US5007089A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Secure key management using programable control vector checking
Assignee: International Business Machines Corp
•
Filing: 1990-04-09
•
Granted: 1991-04-09
•
Expires: 2010-04-09
Abstract
Abstract The invention includes a control vector checking code respository located either within the same system as the crytographic facility or alternately remotely from the system containing the cryptographic facility. The control vector checking code repository will be linked to the cryptographic facility by one of several means. A first means for linking the repository to the cryptographic facility would include a physically secure data communications link. A second means for connecting the repository to the cryptographic facility would be by using an insecure channel with authentication, wherein either a modification detection code or alternately a message authentication code would be transmitted to the cryptographic facility and then the desired control vector checking code would be transmitted over the link. The cryptographic facility will include a code authorization mechanism to compare the transmitted MAC or MDC with a corresponding value computed from the received control vector checking code. If the two values of the MDC or the MAC compare, then the control vector checking code is authenticated and loaded into the control vector checking unit for carrying out the control vector checking operations desired. The control vector checking code repository can be located in a remote system connected by means of the communications link to the crypto facility, or alternately the repository can reside in the same system as the crypto facility. This provides for the dynamic updating of control vector checking code, where improvements or alterations are made to the control vector checking sequence. This also provides for a reduced memory size in the crypto facility, being sufficiently large to accommodate subsidiary control vector checking applications, with alternate control vector checking applications requiring the reloading of the control vector checking unit from the repository.
Inventors
- 👤 Stephen M. Matyas
- 👤 Donald B. Johnson
- 👤 An V. Le
- 👤 William C. Martin
- 👤 Rostislaw Prymak
- 👤 John D. Wilkins
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-01 14:46
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/088
Claims Analysis
Total Claims: 19
Claim 1
Independent Claim
77 words
In a data processing system which includes a control vector based cryptographic facility, a method for providing control vector checking code to be executed in the cryptographic facility, comprising the steps of: storing control vector checking code in a control vector checking code repository which is coupled to said cryptographic facility; transmitting a portion of said control vector checking code to said cryptographic facility, from said repository; executing said control vector checking code in said cryptographic facility.
Claim 2
Dependent Claim
77 words
In a data processing system which includes a control vector based cryptographic facility, a method for providing control vector checking code to be executed in the cryptographic facility, comprising the steps of: storing control vector checking code in a control vector checking code repository which is coupled to said cryptographic facility; transmitting a portion of said control vector checking code to said cryptographic facility, from said repository; executing said control vector checking code in said cryptographic facility.
Claim 3
Dependent Claim
85 words
The method of claim 1 which further comprises: inputting a first modification detection code to said cryptographic facility, characterizing said portion of said control vector checking code; computing a second modification detection code on said portion of said control vector checking code received from said repository; comparing said first modification detection code to said second modification detection code; authenticating said portion of said control vector checking code received at said cryptographic facility if said first modification detection code compares with said second modification detection code.
Claim 4
Dependent Claim
28 words
The method of claim 1 wherein said portion of said control vector checking code is transmitted over a physically secure link from said repository to said cryptographic facility.
Claim 5
Dependent Claim
85 words
The method of claim 1 which further comprises: inputting a first message authentication code to said cryptographic facility, characterizing said portion of said control vector checking code; computing a second message authentication code on said portion of said control vector checking code received from said repository; comparing said first message authentication code to said second message authentication code; authenticating said portion of said control vector checking code received at said cryptographic facility if said first message authentication code compares with said second message authentication code.
Claim 6
Dependent Claim
120 words
In a data processing system which includes a control vector based cryptographic facility, a method for augmenting control vector checking code to be executed in the cryptographic facility, comprising the steps of: storing resident control vector checking code in a resident storage in a cryptographic facility; storing dynamic control vector checking code in a control vector checking code repository which is coupled to said cryptographic facility; transmitting a portion of said dynamic control vector checking code from said repository to said cryptographic facility; storing said portion of said dynamic control vector checking code in a dynamic code buffer in said cryptographic facility; executing said resident control vector checking code and said dynamic control vector checking code in said cryptographic facility.
Claim 7
Dependent Claim
120 words
In a data processing system which includes a control vector based cryptographic facility, a method for augmenting control vector checking code to be executed in the cryptographic facility, comprising the steps of: storing resident control vector checking code in a resident storage in a cryptographic facility; storing dynamic control vector checking code in a control vector checking code repository which is coupled to said cryptographic facility; transmitting a portion of said dynamic control vector checking code from said repository to said cryptographic facility; storing said portion of said dynamic control vector checking code in a dynamic code buffer in said cryptographic facility; executing said resident control vector checking code and said dynamic control vector checking code in said cryptographic facility.
Claim 8
Dependent Claim
88 words
The method of claim 5, which further comprises: inputting a first modification detection code to said cryptographic facility, characterizing said portion of said dynamic control vector checking code; computing a second modification detection code on said portion of said dynamic control vector checking code received from said repository; comparing said first modification detection code to said second modification detection code; authenticating said portion of said dynamic control vector checking code received at said cryptographic facility if said first modification detection code compares with said second modification detection code.
Claim 9
Dependent Claim
27 words
The method of claim 6, which further comprises: said resident control vector checking code completing execution prior to the execution of said dynamic control vector checking code.
Claim 10
Dependent Claim
35 words
The method of claim 6, which further comprises: said resident control vector checking code calling portions of said dynamic control vector checking code for execution, during the execution of said resident control vector checking code.
Claim 11
Dependent Claim
37 words
The method of claim 6, which further comprises: said resident control vector checking code checking a first portion of a control vector and said dynamic control vector checking code checking a second portion of said control vector.
Claim 12
Dependent Claim
47 words
The method of claim 6, which further comprises: said resident control vector checking code checking a first portion of a control vector and said dynamic control vector checking code checking said first portion of said control vector and further checking a second portion of said control vector.
Claim 13
Dependent Claim
37 words
The method of claim 6, which further comprises: said cryptographic facility residing on a smart card and said control vector checking code repository residing in a smart card reader which is operatively coupled to said smart card.
Claim 14
Dependent Claim
164 words
In a data processing system which includes a control vector based cryptographic facility, an apparatus for providing control vector checking code to be executed in the cryptographic facility, comprising: a control vector checking code processor in said cryptographic facility, for executing control vector checking code to check control vectors; a resident control vector checking code buffer in said cryptographic facility for storing resident control vector checking code to be executed by said control vector checking code processor; a control vector checking code repository coupled to said cryptographic facility, for storing dynamic control vector checking code; a dynamic control vector checking code buffer in said cryptographic facility, for receiving a portion of said dynamic control vector checking code transmitted from said repository; said control vector checking code processor, executing said resident control vector checking code to perform a first checking operation on said control vector, and executing said dynamic control vector checking code to perform an augmented control vector checking operation on said control vector.
Claim 15
Dependent Claim
164 words
In a data processing system which includes a control vector based cryptographic facility, an apparatus for providing control vector checking code to be executed in the cryptographic facility, comprising: a control vector checking code processor in said cryptographic facility, for executing control vector checking code to check control vectors; a resident control vector checking code buffer in said cryptographic facility for storing resident control vector checking code to be executed by said control vector checking code processor; a control vector checking code repository coupled to said cryptographic facility, for storing dynamic control vector checking code; a dynamic control vector checking code buffer in said cryptographic facility, for receiving a portion of said dynamic control vector checking code transmitted from said repository; said control vector checking code processor, executing said resident control vector checking code to perform a first checking operation on said control vector, and executing said dynamic control vector checking code to perform an augmented control vector checking operation on said control vector.
Claim 16
Dependent Claim
107 words
The apparatus of claim 12, which further comprises: a code authenticator in said cryptographic facility, for receiving a first value of a modification detection code characterizing said portion of said dynamic control vector checking code and for computing a second value of a modification detection code from said portion of said dynamic control vector checking code; said code authenticator having an output coupled to said dynamic control vector checking code buffer, for enabling the transmission of said dynamic control vector checking code from said repository to said dynamic control vector checking code buffer when said first value of said modification detection code compares with said second value.
Claim 17
Dependent Claim
35 words
The apparatus of claim 13, which further comprises: said cryptographic facility residing on a smart card and said control vector checking code repository residing in a smart card reader operatively coupled to said smart card.
Claim 18
Dependent Claim
107 words
The apparatus of claim 12, which further comprises: a code authenticator in said cryptographic facility, for receiving a first value of a message authentication code characterizing said portion of said dynamic control vector checking code and for computing a second value of a message authentication code from said portion of said dynamic control vector checking code; said code authenticator having an output coupled to said dynamic control vector checking code buffer, for enabling the transmission of said dynamic control vector checking code from said repository to said dynamic control vector checking code buffer when said first value of said message authentication code compares with said second value.
Claim 19
Dependent Claim
35 words
The apparatus of claim 15, which further comprises: said cryptographic facility residing on a smart card and said control vector checking code repository residing in a smart card reader operatively coupled to said smart card.
References Cited (Backward Citations)
US4227253A
Cited
US4218738A
Cited
US4223403A
Cited
US4386233A
Cited
US4578530A
Cited
US4503287A
Cited
US4500750A
Cited
US4723284A
Cited
US4620276A
Cited
US4723283A
Cited
US4683968A
Cited
US4850017A
Cited
US4908861A
Cited
US4941176A
Cited
US4924514A
Cited
US4924515A
Cited
US4918728A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1994-04-08 | 1994-10-08 | 1995-04-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1998-04-08 | 1998-10-08 | 1999-04-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2002-04-08 | 2002-10-08 | 2003-04-09 | $7700.00 | Window Closed / Lapsed |