US5177791A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Secure translation of usage-control values for cryptographic keys
Assignee: International Business Machines Corp
•
Filing: 1991-08-30
•
Granted: 1993-01-05
•
Expires: 2011-08-30
Abstract
Abstract A working key of a certain key type is to be transmitted from a first system (having a first usage-control value associated with keys of the certain type) and a second system (having a second usage-control value associated with keys of the certain type). A translation control value, associated with the certain key type, is generated, functionally relating the first and second usage-control values. The translation control value is used in a cryptographic function to send or receive the working key between systems, the cryptographic function being designed to produce valid results when the correct translation control value, and usage-control values, are employed, and unpredictable results otherwise. Effectively, the first usage-control value is translated to the second usage-control value.
Inventors
- 👤 Phil C. Yeh
- 👤 Dennis G. Abraham
- 👤 Donald B. Johnson
- 👤 An Van Le
- 👤 Stephen M. Matyas
- 👤 Rotislaw Prymak
- 👤 Ronald M. Smith, Sr.
- 👤 John D. Wilkins
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-06 13:23
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/088; H04L2209/00; H04L2209/08
Claims Analysis
Total Claims: 30
Claim 1
Independent Claim
183 words
A method for secure translation of a working key from being enrypted using a first usage-control value and a first key-encrypting-key to being encrypted using a second usage-control value and a second key-encrypting-key, said method being performed in a data processing system including a cryptographic facility, and comprising the steps of: (a) securely installing a generated translation control value (TCV) associated with said translation, said generated TCV being functionally related to said first usage-control value and to said second usage-control value; (b) performing a reencipher cryptographic operation, with input comprising as a first input the working key enciphered under a first derived key based on a first key-encrypting-key, and as a second input an input TCV, and producing a translated result, said translated result being said to be correct only if said input TCV equals said generated TCV, and being another value if said input TCV does not equal said generated TCV, said translated result, when correct, being the working key enciphered under a second derived key based on said second key-encrypting-key, whereby said input TCV controls whether said translated result is correct.
Claim 2
Independent Claim
183 words
A method for secure translation of a working key from being enrypted using a first usage-control value and a first key-encrypting-key to being encrypted using a second usage-control value and a second key-encrypting-key, said method being performed in a data processing system including a cryptographic facility, and comprising the steps of: (a) securely installing a generated translation control value (TCV) associated with said translation, said generated TCV being functionally related to said first usage-control value and to said second usage-control value; (b) performing a reencipher cryptographic operation, with input comprising as a first input the working key enciphered under a first derived key based on a first key-encrypting-key, and as a second input an input TCV, and producing a translated result, said translated result being said to be correct only if said input TCV equals said generated TCV, and being another value if said input TCV does not equal said generated TCV, said translated result, when correct, being the working key enciphered under a second derived key based on said second key-encrypting-key, whereby said input TCV controls whether said translated result is correct.
Claim 3
Dependent Claim
52 words
The method of claim 1 in which the first derived key based on said first key-encrypting-key is obtained by Exclusive ORing said first key-encrypting-key with said first usage-control value, and the second derived key based on said second key-encrypting-key is obtained by Exclusive ORing said second key-encrypting-key with said second usage-control value.
Claim 4
Dependent Claim
21 words
The method of claim 1 in which the translation control value comprises a first dummy key and a second dummy key.
Claim 5
Dependent Claim
30 words
The method of claim 3 in which said first dummy key and said second dummy key are related by means of said first usage-control value and said second usage-control value.
Claim 6
Dependent Claim
14 words
The method of claim 4 in which said relationship is the Exclusive OR function.
Claim 7
Dependent Claim
56 words
The method of claim 5 in which said input further comprises as a third input said first key-encrypting-key enciphered under an importer derivative of a master key, the master key is used as said second key-encrypting-key, and said reencipher cryptographic operation comprises a reencipher from importer key step, followed by a reencipher to master key step.
Claim 8
Dependent Claim
56 words
The method of claim 5 in which said input further comprises as a third input said second key-encrypting-key enciphered under an exporter derivative of a master key, the master key is used as said first key-encrypting-key, and said reencipher cryptographic operation comprises a reencipher from master key step, followed by a reencipher to exporter key step.
Claim 9
Dependent Claim
64 words
The method of claim 5 in which said input further comprises as a third input said first key-encrypting-key enciphered under an importer derivative of a master key, and, as a fourth input, said second key-encrypting-key enciphered under an exporter derivative of the master key, and said reencipher cryptographic operation comprises a reencipher from importer key step, followed by a reencipher to exporter key step.
Claim 10
Dependent Claim
56 words
The method of claim 5 in which said input further comprises as a third input said first key-encrypting-key enciphered under an importer derivative of a master key, and, as a fourth input, said second key-encrypting-key enciphered under an importer derivative of the master key, and said reencipher cryptographic operation comprises two reencipher from importer key steps.
Claim 11
Dependent Claim
56 words
The method of claim 5 in which said input further comprises as a third input said first key-encrypting-key enciphered under an exporter derivative of a master key, and, as a fourth input, said second key-encrypted-key enciphered under an exporter derivative of the master key and said reencipher cryptographic operation comprises two reencipher to exporter key steps.
Claim 12
Independent Claim
156 words
An apparatus for secure translation of a working key from being encrypted using a first usage-control value and a first key-encrypting-key to being encrypted using a second usage-control value and a second key-encrypting-key, said apparatus comprising: (a) means for performing a reencipher cryptographic key operation, with input comprising as a first input a third key-encrypting-key encrypted under a key derived from a master key, as a second input a fourth key-encrypting-key encrypted under a key derived from the master key, as a third input a third usage-control value, and as a fourth input a working key enciphered under a key derived from said third usage-control value and said third key-encrypting-key, producing an output consisting of said working key encrypted under a key derived from said third usage-control value and said fourth key-encrypting-key; (b) installation means for converting a clear key to an encrypted form to be used as either said third key-encrypting-key or said fourth key-encrypting-key.
Claim 13
Independent Claim
156 words
An apparatus for secure translation of a working key from being encrypted using a first usage-control value and a first key-encrypting-key to being encrypted using a second usage-control value and a second key-encrypting-key, said apparatus comprising: (a) means for performing a reencipher cryptographic key operation, with input comprising as a first input a third key-encrypting-key encrypted under a key derived from a master key, as a second input a fourth key-encrypting-key encrypted under a key derived from the master key, as a third input a third usage-control value, and as a fourth input a working key enciphered under a key derived from said third usage-control value and said third key-encrypting-key, producing an output consisting of said working key encrypted under a key derived from said third usage-control value and said fourth key-encrypting-key; (b) installation means for converting a clear key to an encrypted form to be used as either said third key-encrypting-key or said fourth key-encrypting-key.
Claim 14
Dependent Claim
48 words
The apparatus of claim 11 in which the key derived from said third key-encrypting-key is obtained by Exclusive ORing said third key-encrypting-key with said third usage-control value, and the key derived from said fourth key-encrypting-key is obtained by Exclusive ORing said fourth key-encrypting-key with said third usage-control value.
Claim 15
Dependent Claim
20 words
The apparatus of claim 11 in which said third key-encrypting-key is encrypted under an importer derivative of the master key.
Claim 16
Dependent Claim
20 words
The apparatus of claim 11 in which said third key-encrypting-key is encrypted under an exporter derivative of the master key.
Claim 17
Dependent Claim
20 words
The apparatus of claim 11 in which said fourth key-encrypting-key is encrypted under an importer derivative of the master key.
Claim 18
Dependent Claim
20 words
The apparatus of claim 11 in which said fourth key-encrypting-key is encrypted under an exporter derivative of the master key.
Claim 19
Dependent Claim
13 words
The apparatus of claim 13 further comprising a reencipher to master key function.
Claim 20
Dependent Claim
13 words
The apparatus of claim 16 further comprising a reencipher from master key function.
Claim 21
Dependent Claim
17 words
The apparatus of claim 11 in which said installation means comprises an encipher under importer key function.
Claim 22
Dependent Claim
15 words
The apparatus of claim 11 in which said installation means comprises manual key entry functions.
Claim 23
Independent Claim
149 words
An apparatus for secure translation of a working key from a first encrypted form to a second encrypted form, said first encrypted form being said working key encrypted using a first usage-control value and a first key-encrypting-key, said second encrypted form being said working key encrypted using a second usage-control value and a second key-encrypting-key, said apparatus comprising: (a) installation means for combining and encrypting said first usage-control value and said second usage-control value to produce a generated translation control value (TCV); (b) means for performing a reencipher cryptographic key operation, with input comprising an input TCV and said first encrypted form of said working key, said means for performing further comprising: 1. means for deriving a third usage-control value and a fourth usage-control value from said TCV; 2. means for deciphering said first encrypted form of said working key using said third usage-control value and said first key-encrypting-key;
Claim 24
Independent Claim
149 words
An apparatus for secure translation of a working key from a first encrypted form to a second encrypted form, said first encrypted form being said working key encrypted using a first usage-control value and a first key-encrypting-key, said second encrypted form being said working key encrypted using a second usage-control value and a second key-encrypting-key, said apparatus comprising: (a) installation means for combining and encrypting said first usage-control value and said second usage-control value to produce a generated translation control value (TCV); (b) means for performing a reencipher cryptographic key operation, with input comprising an input TCV and said first encrypted form of said working key, said means for performing further comprising: 1. means for deriving a third usage-control value and a fourth usage-control value from said TCV; 2. means for deciphering said first encrypted form of said working key using said third usage-control value and said first key-encrypting-key;
Claim 25
Dependent Claim
74 words
means said working key using said fourth usage-control value and said second key-encrypting-key and producing a translated result, said translated result being said to be correct only if said input TCV equals said generated TCV, and being another value if said input TCV does not equal said generated TCV, said translated result, when correct, being said second encrypted form of said working key, whereby said input TCV controls whether said translated result is correct.
Claim 26
Dependent Claim
74 words
means said working key using said fourth usage-control value and said second key-encrypting-key and producing a translated result, said translated result being said to be correct only if said input TCV equals said generated TCV, and being another value if said input TCV does not equal said generated TCV, said translated result, when correct, being said second encrypted form of said working key, whereby said input TCV controls whether said translated result is correct.
Claim 27
Independent Claim
200 words
A method for secure translation of a working key from being encrypted using a first usage-control value and a first key-encrypting-key to being encrypted using a second usage-control value (UCV) and a second key-encrypting-key, said method being performed in a data processing system including a cryptographic facility, and comprising the steps of: (a) securely installing a generated translation control value (TCV) associated with said translation, said generated TCV being functionally related to said first usage-control value and to said second usage-control value; (b) performing a reencipher cryptographic operation, with input comprising as a first input the working key enciphered under a first derived key based on a first key-encrypting-key, and as a second input an input TCV, and producing a translated result, said translated result being said to be correct only if said input TCV equals said generated TCV, and being another value if said input TCV does not equal said generated TCV, said translated result, when correct, being the working key enciphered under a second derived key based on said second key-encrypting-key, said producing of said translated result not being conditioned on a TCV or a UCV check, whereby said input TCV controls whether said translated result is correct.
Claim 28
Independent Claim
200 words
A method for secure translation of a working key from being encrypted using a first usage-control value and a first key-encrypting-key to being encrypted using a second usage-control value (UCV) and a second key-encrypting-key, said method being performed in a data processing system including a cryptographic facility, and comprising the steps of: (a) securely installing a generated translation control value (TCV) associated with said translation, said generated TCV being functionally related to said first usage-control value and to said second usage-control value; (b) performing a reencipher cryptographic operation, with input comprising as a first input the working key enciphered under a first derived key based on a first key-encrypting-key, and as a second input an input TCV, and producing a translated result, said translated result being said to be correct only if said input TCV equals said generated TCV, and being another value if said input TCV does not equal said generated TCV, said translated result, when correct, being the working key enciphered under a second derived key based on said second key-encrypting-key, said producing of said translated result not being conditioned on a TCV or a UCV check, whereby said input TCV controls whether said translated result is correct.
Claim 29
Independent Claim
236 words
An apparatus for secure translation of a working key from a fist encrypted form to a second encrypted form, said first encrypted form being said working key encrypted using a first usage-control value (UCV) and a first key-encrypting-key, said second encrypted form being said working key encrypted using a second usage-control value and a second key-encrypting-key, said apparatus comprising: (a) installation means for combining and encrypting said first usage-control value and said second usage-control value to produce a generated translation control value (TCV); (b) means for performing a reencipher cryptographic key operation without conditioning said operation on UCV or TCV checking, with input comprising an input TCV and said first encrypted form of said working key, said means for performing further comprising: 1. means for deriving a third usage-control value and a fourth usage-control value from said TCV; 2. means for deciphering said first encrypted form of said working key using said third usage-control value and said first key-encrypting-key; 3. means for enciphering said working key using said fourth usage-control value and said second key-encrypting-key and producing a translated result, said translated result being said to be correct only if said input TCV equals said generated TCV, and being another value if said input TCV does nto equal said generated TCV, said translated result, when correct, being said second encrypted form of said working key, whereby said input TCV controls whether said translated result is correct.
Claim 30
Independent Claim
236 words
An apparatus for secure translation of a working key from a fist encrypted form to a second encrypted form, said first encrypted form being said working key encrypted using a first usage-control value (UCV) and a first key-encrypting-key, said second encrypted form being said working key encrypted using a second usage-control value and a second key-encrypting-key, said apparatus comprising: (a) installation means for combining and encrypting said first usage-control value and said second usage-control value to produce a generated translation control value (TCV); (b) means for performing a reencipher cryptographic key operation without conditioning said operation on UCV or TCV checking, with input comprising an input TCV and said first encrypted form of said working key, said means for performing further comprising: 1. means for deriving a third usage-control value and a fourth usage-control value from said TCV; 2. means for deciphering said first encrypted form of said working key using said third usage-control value and said first key-encrypting-key; 3. means for enciphering said working key using said fourth usage-control value and said second key-encrypting-key and producing a translated result, said translated result being said to be correct only if said input TCV equals said generated TCV, and being another value if said input TCV does nto equal said generated TCV, said translated result, when correct, being said second encrypted form of said working key, whereby said input TCV controls whether said translated result is correct.
References Cited (Backward Citations)
US5103478A
Cited
US5081677A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1996-01-05 | 1996-07-06 | 1997-01-05 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2000-01-05 | 2000-07-06 | 2001-01-05 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2004-01-05 | 2004-07-06 | 2005-01-05 | $7700.00 | Window Closed / Lapsed |