US5384848A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Encrypted virtual terminal equipment having initialization device for preventing reply attack
Assignee: Fujitsu Ltd
•
Filing: 1993-08-31
•
Granted: 1995-01-24
•
Expires: 2013-08-31
Abstract
Abstract An apparatus which encrypts data transferred through a network during a session between a client terminal and a server. The client terminal issues a channel establishment command to start the session and includes a first encryption device and a first decryption device which are both initialized at the start of the session. A server is responsive to the channel establishment command so that the server communicates with the client terminal through the network during the session. The server includes a second encryption device and a second decryption device which are initialized at the start of the session. The server also includes a random data generator which generates random data in response to the issuance of the channel establishment command by the client terminal. The random data is used to initialize the first and second encryption devices and the first and second decryption devices and to set the encryption for the session.
Inventors
- 👤 Hiroaki Kikuchi
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 00:21
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/12; H04L9/002; H04L9/06; H04L9/065; H04L9/0656; H04L9/0662; H04L9/08; H04L9/0891
Claims Analysis
Total Claims: 10
Claim 1
Independent Claim
251 words
An apparatus which encrypts data transferred through a network during a session between a client terminal and a server, wherein a channel establishment command is issued to start the session, the apparatus comprising: a client terminal which issues the channel establishment command and comprises: a first encryption device, connected to the network, which is initialized at the start of the session and encrypts data to be transferred from the client terminal to the network during the session, and a first decryption device, connected to the network, which is initialized at the start of the session, receives encrypted data from the network during the session and decrypts the received encrypted data; and a server which is responsive to the channel establishment command issued by the client terminal so that the server communicates with the client terminal through the network during the session, the server comprising: a second encryption device, connected to the network, which is initialized at the start of the session and encrypts data to be transferred from the server to the network during the session, a second decryption device, connected to the network, which is initialized at the start of the session, receives encrypted data from the network during the session and decrypts the received encrypted data, and a random data generator which generates random data in response to the issuance of the channel establishment command by the client terminal, the random data being used to initialize the first and second encryption devices and the first and second decryption devices.
Claim 2
Independent Claim
251 words
An apparatus which encrypts data transferred through a network during a session between a client terminal and a server, wherein a channel establishment command is issued to start the session, the apparatus comprising: a client terminal which issues the channel establishment command and comprises: a first encryption device, connected to the network, which is initialized at the start of the session and encrypts data to be transferred from the client terminal to the network during the session, and a first decryption device, connected to the network, which is initialized at the start of the session, receives encrypted data from the network during the session and decrypts the received encrypted data; and a server which is responsive to the channel establishment command issued by the client terminal so that the server communicates with the client terminal through the network during the session, the server comprising: a second encryption device, connected to the network, which is initialized at the start of the session and encrypts data to be transferred from the server to the network during the session, a second decryption device, connected to the network, which is initialized at the start of the session, receives encrypted data from the network during the session and decrypts the received encrypted data, and a random data generator which generates random data in response to the issuance of the channel establishment command by the client terminal, the random data being used to initialize the first and second encryption devices and the first and second decryption devices.
Claim 3
Dependent Claim
67 words
An apparatus as in claim 1, wherein the random data is always generated by the server and is not generated by the client terminal, different random data being generated for each session and the first and second encryption devices and the first and second decryption devices are initialized for each session based on random data generated for the respective session, thereby preventing reply attacks by false users.
Claim 4
Independent Claim
252 words
An apparatus which encrypts data transferred through a network during a session between a client terminal and a server, wherein a channel establishment command is issued to start the session, the apparatus comprising: a client terminal which issues the channel establishment command and comprises: a first encryption device, connected to the network, which is initialized at the start of the session and encrypts data to be transferred from the client terminal to the network during the session, and a first decryption device, connected to the network, which is initialized at the start of the session, receives encrypted data from the network during the session and decrypts the received encrypted data; and a server which is responsive to the channel establishment command issued by the client terminal so that the server communicates with the client terminal through the network during the session, the server comprising: a second encryption device, connected to the network, which is initialized at the start of the session and encrypts data to be transferred from the server to the network during the session, a second decryption device, connected to the network, which is initialized at the start of the session, receives encrypted data from the network during the session and decrypts the received encrypted data, and a random data generator which generates random data in response to the issuance of the channel establishment command by the client terminal, the random data being used to initialize the first and second encryption devices and to set the encryption for the session.
Claim 5
Independent Claim
252 words
An apparatus which encrypts data transferred through a network during a session between a client terminal and a server, wherein a channel establishment command is issued to start the session, the apparatus comprising: a client terminal which issues the channel establishment command and comprises: a first encryption device, connected to the network, which is initialized at the start of the session and encrypts data to be transferred from the client terminal to the network during the session, and a first decryption device, connected to the network, which is initialized at the start of the session, receives encrypted data from the network during the session and decrypts the received encrypted data; and a server which is responsive to the channel establishment command issued by the client terminal so that the server communicates with the client terminal through the network during the session, the server comprising: a second encryption device, connected to the network, which is initialized at the start of the session and encrypts data to be transferred from the server to the network during the session, a second decryption device, connected to the network, which is initialized at the start of the session, receives encrypted data from the network during the session and decrypts the received encrypted data, and a random data generator which generates random data in response to the issuance of the channel establishment command by the client terminal, the random data being used to initialize the first and second encryption devices and to set the encryption for the session.
Claim 6
Dependent Claim
56 words
An apparatus as in claim 3, wherein different random data is generated for each session and the encryption by the first and second encryption devices and decryption by the first and second decryption devices for a respective session is based on the random data generated for the respective session, thereby creating different encryption for each session.
Claim 7
Dependent Claim
55 words
An apparatus as in claim 3, wherein the server transmits the random data to the network and the client terminal further comprises: a receiving unit which receives the random data from the network; and an initializing unit which initializes the first encryption device and the first decryption device in accordance with the received random data.
Claim 8
Dependent Claim
28 words
An apparatus as in claim 3, wherein the client terminal further comprises a telnet unit which allows a user to communicate with the network via the telnet unit.
Claim 9
Dependent Claim
52 words
An apparatus as in claim 3, wherein the server further comprises: a transmitting unit which transmits random data from the random number generator unit to the client terminal via the network; and an initialization unit which initializes the second encryption device and the second decryption device in accordance with the random data.
Claim 10
Dependent Claim
28 words
An apparatus as in claim 3, wherein the server further comprises a telnet unit which allows an external computer to communicate with the network via the telnet unit.
References Cited (Backward Citations)
US4211891A
Cited
US4203166A
Cited
US4264781A
Cited
US4369434A
Cited
US4484027A
Cited
EP0100106A2
Cited
US4658436A
Cited
US5020105A
Cited
US4797672A
Cited
US4817148A
Cited
EP0326699A2
Cited
US5134656A
Cited
US5297208A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1998-01-23 | 1998-07-25 | 1999-01-24 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2002-01-23 | 2002-07-25 | 2003-01-24 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2006-01-23 | 2006-07-25 | 2007-01-24 | $7700.00 | Window Closed / Lapsed |