← Back to Patent Explorer
US5410602A Expired / Lapsed US ⏱️ 0.0 years remaining

Method for key management of point-to-point communications

Assignee: Motorola Solutions Inc
•
Filing: 1993-09-27
•
Granted: 1995-04-25
•
Expires: 2013-09-27
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A method of secure key distribution in a communication system having a plurality of subscriber units and an infrastructure communication center is provided. A first subscriber unit sends a request to the infrastructure communication center for a secure communication link with a second subscriber unit. This request includes an encrypted session encryption key which was encrypted with a first subscriber registration key. The infrastructure communication center decrypts the encrypted session encryption key with the first subscriber registration key. Subsequently, the infrastructure communication center re-encrypts the session encryption key with a second subscriber registration key. This re-encrypted session encryption key is sent to the second subscriber unit. In an alternative method, the first subscriber unit and the infrastructure communication center a priori know a session key. Therefore, the infrastructure communication center only needs to encrypt and send the session encryption key to the second subscriber unit, in response to a request by the first subscriber unit.

Inventors

  • 👤 Louis D. Finkelstein
  • 👤 Daniel P. Brown
  • 👤 Larry C. Puhl

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-04 18:54
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0822; H04L9/083; H04L2209/00; H04L2209/80

Claims Analysis

Total Claims: 26
Claim 1
Independent Claim 111 words
A method of secure key distribution in a communication system having a plurality of subscriber units and an infrastructure communication center, comprising: (a) requesting, by a first subscriber unit to the infrastructure communication center, a secure communication link with a second subscriber unit, the request including an encrypted session encryption key, the session encryption key being encrypted with a first subscriber registration key; (b) decrypting, by the infrastructure communication center, the encrypted session encryption key with the first subscriber registration key; (c) re-encrypting, by the infrastructure communication center, the session encryption key with a second subscriber registration key; and (d) sending the encrypted session encryption key to the second subscriber unit.
Claim 2
Independent Claim 111 words
A method of secure key distribution in a communication system having a plurality of subscriber units and an infrastructure communication center, comprising: (a) requesting, by a first subscriber unit to the infrastructure communication center, a secure communication link with a second subscriber unit, the request including an encrypted session encryption key, the session encryption key being encrypted with a first subscriber registration key; (b) decrypting, by the infrastructure communication center, the encrypted session encryption key with the first subscriber registration key; (c) re-encrypting, by the infrastructure communication center, the session encryption key with a second subscriber registration key; and (d) sending the encrypted session encryption key to the second subscriber unit.
Claim 3
Dependent Claim 35 words
The method of claim 1 further comprising the step of communicating a message encrypted by the session encryption key from the first subscriber unit to the second subscriber unit transparently through the infrastructure communication center.
Claim 4
Dependent Claim 27 words
The method of claim 1 further comprising the step of decrypting, by the second subscriber unit, the encrypted session encryption key with the second subscriber registration key.
Claim 5
Dependent Claim 23 words
The method of claim 1 wherein the sending step comprises sending the encrypted session encryption key to a plurality of second subscriber units.
Claim 6
Dependent Claim 25 words
The method of claim 1 further comprising the step of deleting, by the infrastructure communication center, the decrypted session encryption key from a memory device.
Claim 7
Dependent Claim 34 words
The method of claim 1 further comprising the step of enabling an encrypted conference communication link, by the infrastructure communication center, through decrypting subsequent communications from subscriber units with the decrypted session encryption key.
Claim 8
Dependent Claim 30 words
The method of claim 1 further comprising the step of enabling an encrypted conference communication link, by participating subscriber units, through providing communication activity information to the infrastructure communication center.
Claim 9
Independent Claim 171 words
A method of secure key distribution in a communication system having a plurality of subscriber units and an infrastructure communication center, comprising: (a) requesting, by a first subscriber unit to the infrastructure communication center, a secure communication link with a second subscriber unit, the request including an encrypted session encryption key, the session encryption key being encrypted with a first subscriber registration key; (b) decrypting, by the infrastructure communication center, the encrypted session encryption key with the first subscriber registration key; (c) re-encrypting, by the infrastructure communication center, the session encryption key with a second subscriber registration key; (d) deleting, by the infrastructure communication center, the decrypted session encryption key from a memory device; (e) sending the encrypted session encryption key to the second subscriber unit; (f) decrypting, by the second subscriber unit, the encrypted session encryption key with the second subscriber registration key; and (g) communicating a message encrypted by the session encryption key from the first subscriber unit to the second subscriber unit transparently through the infrastructure communication center.
Claim 10
Independent Claim 171 words
A method of secure key distribution in a communication system having a plurality of subscriber units and an infrastructure communication center, comprising: (a) requesting, by a first subscriber unit to the infrastructure communication center, a secure communication link with a second subscriber unit, the request including an encrypted session encryption key, the session encryption key being encrypted with a first subscriber registration key; (b) decrypting, by the infrastructure communication center, the encrypted session encryption key with the first subscriber registration key; (c) re-encrypting, by the infrastructure communication center, the session encryption key with a second subscriber registration key; (d) deleting, by the infrastructure communication center, the decrypted session encryption key from a memory device; (e) sending the encrypted session encryption key to the second subscriber unit; (f) decrypting, by the second subscriber unit, the encrypted session encryption key with the second subscriber registration key; and (g) communicating a message encrypted by the session encryption key from the first subscriber unit to the second subscriber unit transparently through the infrastructure communication center.
Claim 11
Dependent Claim 23 words
The method of claim 8 wherein the sending step comprises sending the encrypted session encryption key to a plurality of second subscriber units.
Claim 12
Dependent Claim 34 words
The method of claim 8 further comprising the step of enabling an encrypted conference communication link, by the infrastructure communication center, through decrypting subsequent communications from subscriber units with the decrypted session encryption key.
Claim 13
Dependent Claim 30 words
The method of claim 8 further comprising the step of enabling an encrypted conference communication link, by participating subscriber units, through providing communication activity information to the infrastructure communication center.
Claim 14
Independent Claim 88 words
A method of secure key distribution in a communication system having a plurality of subscriber units and an infrastructure communication center, comprising: (a) requesting, by a first subscriber unit to the infrastructure communication center, a secure communication link with a second subscriber unit, the first subscriber unit and the infrastructure communication center a priori knowing a session key; (b) encrypting, by the infrastructure communication center, the session encryption key with a second subscriber registration key; and (c) sending tire encrypted session encryption key to the second subscriber unit.
Claim 15
Independent Claim 88 words
A method of secure key distribution in a communication system having a plurality of subscriber units and an infrastructure communication center, comprising: (a) requesting, by a first subscriber unit to the infrastructure communication center, a secure communication link with a second subscriber unit, the first subscriber unit and the infrastructure communication center a priori knowing a session key; (b) encrypting, by the infrastructure communication center, the session encryption key with a second subscriber registration key; and (c) sending tire encrypted session encryption key to the second subscriber unit.
Claim 16
Dependent Claim 35 words
The method of claim 12 further comprising the step of communicating a message encrypted by the session encryption key from the first subscriber unit to the second subscriber unit transparently through the infrastructure communication center.
Claim 17
Dependent Claim 27 words
The method of claim 12 further comprising the step of decrypting, by the second subscriber unit, the encrypted session encryption key with the second subscriber registration key.
Claim 18
Dependent Claim 23 words
The method of claim 12 wherein the sending step comprises sending the encrypted session encryption key to a plurality of second subscriber units.
Claim 19
Dependent Claim 25 words
The method of claim 12 further comprising the step of deleting, by the infrastructure communication center, the decrypted session encryption key from a memory device.
Claim 20
Dependent Claim 34 words
The method of claim 12 further comprising the step of enabling an encrypted conference communication link, by the infrastructure communication center, through decrypting subsequent communications from subscriber units with the decrypted session encryption key.
Claim 21
Dependent Claim 30 words
The method of claim 12 further comprising the step of enabling an encrypted conference communication link, by participating subscriber units, through providing communication activity information to the infrastructure communication center.
Claim 22
Independent Claim 148 words
A method of secure key distribution in a communication system having a plurality of subscriber units and an infrastructure communication center, comprising: (a) requesting, by a first subscriber unit to the infrastructure communication center, a secure communication link with a second subscriber unit, the first subscriber unit and the infrastructure communication center a priori knowing a session key; (b) encrypting, by the infrastructure communication center, the session encryption key with a second subscriber registration key; (c) deleting, by the infrastructure communication center, the decrypted session encryption key from a memory device; (d) sending the encrypted session encryption key to the second subscriber unit; (e) decrypting, by the second subscriber unit, the encrypted session encryption key with the second subscriber registration key; and (f) communicating a message encrypted by the session encryption key from the first subscriber unit to the second subscriber unit transparently through the infrastructure communication center.
Claim 23
Independent Claim 148 words
A method of secure key distribution in a communication system having a plurality of subscriber units and an infrastructure communication center, comprising: (a) requesting, by a first subscriber unit to the infrastructure communication center, a secure communication link with a second subscriber unit, the first subscriber unit and the infrastructure communication center a priori knowing a session key; (b) encrypting, by the infrastructure communication center, the session encryption key with a second subscriber registration key; (c) deleting, by the infrastructure communication center, the decrypted session encryption key from a memory device; (d) sending the encrypted session encryption key to the second subscriber unit; (e) decrypting, by the second subscriber unit, the encrypted session encryption key with the second subscriber registration key; and (f) communicating a message encrypted by the session encryption key from the first subscriber unit to the second subscriber unit transparently through the infrastructure communication center.
Claim 24
Dependent Claim 23 words
The method of claim 19 wherein the sending step comprises sending the encrypted session encryption key to a plurality of second subscriber units.
Claim 25
Dependent Claim 34 words
The method of claim 19 further comprising the step of enabling an encrypted conference communication link, by the infrastructure communication center, through decrypting subsequent communications from subscriber units with the decrypted session encryption key.
Claim 26
Dependent Claim 30 words
The method of claim 19 further comprising the step of enabling an encrypted conference communication link, by participating subscriber units, through providing communication activity information to the infrastructure communication center.

References Cited (Backward Citations)

US5239294A Cited
US5124117A Cited
US5301247A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 1998-04-24 1998-10-24 1999-04-25 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2002-04-24 2002-10-24 2003-04-25 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2006-04-24 2006-10-24 2007-04-25 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag