US5164988A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method to establish and enforce a network cryptographic security policy in a public key cryptosystem
Assignee: International Business Machines Corp
•
Filing: 1991-10-31
•
Granted: 1992-11-17
•
Expires: 2011-10-31
Abstract
Abstract Device A in a public key cryptographic network will be constrained to continue to faithfully practice a security policy dictated by a network certification center, long after device A's public key PUMa has been certified. If device A alters its operations from the limits encoded in its configuration vector, for example by loading a new configuration vector, device A will be denied participation in the network. To accomplish this enforcement of the network security policy dictated by the certification center, it is necessary for the certification center to verify at the time device A requests certification of its public key PUMa, that device A is configured with the currently authorized configuration vector. Device A is required to transmit to the certification center a copy of device A's current configuration vector, in an audit record. the certification center then compares device A's copy of the configuration vector with the authorized configuration vector for device A stored at the certification center. If the comparison is satisfactory, then the certification center will issue the requested certificate and will produce a digital signiture dSigPRC on a representation of device A's public key PUMa, using the certification center's private certification key PRC. Thereafter, if device A attempts to change its configuration vector, device A's privacy key PRMa corresponding to the certified public key PUMa, will automatically become unavailable for use in communicating in the network.
Inventors
- 👤 Stephen M. Matyas
- 👤 Donald B. Johnson
- 👤 An V. Le
- 👤 Rostislaw Prymak
- 👤 William C. Martin
- 👤 William S. Rohland
- 👤 John D. Wilkins
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 01:55
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/70; G06F21/78; G06F21/79; H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/083; H04L9/088; H04L9/32; H04L9/321; H04L9/3263; G06F2211/00; G06F2211/007; G06F2211/008; G06F2221/00; G06F2221/21; G06F2221/2101; G06F2221/2107; G06F2221/2115; H04L2209/00; H04L2209/12
Claims Analysis
Total Claims: 33
Claim 1
Independent Claim
256 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, a method for enforcing a network security policy, comprising steps of: encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing a public certification key and a private certification key of a certification key pair at said first data processor and transmitting said public certification key to said second data processor; storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; transmitting a request from said second data processor to said first data processor to certify said public utilization key; transmitting a representation of said first configuration vector in an audit record from said second data processor to said first data processor; verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to said second data processor, said certificate including a digital signature produced by said first data processor using said private certification key; and impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 2
Dependent Claim
256 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, a method for enforcing a network security policy, comprising steps of: encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing a public certification key and a private certification key of a certification key pair at said first data processor and transmitting said public certification key to said second data processor; storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; transmitting a request from said second data processor to said first data processor to certify said public utilization key; transmitting a representation of said first configuration vector in an audit record from said second data processor to said first data processor; verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to said second data processor, said certificate including a digital signature produced by said first data processor using said private certification key; and impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 3
Dependent Claim
111 words
The method of claim 1, wherein said data processing network further includes a third data processor coupled to said first and second data processors, said third data processor including a third cryptographic system, prior to said step of impairing use of said private utilization key, further comprising the steps of: transmitting said public certification key to said third data processor; transmitting said certificate with said public utilization key to said third data processor, said certificate including said digital signature produced by said first data processor using said private certification key; and validating said public utilization key at said third data processor using said public certification key to decrypt said digital signature.
Claim 4
Dependent Claim
139 words
The method of claim 1, wherein said step of storing a public utilization key and a private utilization key of a utilization key pair at said second data processor, further comprising the steps of: storing a master key in said second cryptographic system; storing a representation of a control vector in said second cryptographic system; forming an exclusive OR product of said master key and said representation of said control vector; encrypting said private utilization key using said product as an encryption key, forming an encrypted private utilization key; and said step of impairing use of said private utilization key further comprising the step of altering said master key in response to storing a new configuration vector in said second data processor; said encrypted private utilization key being incapable of decryption in response to said altering said master key.
Claim 5
Dependent Claim
39 words
The method of claim 1, wherein said step of impairing use of said private utilization key further comprises the step of: altering said private utilization key in response to storing a new configuration vector in said second data processor.
Claim 6
Dependent Claim
106 words
The method of claim 1, prior to said step of transmitting said audit record, further comprising the steps of: storing a public authentication key and a private authentication key of an authentication key pair at said second data processor; transmitting said public authentication key to said first data processor; forming an audit digital signature on a representation of said audit record in said second data processor using said private authentication key; transmitting said audit digital signature with said audit record to said first data processor; and validating said audit record at said first data processor using said public authentication key to decrypt said audit digital signature.
Claim 7
Dependent Claim
76 words
The method of claim 5, prior to said step of forming an audit digital signature on a representation of said audit record, which further comprises the steps of: forming a random number nonce in said first data processor and transmitting said nonce to said second data processor in response to said request to certify said public utilization key; and transmitting said nonce with said audit record from said second data processor to said first data processor.
Claim 8
Dependent Claim
115 words
The method of claim 1, wherein said step of encoding a network security policy in a first configuration vector at said first data processor, further comprises the steps of: storing said first configuration vector in said first data processor; said step of transmitting said audit record from said second data processor to said first data processor, further comprises the step of including a copy of said first configuration vector in said audit record; and said step of verifying said audit record in said first data processor, further comprises the step of comparing said first configuration vector stored in said first data processor with said copy of said first configuration vector included in said audit record.
Claim 9
Dependent Claim
84 words
The method of claim 1, wherein said data processing network further includes a third data processor coupled to said first and second data processors, said third data processor including a third cryptographic system, which further comprises the steps of: encoding a network security policy in a second configuration vector at said first data processor and transmitting said second configuration vector to said third data processor; and storing said first configuration vector and said second configuration vector in a table in said first data processor.
Claim 10
Dependent Claim
76 words
The method of claim 8, which further comprises the steps of: decoding said second configuration vector in said third data processor and configuring said third data processor in response thereto to implement said network security policy; said implemented network security policy configuring a first level of security for said second data processor and configuring a second level of security for said third data processor, said first level being a lower security level than said second level.
Claim 11
Dependent Claim
90 words
The method of claim 9, prior to said step of impairing use of said private utilization key, further comprising the steps of: transmitting said certificate with said public utilization key from said second data processor to said third data processor, said certificate including a security indication of said first level of security at said second data processor; and rejecting said public utilization key at said third data processor in response to comparing said security indication from said certificate with said second level of integrity configured at said third data processor.
Claim 12
Dependent Claim
68 words
The method of claim 1, which further comprises: said step of transmitting a request from said second data processor to said first data processor to certify said public utilization key, including transmitting said public utilization key; and said step of verifying said audit record and transmitting said certificate, including transmitting in said certificate said public utilization key accompanied by said digital signature formed using said private certification key.
Claim 13
Dependent Claim
89 words
The method of claim 1, which further comprises: said step of transmitting a request from said second data processor to said first data processor to certify said public utilization key, including transmitting said public utilization key, a source identity value and a control vector for said public utilization key; and said step of verifying said audit record and transmitting said certificate, including transmitting in said certificate said public utilization key said source identity value and said control vector, accompanied by said digital signature formed using said private certification key.
Claim 14
Dependent Claim
215 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, a method for enforcing a network security policy, comprising steps of: encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; transmitting a request from said second data processor to said first data processor to certify said public utilization key and a representation of said first configuration vector in an audit record; verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to said second data processor, said certificate including a digital signature produced by said first data processor using said private certification key; and impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 15
Dependent Claim
215 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, a method for enforcing a network security policy, comprising steps of: encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; transmitting a request from said second data processor to said first data processor to certify said public utilization key and a representation of said first configuration vector in an audit record; verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to said second data processor, said certificate including a digital signature produced by said first data processor using said private certification key; and impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 16
Dependent Claim
297 words
A computer program in a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, said computer program when executed, performing a method for enforcing a network security policy, comprising the sequence of computer program instructions: encoding instruction for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding instruction for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; first storing instruction for storing a public certification key and a private certification key of a certification key pair at said first data processor and transmitting said public certification key to said second data processor; second storing instruction for storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; first transmitting instruction for transmitting a request from said second data processor to said first data processor to certify said public utilization key; second transmitting instruction for transmitting a representation of said first configuration vector in an audit record from said second data processor to said first data processor; verifying instruction for verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to said second data processor, said certificate including a digital signature produced by said first data processor using said private certification key; and impairing instruction for impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 17
Dependent Claim
297 words
A computer program in a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, said computer program when executed, performing a method for enforcing a network security policy, comprising the sequence of computer program instructions: encoding instruction for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding instruction for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; first storing instruction for storing a public certification key and a private certification key of a certification key pair at said first data processor and transmitting said public certification key to said second data processor; second storing instruction for storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; first transmitting instruction for transmitting a request from said second data processor to said first data processor to certify said public utilization key; second transmitting instruction for transmitting a representation of said first configuration vector in an audit record from said second data processor to said first data processor; verifying instruction for verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to said second data processor, said certificate including a digital signature produced by said first data processor using said private certification key; and impairing instruction for impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 18
Dependent Claim
240 words
A computer program in a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, said computer program when executed, performing a method for enforcing a network security policy, comprising the sequence of computer program instructions: encoding instruction for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding instruction for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing instruction for storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; transmitting instruction for transmitting a request from said second data processor to said first data processor to certify said public utilization key and for transmitting a representation of said first configuration vector in an audit record from said second data processor to said first data processor; verifying instruction for verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to said second data processor; impairing instruction for impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 19
Dependent Claim
240 words
A computer program in a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, said computer program when executed, performing a method for enforcing a network security policy, comprising the sequence of computer program instructions: encoding instruction for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding instruction for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing instruction for storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; transmitting instruction for transmitting a request from said second data processor to said first data processor to certify said public utilization key and for transmitting a representation of said first configuration vector in an audit record from said second data processor to said first data processor; verifying instruction for verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to said second data processor; impairing instruction for impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 20
Dependent Claim
314 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, an apparatus for enforcing a network security policy, comprising: encoding means for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding means coupled to said encoding means, for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; first storing means for storing a public certification key and a private certification key of a certification key pair at said first data processor and transmitting said public certification key to said second data processor; second storing means for storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; first transmitting means coupled to said second storing means, for transmitting a request from said second data processor to said first data processor to certify said public utilization key; second transmitting means coupled to said decoding means, for transmitting a representation of said first configuration vector in an audit record from said second data processor to said first data processor; verifying means coupled to said second transmitting means, for verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to a certificate storage means in said second data processor, said certificate including a digital signature produced by said first data processor using said private certification key; and impairing means coupled to said decoding means, for impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 21
Dependent Claim
314 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, an apparatus for enforcing a network security policy, comprising: encoding means for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding means coupled to said encoding means, for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; first storing means for storing a public certification key and a private certification key of a certification key pair at said first data processor and transmitting said public certification key to said second data processor; second storing means for storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; first transmitting means coupled to said second storing means, for transmitting a request from said second data processor to said first data processor to certify said public utilization key; second transmitting means coupled to said decoding means, for transmitting a representation of said first configuration vector in an audit record from said second data processor to said first data processor; verifying means coupled to said second transmitting means, for verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to a certificate storage means in said second data processor, said certificate including a digital signature produced by said first data processor using said private certification key; and impairing means coupled to said decoding means, for impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 22
Dependent Claim
129 words
The apparatus of claim 16, wherein said data processing network further includes a third data processor coupled to said first and second data processors, said third data processor including a third cryptographic system, which further comprises: third transmitting means coupled to said first storing means, for transmitting said public certification key to said third data processor; fourth transmitting means coupled to said certificate storage means, for transmitting said certificate with said public utilization key to said third data processor, said certificate including said digital signature produced by said first data processor using said private certification key; and validating means coupled to said third and said fourth transmitting means, for validating said public utilization key at said third data processor using said public certification key to decrypt said digital signature.
Claim 23
Dependent Claim
245 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, an apparatus for enforcing a network security policy, comprising: encoding means for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding means coupled to said encoding means, for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing means for storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; transmitting means coupled to said storing means, for transmitting a request from said second data processor to said first data processor to certify said public utilization key and for transmitting a representation of said first configuration vector in an audit record from said second data processor to said first data processor; verifying means coupled to said transmitting means, for verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to said second data processor; impairing means coupled to said decoding means, for impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 24
Dependent Claim
245 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, an apparatus for enforcing a network security policy, comprising: encoding means for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding means coupled to said encoding means, for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing means for storing a public utilization key and a private utilization key of a utilization key pair at said second data processor; transmitting means coupled to said storing means, for transmitting a request from said second data processor to said first data processor to certify said public utilization key and for transmitting a representation of said first configuration vector in an audit record from said second data processor to said first data processor; verifying means coupled to said transmitting means, for verifying said audit record in said first data processor and transmitting a certificate for said public utilization key to said second data processor; impairing means coupled to said decoding means, for impairing use of said private utilization key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 25
Dependent Claim
89 words
The apparatus of claim 18, which further comprises: said transmitting means transmitting a request from said second data processor to said first data processor to certify said public utilization key, including transmitting said public utilization key, a source identity value and a control vector for said public utilization key; and said verifying means verifying said audit record and transmitting said certificate, including transmitting in said certificate said public utilization key said source identity value and said control vector, accompanied by said digital signature formed using said private certification key.
Claim 26
Dependent Claim
87 words
The apparatus of claim 18, which further comprises: means for storing said first configuration vector in said first data processor; said transmitting means transmitting said audit record from said second data processor to said first data processor, including a copy of said first configuration vector in said audit record; and said verifying means verifying said audit record in said first data processor, by comparing said first configuration vector stored in said first data processor with said copy of said first configuration vector included in said audit record.
Claim 27
Dependent Claim
131 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, a method for enforcing a network security policy, comprising steps of: encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing a cryptographic key at said second data processor; impairing use of said cryptographic key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 28
Dependent Claim
131 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, a method for enforcing a network security policy, comprising steps of: encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing a cryptographic key at said second data processor; impairing use of said cryptographic key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 29
Dependent Claim
129 words
The method of claim 1, prior to said impairing step, which further comprises the steps of: storing a public certification key and a private certification key of a certification key pair at said first data processor and transmitting said public certification key to said second data processor; transmitting a request from said second data processor to said first data processor to certify use of said cryptographic key; transmitting a representation of said first configuration vector in an audit record from said second data processor to said first data processor; verifying said audit record in said first data processor and transmitting a certificate use of said cryptographic key to said second data processor, said certificate including a digital signature produced by said first data processor using said private certification key.
Claim 30
Dependent Claim
155 words
A computer program in a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, said computer program when executed, performing a method for enforcing a network security policy, comprising the sequence of computer program instructions: encoding instruction for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding instruction for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing instruction for storing a cryptographic key said second data processor; impairing instruction for impairing use of said cryptographic key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 31
Dependent Claim
155 words
A computer program in a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, said computer program when executed, performing a method for enforcing a network security policy, comprising the sequence of computer program instructions: encoding instruction for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding instruction for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing instruction for storing a cryptographic key said second data processor; impairing instruction for impairing use of said cryptographic key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 32
Dependent Claim
151 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, an apparatus for enforcing a network security policy, comprising: encoding means for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding means coupled to said encoding means, for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing means for storing a cryptographic key at said second data processor; impairing means coupled to said decoding means, for impairing use of said cryptographic key in said second data processor in response to storing a new configuration vector in said second data processor.
Claim 33
Dependent Claim
151 words
In a data processing network which includes a first data processor coupled to a second data processor, said first data processor including a first cryptographic system and said second data processor including a second cryptographic system, an apparatus for enforcing a network security policy, comprising: encoding means for encoding a network security policy in a first configuration vector at said first data processor and transmitting said first configuration vector to said second data processor; decoding means coupled to said encoding means, for decoding said first configuration vector in said second data processor and configuring said second data processor in response thereto to implement said network security policy; storing means for storing a cryptographic key at said second data processor; impairing means coupled to said decoding means, for impairing use of said cryptographic key in said second data processor in response to storing a new configuration vector in said second data processor.
References Cited (Backward Citations)
US4200770A
Cited
US4218582A
Cited
US4405829A
Cited
US4326098A
Cited
US4393269A
Cited
US4885777A
Cited
US4850017A
Cited
US4908861A
Cited
US4853961A
Cited
US4893338A
Cited
US5005200A
Cited
US4941176A
Cited
US4924514A
Cited
US4924515A
Cited
US5003593A
Cited
US4918728A
Cited
US5001752A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1995-11-17 | 1996-05-18 | 1996-11-17 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1999-11-17 | 2000-05-18 | 2000-11-17 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2003-11-17 | 2004-05-18 | 2004-11-17 | $7700.00 | Window Closed / Lapsed |