through said switching network; groups of terminal means, each group corresponding to said group of users, a first terminal means establishing communications with a second terminal means via said switching network; and said first and second terminal means directly establishing secure communications via said switching network, without subsequent connection to said common authority.
Claim 2
Dependent Claim
145 words
A hierarchical key management system for enabling ones of a plurality of users to establish secure communications via a switching network, said hierarchical key management system comprising: predefined user groups of said users; each of said users prior to communication with one another having certification by a common authority said certification comprising the generation a a set asymmetric domain keys which are encrypted and modified to include the authorization predetermined time interval for which said certification is valid; terminal means connected to said switching network, said terminal means for establishing secure communications through said switching network; groups of terminal means, each group corresponding to said group of users, a first terminal means establishing communications with a second terminal means via said switching network; and said first and second terminal means directly establishing secure communications via said switching network, without subsequent connection to said common authority.
Claim 3
Dependent Claim
135 words
A hierarchical key management system as claimed in claim 1, said common authority including: a plurality of key certification authority means for certifying said users of a user group, each of said key certification authority means corresponding to a user group and to a terminal means group, each key certification authority means certifying its corresponding users for use of said terminal means for direct secure communications with other users of said user group, each of said plurality of key certification authority means being connected to said terminal means of said corresponding group; and key certification center means connected to each of said plurality of key certification authority means, said certification center means for granting certification authority to each of said key certification authority means for authorizing direct secure communications between terminal means of different groups.
Claim 4
Dependent Claim
50 words
A hierarchical key management system as claimed in claim 1, wherein there is further included security activation device means corresponding to an individual user and being connectable to said terminal means, said security activation device means operating to store authentication, encryption and decryption information for transmission to said terminal means.
Claim 5
Dependent Claim
36 words
A hierarchical key management system as claimed in claim 3, said security activation device means further connected to said terminal means to enable said terminal means to program said security activation device means with certification information.
Claim 6
Dependent Claim
39 words
A hierarchical key management system as claimed in claim 1, said security activation device means being further connected to said terminal means to permit said terminal means to repetitively reprogram said security activation device means with regenerated communication information.
Claim 7
Dependent Claim
41 words
A hierarchical key management system as claimed in claim 2, wherein said users of a user group are directly connected to said key certification center means for the condition of the user group's key certification authority means being out of service.
Claim 8
Dependent Claim
31 words
A hierarchical key management system as claimed in claim 2, said terminal means including modem means for establishing said connections between said corresponding key certification authority means and said other users.
Claim 9
Dependent Claim
90 words
A hierarchical key management system as claimed in claim 7, said key certification authority means including: modem means connected to said key certification center means and to said users of said corresponding user group, said modem means providing high speed communication from said key certification authority means to said key certification center means and to said users of said corresponding user group; and computer means connected to said users of said user group via said modem means for certifying each of said users of said user group for secure communications.
Claim 10
Dependent Claim
70 words
A hierarchical key management system as claimed in claim 8, said computer means including: CPU means; display means for providing visual display of information and said display means being connected to said CPU means; keyboard means for entering information into said CPU and said keyboard means being connected to said CPU means; and printer means connected to said CPU means and said printer means providing a hard copy of information.
Claim 11
Dependent Claim
72 words
A hierarchical key management system as claimed in claim 9, said key certification center means including: modem means connected to each of said key certification authority means, said modem means providing high speed communication between said key certification authority means and said key certification center means; and computer means connected to said key certification authority means via said modem means for certifying each of said key certification authority means for secure communications.
Claim 12
Dependent Claim
69 words
A hierarchical key management system as claimed in claim 10, said computer means including: CPU means; display means for providing visual display of information and said display means being connected to said CPU means; keyboard means for entering information into said CPU and said keyboard means being connected to said CPU means; and printer means connected to said CPU means, said printer means providing a hard copy of information.
Claim 13
Independent Claim
137 words
A method for secure communications via a switching network between at least two terminals of a plurality of terminals, each of said terminal receiving prior to communication with one another having certification said certification comprising generating a a set of asymmetric domain keys which are encrypted and modified to include the authorization predetermined time interval for which said certification is valid from a common authority, said method comprising the steps of: completing a connection directly between said two terminals via said switching network for the transmission of information; exchanging keying information between said two terminals under said previous certification of said common authority; establishing without subsequent connection to said common authority a session key directly between said two terminals; and determining crypto synchronization information for each terminal, to allow secure communications directly between said two connected terminals.
Claim 14
Independent Claim
137 words
A method for secure communications via a switching network between at least two terminals of a plurality of terminals, each of said terminal receiving prior to communication with one another having certification said certification comprising generating a a set of asymmetric domain keys which are encrypted and modified to include the authorization predetermined time interval for which said certification is valid from a common authority, said method comprising the steps of: completing a connection directly between said two terminals via said switching network for the transmission of information; exchanging keying information between said two terminals under said previous certification of said common authority; establishing without subsequent connection to said common authority a session key directly between said two terminals; and determining crypto synchronization information for each terminal, to allow secure communications directly between said two connected terminals.
Claim 15
Dependent Claim
40 words
A method for secure communications as claimed in claim 11, wherein there is further included the step of inserting a security activation device into said terminals for insuring that each user of the corresponding terminal is certified for secure communications.
Claim 16
Dependent Claim
37 words
A method for secure communications as claimed in claim 12, wherein there is further included the step of verifying information contained on said security activation device by said terminal to insure that said user is presently certified.
Claim 17
Dependent Claim
65 words
A method for secure communications as claimed in claim 14, said step of exchanging including the steps of: first transmitting an access/domain message from one terminal to another terminal; first receiving an access/domain message from said other terminal; and first comparing said transmitted access/domain message with said received access/domain message to determine whether said messages have a common key certification center or key certification authority.
Claim 18
Dependent Claim
52 words
A method for secure communications as claimed in claim 15, said step of exchanging further including the steps of: second transmitting a registration message from said one terminal to said other terminal; second receiving said registration message from said other terminal; and first extracting an asymmetric domain key of said other terminal.
Claim 19
Dependent Claim
54 words
A method for secure communications as claimed in claim 16, wherein said step of exchanging further includes the steps of: third transmitting an authentication message from said one terminal to said other terminal; third receiving said authentication message of said other terminal; and second extracting an asymmetric encrypt key from said received authentication packet.
Claim 20
Dependent Claim
29 words
A method for secure communications as claimed in claim 17, said step of exchanging further including the step of generating a random component for encrypting transmit and receive keys.
Claim 21
Dependent Claim
54 words
A method for secure communications as claimed in claim 18, said step of exchanging further including the steps of: fourth transmitting a random component message from said one terminal to said other terminal; fourth receiving said random component message of said other terminal; and third extracting said receive key from said random component message.
Claim 22
Dependent Claim
45 words
A method for secure communications as claimed in claim 19, wherein said step of exchanging further includes the steps of: fifth transmitting a crypto synchronization message from said one terminal to said other terminal; and fifth receiving said crypto synchronization message from said other terminal.
Claim 23
Dependent Claim
154 words
A hierarchical key management system for establishing secure communications between at least two users of a plurality of users via a switching network, said hierarchical key management system comprising: key certification means said key certification means comprising means for the generation a a set of asymmetric domain keys which are encrypted and modified to include the authorization predetermined time interval for which said certification is valid; predefined user groups of said users; terminal means connected to said key certification mans for certifying said users of prior to communication with one another; groups of terminal means, each group corresponding to said groups of users, each said terminal means permitting direct secure communications between users of said plurality through said switching network; and key certification means for off-line certification of said users for user of said terminal means for on-line secure communications between said at least two users without subsequent connection to said key certification authority.
Claim 24
Dependent Claim
154 words
A hierarchical key management system for establishing secure communications between at least two users of a plurality of users via a switching network, said hierarchical key management system comprising: key certification means said key certification means comprising means for the generation a a set of asymmetric domain keys which are encrypted and modified to include the authorization predetermined time interval for which said certification is valid; predefined user groups of said users; terminal means connected to said key certification mans for certifying said users of prior to communication with one another; groups of terminal means, each group corresponding to said groups of users, each said terminal means permitting direct secure communications between users of said plurality through said switching network; and key certification means for off-line certification of said users for user of said terminal means for on-line secure communications between said at least two users without subsequent connection to said key certification authority.
Claim 25
Dependent Claim
26 words
A hierarchical key management system as claimed in claim 12, said terminal means including means for communication between said key certification authority means and said users.
Claim 26
Dependent Claim
29 words
A hierarchical key management system as claimed in claim 12, said key certification authority means including means for communication between said key certification center means and said terminal means.
Claim 27
Dependent Claim
29 words
A hierarchical key management system as claimed in claim 12, said key certification center means including means for communication between said key certification center means and said terminal means.
References Cited (Backward Citations)
US4386233A
Cited
US4438824A
Cited
US4500750A
Cited
US4458109A
Cited
US4578531A
Cited
US4694492A
Cited
US4771459A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1992-12-18 | 1993-06-19 | 1993-12-19 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1996-12-18 | 1997-06-19 | 1997-12-19 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2000-12-18 | 2001-06-19 | 2001-12-19 | $7700.00 | Window Closed / Lapsed |