Patent US5345508A successfully refreshed from Google Patents.
US5345508A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for variable-overhead cached encryption
Assignee: Apple Inc
•
Filing: 1993-08-23
•
Granted: 1994-09-06
•
Expires: 2013-08-23
Abstract
Abstract A digital encryption structure allows the varying of the computational overhead by selectively reusing, according to the desired level of security, a pseudorandom encoding sequence at the transmitter end and by storing and reusing pseudorandom decoding sequences, associated with one or more transmitters at the receiver end. A public initialization vector is combined with a secret key to produce a deterministic sequence from a pseudorandom number generator. This pseudorandom sequence in turn, is used to convert plaintext to ciphertext. The sequence may be selectively reused by storing the sequence to a transmitter memory cache and iteratively reading the sequence from memory according to a counter which controls the level of security of the encryption system. The ciphertext is decrypted on the receiver end by invertibly combining the ciphertext with the same pseudorandom sequence used by the transmitter to originally encode the plaintext. The pseudorandom sequence is independently generated by the receiver end using the original key and initialization vector used in the transmitter end. Once generated in the receiver, the pseudorandom sequence is stored in a receiver cache for reuse with each iterative use of the stored transmitter pseudorandom sequence.
Inventors
- 👤 Kerry E. Lynn
- 👤 Jonathan M. Zweig
- 👤 Richard W. Mincher
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 23:10
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/06; H04L9/065; H04L9/0656; H04L9/0662; H04L9/12; H04L2209/00; H04L2209/12
Claims Analysis
Total Claims: 30
Claim 1
Independent Claim
223 words
An apparatus for variable-overhead cached encryption and decryption comprising: (i) a transmitter for encrypting plaintext data, the transmitter further comprising: a first memory for storing at least one Pseudorandom Number (PN) sequence and for outputting a selected PN sequence; an encoder which receives the selected PN sequence from the first memory as a first input and receives the plaintext data as a second input, and responsive to these first and second inputs produces the encrypted data; (ii) a receiver for decrypting encrypted data, the receiver comprising: a second memory for storing at least one Pseudorandom Number (PN) sequence; a receiver PN generator which generates and provides as an output the same selected PN sequence which is received by the encoder; a control signal responsive to the contents of the second memory which indicates whether the selected PN sequence is stored in the second memory; switching means having a first sequence input coupled to the output of the second memory and a second sequence input coupled to the output of the receiver PN generator, for outputting one of the sequence inputs responsive to the indication of the control signal; and a decoder which receives the output of the switching means as a first input and receives the encrypted data as a second input, and combines these first and second inputs to produce decrypted data.
Claim 2
Independent Claim
223 words
An apparatus for variable-overhead cached encryption and decryption comprising: (i) a transmitter for encrypting plaintext data, the transmitter further comprising: a first memory for storing at least one Pseudorandom Number (PN) sequence and for outputting a selected PN sequence; an encoder which receives the selected PN sequence from the first memory as a first input and receives the plaintext data as a second input, and responsive to these first and second inputs produces the encrypted data; (ii) a receiver for decrypting encrypted data, the receiver comprising: a second memory for storing at least one Pseudorandom Number (PN) sequence; a receiver PN generator which generates and provides as an output the same selected PN sequence which is received by the encoder; a control signal responsive to the contents of the second memory which indicates whether the selected PN sequence is stored in the second memory; switching means having a first sequence input coupled to the output of the second memory and a second sequence input coupled to the output of the receiver PN generator, for outputting one of the sequence inputs responsive to the indication of the control signal; and a decoder which receives the output of the switching means as a first input and receives the encrypted data as a second input, and combines these first and second inputs to produce decrypted data.
Claim 3
Dependent Claim
26 words
The apparatus according to claim 1, wherein the transmitter further comprises a transmitter PN generator for producing PN sequences which are stored in the first memory.
Claim 4
Dependent Claim
33 words
The apparatus according to claim 2, wherein the transmitter PN generator and the receiver PN generator are both initialized using a key which is commonly utilized by both the transmitter and the receiver.
Claim 5
Dependent Claim
34 words
The apparatus according to claim 3, wherein the transmitter PN generator and the receiver PN generator are both further initialized using an initialization vector which is commonly utilized by both the transmitter and receiver.
Claim 6
Dependent Claim
22 words
The apparatus according to claim 4, wherein the transmitter PN generator is initialized by logically combining the key and the initialization vector.
Claim 7
Dependent Claim
20 words
The apparatus according to claim 5, wherein the key and the initialization vector are logically combined using an exclusive-OR function.
Claim 8
Dependent Claim
22 words
The apparatus according to claim 1, wherein the receiver PN generator is initialized by logically combining the key and the initialization vector.
Claim 9
Dependent Claim
32 words
The apparatus according to claim 5, wherein the receiver PN generator is initialized by logically combining the key and the initialization vector using the same function as is used in the transmitter.
Claim 10
Dependent Claim
17 words
The apparatus according to claim 1, further comprising an initialization vector generator for selectively generating initialization vectors.
Claim 11
Dependent Claim
28 words
The apparatus according to claim 9 further comprising a counter having an output coupled to the initialization vector generator for controlling the outputting of the selected PN sequence.
Claim 12
Dependent Claim
46 words
The apparatus according to claim 10, wherein the counter is initialized to a maximum count value and the counter enables the outputting of a number of identical selected PN sequences such that the number of sequences output is equal to the value of the maximum count.
Claim 13
Dependent Claim
24 words
The apparatus according to claim 1, wherein the encoder produces encrypted data by combining the encoder first and second inputs using an invertible function.
Claim 14
Dependent Claim
23 words
The apparatus according to claim 12, wherein the encoder produces encrypted data by combining the first and second inputs using an exclusive-OR function.
Claim 15
Dependent Claim
34 words
The apparatus according to claim 1, wherein the encrypted data is transferred from the transmitter to the receiver in a data stream, the data stream comprising the encrypted data concatenated with the initialization vector.
Claim 16
Dependent Claim
19 words
The apparatus according to claim 14, wherein the second memory further comprises an input for receiving the initialization vector.
Claim 17
Dependent Claim
19 words
The apparatus according to claim 15, wherein PN sequences stored in the second memory are indexed by initialization vectors.
Claim 18
Dependent Claim
35 words
The apparatus according to claim 16, wherein the input for receiving the initialization vector is compared with stored initialization indexes to determine whether the selected PN sequence has been previously stored in the second memory.
Claim 19
Dependent Claim
34 words
The apparatus according to claim 5 in which the receiver PN generator further comprises a first and second input, wherein the first input receives the key and the second input receives the initialization vector.
Claim 20
Dependent Claim
23 words
The apparatus according to claim 18 in which the functions used in the receiver PN generator and the transmitter PN generator are identical.
Claim 21
Dependent Claim
20 words
The apparatus according to claim 1, wherein the transmitter and receiver are implemented using at least one general purpose computer.
Claim 22
Dependent Claim
21 words
The apparatus according to claim 20, wherein the encrypted data is stored to a mass storage device prior to being decrypted.
Claim 23
Dependent Claim
154 words
An encryption system comprising: transmitter means for encrypting plaintext data into ciphertext, the transmitter means further comprising: selectively controlled first memory storage means for storing a first pseudorandom sequence, wherein the selective control of the first memory storage means enables reuse of the first pseudorandom sequence, and encoding means for combining the first pseudorandom sequence with the plaintext data to produce the ciphertext; and receiver means for receiving the ciphertext from the transmitter means and decrypting the ciphertext to the original plaintext, the receiving means further comprising second storage means for storing a second pseudorandom sequence, wherein the second pseudorandom sequence is used in combination with the ciphertext to produce the plaintext and wherein the second pseudorandom sequence may be retrieved from the second storage means and used for producing the plaintext each time the selective control of the first memory storage means enables reuse of the first pseudorandom sequence in the transmitter means.
Claim 24
Dependent Claim
154 words
An encryption system comprising: transmitter means for encrypting plaintext data into ciphertext, the transmitter means further comprising: selectively controlled first memory storage means for storing a first pseudorandom sequence, wherein the selective control of the first memory storage means enables reuse of the first pseudorandom sequence, and encoding means for combining the first pseudorandom sequence with the plaintext data to produce the ciphertext; and receiver means for receiving the ciphertext from the transmitter means and decrypting the ciphertext to the original plaintext, the receiving means further comprising second storage means for storing a second pseudorandom sequence, wherein the second pseudorandom sequence is used in combination with the ciphertext to produce the plaintext and wherein the second pseudorandom sequence may be retrieved from the second storage means and used for producing the plaintext each time the selective control of the first memory storage means enables reuse of the first pseudorandom sequence in the transmitter means.
Claim 25
Dependent Claim
37 words
The encryption system according to claim 22, wherein the transmitter means further comprises: a pseudorandom generator means coupled to the first memory means for generating a pseudorandom sequence from a secret key and a public initialization vector.
Claim 26
Dependent Claim
80 words
The encryption system according to claim 23, wherein the receiver means further comprises: a pseudorandom number generator means coupled to the second memory means for generating the second pseudorandom sequence utilizing the identical secret key and the public initialization vector used in the transmitter means, wherein the second pseudorandom sequence is stored in the second memory means, and wherein the second pseudorandom sequence generated in the receiver means is identical to the first pseudorandom sequence generated in the transmitter means.
Claim 27
Independent Claim
196 words
A method for variable-overhead cached encryption and decryption comprising the steps: (i) encrypting a sequence of plaintext data comprising the substeps: generating a first pseudorandom number from a public initialization vector and a secret key; encrypting the plaintext data to produce a ciphertext by logically combining the plaintext data with the stored first pseudorandom number; and exporting the ciphertext in concatenated combination with the initialization vector; (ii) decrypting the ciphertext in a receiver comprising storage for unique pairs of initialization vectors and second pseudorandom numbers, the decrypting step comprising the substeps: importing the concatenated combination from (i); separating the ciphertext from the initialization vector in the concatenated combination; searching the storage for a unique initialization vector and second pseudorandom number pair having an initialization vector which matches the imported initialization vector; decrypting the imported ciphertext using the second pseudorandom number corresponding to the matched initialization vector, if such an initialization vector match is found; and generating a second pseudorandom number from the imported initialization vector and the secret key used in (i) and using the generated second pseudorandom number to decrypt the imported ciphertext, if no initialization vector match is found in the searching substep above.
Claim 28
Independent Claim
196 words
A method for variable-overhead cached encryption and decryption comprising the steps: (i) encrypting a sequence of plaintext data comprising the substeps: generating a first pseudorandom number from a public initialization vector and a secret key; encrypting the plaintext data to produce a ciphertext by logically combining the plaintext data with the stored first pseudorandom number; and exporting the ciphertext in concatenated combination with the initialization vector; (ii) decrypting the ciphertext in a receiver comprising storage for unique pairs of initialization vectors and second pseudorandom numbers, the decrypting step comprising the substeps: importing the concatenated combination from (i); separating the ciphertext from the initialization vector in the concatenated combination; searching the storage for a unique initialization vector and second pseudorandom number pair having an initialization vector which matches the imported initialization vector; decrypting the imported ciphertext using the second pseudorandom number corresponding to the matched initialization vector, if such an initialization vector match is found; and generating a second pseudorandom number from the imported initialization vector and the secret key used in (i) and using the generated second pseudorandom number to decrypt the imported ciphertext, if no initialization vector match is found in the searching substep above.
Claim 29
Dependent Claim
49 words
The method for variable-overhead cached encryption and decryption according to claim 25, wherein the substep of generating a second pseudorandom number from the imported initialization vector further comprises the step of storing the generated second pseudorandom number and its corresponding initialization vector in storage for future use in decrypting.
Claim 30
Dependent Claim
43 words
The method for variable-overhead cached encryption and decryption according to claim 25, wherein the substeps of decrypting the imported ciphertext if an initialization vector match is found, further comprises the step of logically combining the imported ciphertext with the stored second pseudorandom sequence.
References Cited (Backward Citations)
US4817148A
Cited
US5067156A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-09-05 | 1998-03-07 | 1998-09-06 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-09-05 | 2002-03-07 | 2002-09-06 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-09-05 | 2006-03-07 | 2006-09-06 | $7700.00 | Window Closed / Lapsed |