US5436972A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for preventing inadvertent betrayal by a trustee of escrowed digital secrets
Assignee: Individual
•
Filing: 1993-10-04
•
Granted: 1995-07-25
•
Expires: 2013-10-04
Abstract
Abstract The invention employs a voluntary identification/definition phase performed, for example, shortly after a computer is purchased, and a secret information retrieval phase. In the definition phase, the true owner/customer defines an escrow record which provides self-identification data together with encrypted password data. The present invention prompts a user to voluntarily escrow password or other secret information for later retrieval by entering a series of information uniquely describing himself or herself. The identification indicia is combined with the secret information (such as the user's encryption password) and is then encrypted under the control of the trustee's public key. The combined information may be encrypted, for example, under a random symmetric key (such as DES) which is then encrypted under the trustee's public key. After unique identification data has been entered, the user is asked to select a password to protect the system. Thereafter, all the personal identifying data, together with the password, is encrypted with the trustee's public key and is stored, for example, in the user's computer as an escrow security record. The password is then used to encrypt all data on the user's disk. If at some point in time in the future, the user forgets the password, the retrieval phase of the applicant's invention is performed. Under such circumstances, the user contacts the trustees, e.g., the vendor or manufacturer. The trustee utilizes documentary evidence presented by the alleged legitimate user and determines whether such evidence matches with the previously encrypted escrow information stored in the escrow record created by the user. If they agree, then the trustee has confidence that the true owner is making the request, and that revealing the secret key will not betray the owner's interest.
Inventors
- 👤 Addison M. Fischer
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 17:19
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F12/00; G06F12/14; G06F12/1408; G06F21/60; G06F21/62; G06F21/6218; G06Q; G06Q20/00; G06Q20/38; G06Q20/382; G06Q20/3821; H; H04; H04L; H04L9/00; H04L9/08; H04L9/0894; G06F2221/00; G06F2221/21; G06F2221/2107; G06F2221/2131
Claims Analysis
Total Claims: 40
Claim 1
Independent Claim
77 words
A method of operating a computer to permit a computer user's secret digital information to be subsequently recovered by a trustee, comprising the steps of: establishing digital identifying information that identifies a specified computer user; combining the identifying information with the user's secret information; encrypting at least part of said combined digital information such that said combined digital information can be decrypted only by the trustee; and storing the encrypted digital information for processing by a trustee.
Claim 2
Independent Claim
77 words
A method of operating a computer to permit a computer user's secret digital information to be subsequently recovered by a trustee, comprising the steps of: establishing digital identifying information that identifies a specified computer user; combining the identifying information with the user's secret information; encrypting at least part of said combined digital information such that said combined digital information can be decrypted only by the trustee; and storing the encrypted digital information for processing by a trustee.
Claim 3
Dependent Claim
17 words
A method in accordance to claim 1, wherein at least part of the identifying information is hashed.
Claim 4
Dependent Claim
19 words
A method in accordance to claim 1, wherein at least part of the identifying information is stored in plaintext.
Claim 5
Dependent Claim
29 words
A method in accordance to claim 1, wherein said step of establishing includes the step of prompting the computer user to provide a plurality of user identifying characteristic data.
Claim 6
Dependent Claim
22 words
A method in accordance to claim 1, wherein said step of establishing includes the step of the user providing physical characteristic information.
Claim 7
Dependent Claim
23 words
A method in accordance to claim 1, wherein said step of establishing includes the step of the user providing the user's public key.
Claim 8
Dependent Claim
34 words
A method in accordance to claim 1, further including the step of soliciting from the computer user instructions to be followed by the trustee if an attempt is made to recover said secret information.
Claim 9
Dependent Claim
38 words
A method in accordance to claim 1, wherein said step of establishing includes the step of the user providing at least one question to be asked by the trustee to a person attempting to recover said secret information.
Claim 10
Dependent Claim
31 words
A method in accordance to claim 1, wherein said step of encrypting includes the step of generating an encrypting key and encrypting at least said secret information with said encrypting key.
Claim 11
Dependent Claim
27 words
A method in accordance to claim 9, wherein said step of encrypting includes the step of encrypting said encrypting key using the public key of the trustee.
Claim 12
Dependent Claim
29 words
A method in accordance to claim 1, wherein said step of storing includes the step of storing said encrypted digital information on a memory media of the computer user.
Claim 13
Dependent Claim
24 words
A method in accordance to claim 1, wherein said step of storing includes the step of storing, in plain text, information describing the trustee.
Claim 14
Independent Claim
70 words
A method of operating a computer for permitting a trustee to safely reveal escrowed digital secret information contained in an escrow record to an applicant comprising the steps of: obtaining credentials identifying the applicant; obtaining the escrowed record; decrypting the escrowed record; comparing the applicant's credentials with identifying information embodied in the escrowed information; revealing the secret information to the applicant if the credentials match with the escrowed identifying information.
Claim 15
Independent Claim
70 words
A method of operating a computer for permitting a trustee to safely reveal escrowed digital secret information contained in an escrow record to an applicant comprising the steps of: obtaining credentials identifying the applicant; obtaining the escrowed record; decrypting the escrowed record; comparing the applicant's credentials with identifying information embodied in the escrowed information; revealing the secret information to the applicant if the credentials match with the escrowed identifying information.
Claim 16
Dependent Claim
21 words
A method according to claim 13, wherein the identifying information is encrypted as part of the information available to the trustee.
Claim 17
Dependent Claim
24 words
A method according to claim 13, wherein the hash of the identifying information is encrypted as part of the information available of the trustee.
Claim 18
Dependent Claim
17 words
A method according to claim 13, wherein said escrow information is printed in digital form on paper.
Claim 19
Dependent Claim
79 words
A method according to claim 13, wherein the identifying digital information includes at least one of the following: name; address; telephone number; height; weight; birth date; complexion; race; eye color; birthplace; employer; title; place of business; employee identification; supervisor; identification number; digitized fingerprint; digitized photograph; digitized voice sample; digitized retina information; information relating to the user's DNA; digitized handwriting sample; digitized key typing; stroke analysis; DNA pattern; and facts unlikely to be generally known except to the computer user.
Claim 20
Dependent Claim
31 words
A method according to claim 13, wherein the step of decrypting includes the step of using the private key of the trustee to decrypt at least part of said escrow record.
Claim 21
Dependent Claim
43 words
A method according to claim 13, wherein the step of decrypting includes the step of using the private key of the trustee to decrypt the escrow to access a random encrypting key that is used to encrypt other fields in the escrow record.
Claim 22
Dependent Claim
23 words
A method according to claim 13, further including the step of computing the hash of a plurality of fields in the escrow record.
Claim 23
Dependent Claim
27 words
A method according to claim 13, further including the step of requesting further credentials from the applicant if the credentials do not sufficiently match the escrow data.
Claim 24
Dependent Claim
28 words
A method according to claim 21, wherein said step of requesting further credentials includes the step of posing questions to the applicant as specified in the escrow record.
Claim 25
Dependent Claim
23 words
A method according to claim 13, further including the step of acquiring different portions of the secret information from a plurality of trustees.
Claim 26
Dependent Claim
23 words
A method according to claim 13, wherein at least part of the identifying digital information is indicated by the hash of said information.
Claim 27
Dependent Claim
81 words
In a computer system having a processor and a memory device coupled to said processor, a digital data structure stored in said memory device for permitting a computer user's secret digital information to be subsequently recovered by a trustee, said digital data structure comprising: means for storing identifying information identifying the computer user; means for storing secret digital information in an encrypted form; and means for storing an encrypted version of the encrypting key used to encrypt said secret digital information.
Claim 28
Dependent Claim
81 words
In a computer system having a processor and a memory device coupled to said processor, a digital data structure stored in said memory device for permitting a computer user's secret digital information to be subsequently recovered by a trustee, said digital data structure comprising: means for storing identifying information identifying the computer user; means for storing secret digital information in an encrypted form; and means for storing an encrypted version of the encrypting key used to encrypt said secret digital information.
Claim 29
Dependent Claim
18 words
A digital data structure in accordance with claim 25, further including means for storing information identifying said trustee.
Claim 30
Dependent Claim
25 words
A digital data structure in accordance with claim 25, further including means for storing a hash of said identifying information and said secret digital information.
Claim 31
Dependent Claim
87 words
A digital data structure in accordance with claim 25, wherein said means for storing identifying information includes means for storing at least one of the following: name; address; telephone number; height; weight; birth date; complexion; race; eye color; birthplace; employer; title; place of business; employee identification; supervisor; identification number; digitized fingerprint; digitized photograph; digitized voice sample; digitized retina information; information relating to the user's DNA; digitized handwriting sample; digitized key typing; stroke analysis; DNA pattern; and facts unlikely to be generally known except to the computer user.
Claim 32
Dependent Claim
34 words
A digital data structure in accordance with claim 25, further including means for storing instructions to be followed by the trustee in the event an applicant seeks to gain access to said secret information.
Claim 33
Dependent Claim
33 words
A digital data structure in accordance with claim 25, further including means for storing at least one question to be posed by the trustee to a person attempting to recover said secret information.
Claim 34
Dependent Claim
80 words
In a computer system having a processor and a memory device coupled to said processor, a digital data structure stored in said memory device for permitting a computer user's secret digital information to be subsequently recovered by a trustee, said digital data structure comprising: means for storing identifying information identifying the computer user; means for storing secret digital information in an encrypted form; and further including means for storing a hash of said identifying information and said secret digital information.
Claim 35
Dependent Claim
80 words
In a computer system having a processor and a memory device coupled to said processor, a digital data structure stored in said memory device for permitting a computer user's secret digital information to be subsequently recovered by a trustee, said digital data structure comprising: means for storing identifying information identifying the computer user; means for storing secret digital information in an encrypted form; and further including means for storing a hash of said identifying information and said secret digital information.
Claim 36
Dependent Claim
18 words
A digital data structure in accordance with claim 31, further including means for storing information identifying said trustee.
Claim 37
Dependent Claim
28 words
A digital data structure in accordance with claim 31, further including means for storing an encrypted version of the encrypting key used to encrypt said secret digital information.
Claim 38
Dependent Claim
87 words
A digital data structure in accordance with claim 31, wherein said means for storing identifying information includes means for storing at least one of the following: name; address; telephone number; height; weight; birth date; complexion; race; eye color; birthplace; employer; title; place of business; employee identification; supervisor; identification number; digitized fingerprint; digitized photograph; digitized voice sample; digitized retina information; information relating to the user's DNA; digitized handwriting sample; digitized key typing; stroke analysis; DNA pattern; and facts unlikely to be generally known except to the computer user.
Claim 39
Dependent Claim
34 words
A digital data structure in accordance with claim 31, further including means for storing instructions to be followed by the trustee in the event an applicant seeks to gain access to said secret information.
Claim 40
Dependent Claim
33 words
A digital data structure in accordance with claim 31, further including means for storing art least one question to be posed by the trustee to a person attempting to recover said secret information.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1998-07-24 | 1999-01-23 | 1999-07-25 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2002-07-24 | 2003-01-23 | 2003-07-25 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2006-07-24 | 2007-01-23 | 2007-07-25 | $7700.00 | Window Closed / Lapsed |