Method for generating and verifying electronic signatures and privacy communication using elliptic curves

Claim 1

A method of generating and verifying electronic signatures via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of users from a system provider; generating a first public key with a secretly selected integer as a first secret key and a base point on the elliptic curve at a site of a first user, and generating a second public key with a secretly selected integer as a second secret key and the base point at a site of a second user, wherein the first and second public keys are different; notifying the second user of the first public key from the first user and notifying the first user of the second public key from the second user; selecting an enciphering and deciphering method by the first user and the second user prior to data transmission, the selected method using one of combinations of the first secret key of the first user and the second public key of the second user, and the second secret key of the second user and the first public key of the first user; generating an electronic signature to be transmitted with data by using the secret key at the site of the user transmitting the data; and verifying the electronic signature by using the notified public key at the site of the user receiving the data, wherein the step of supplying the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 2

A method of generating and verifying electronic signatures via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of users from a system provider; generating a first public key with a secretly selected integer as a first secret key and a base point on the elliptic curve at a site of a first user, and generating a second public key with a secretly selected integer as a second secret key and the base point at a site of a second user, wherein the first and second public keys are different; notifying the second user of the first public key from the first user and notifying the first user of the second public key from the second user; selecting an enciphering and deciphering method by the first user and the second user prior to data transmission, the selected method using one of combinations of the first secret key of the first user and the second public key of the second user, and the second secret key of the second user and the first public key of the first user; generating an electronic signature to be transmitted with data by using the secret key at the site of the user transmitting the data; and verifying the electronic signature by using the notified public key at the site of the user receiving the data, wherein the step of supplying the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 9

A method of implementing a privacy communication via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of users from a system provider; generating a first public key with a secretly selected integer as a first secret key, and a base point on the elliptic curve at a site of a first user and generating a second public key with a secretly selected integer as a second secret key and the base point at a site of a second user wherein the first and second public keys are different; notifying the second user of the first public key from the first user and notifying the first user of the second public key from the second user; selecting an enciphering and deciphering method by the first user and the second user prior to data transmission, the selected method using one of combinations of the secret key of the first user and the public key of the second user, and the secret key of the second user and the public key of the first user; enciphering data to be transmitted by using the notified public key at the site of the data sender; and deciphering the enciphered data by using the his own secret key at the site of the data receiver, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 10

A method of implementing a privacy communication via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of users from a system provider; generating a first public key with a secretly selected integer as a first secret key, and a base point on the elliptic curve at a site of a first user and generating a second public key with a secretly selected integer as a second secret key and the base point at a site of a second user wherein the first and second public keys are different; notifying the second user of the first public key from the first user and notifying the first user of the second public key from the second user; selecting an enciphering and deciphering method by the first user and the second user prior to data transmission, the selected method using one of combinations of the secret key of the first user and the public key of the second user, and the secret key of the second user and the public key of the first user; enciphering data to be transmitted by using the notified public key at the site of the data sender; and deciphering the enciphered data by using the his own secret key at the site of the data receiver, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 17

A method of generating and verifying electronic signatures via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of the users from the provider; selecting a first secret key at a site of a first user and selecting a second secret key at a site of a second user wherein the first and second secret keys are different; notifying the second user of a number that was calculated at the site of the first user with the public data and the first secret key as a first public key, and notifying the first user of a number that was calculated at the site of the second user with the public data and the second secret key as a second public key; calculating a common key by using the first secret key and the second public key from the second user at the site of the first user, and calculating the common key by using the second secret key and the first public key from the first user at the site of the second user; generating an electronic signature to be transmitted with data at the site of one of the first and second users who wishes to transmit the data by using the common key; transmitting the signature of data from the site of one of the first and second users who wishes to transmit the data to the other user; and verifying the electronic signature using the common key at the site of the other user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 18

A method of generating and verifying electronic signatures via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of the users from the provider; selecting a first secret key at a site of a first user and selecting a second secret key at a site of a second user wherein the first and second secret keys are different; notifying the second user of a number that was calculated at the site of the first user with the public data and the first secret key as a first public key, and notifying the first user of a number that was calculated at the site of the second user with the public data and the second secret key as a second public key; calculating a common key by using the first secret key and the second public key from the second user at the site of the first user, and calculating the common key by using the second secret key and the first public key from the first user at the site of the second user; generating an electronic signature to be transmitted with data at the site of one of the first and second users who wishes to transmit the data by using the common key; transmitting the signature of data from the site of one of the first and second users who wishes to transmit the data to the other user; and verifying the electronic signature using the common key at the site of the other user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 25

A method of implementing a privacy communication via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of the users from the system provider; selecting a first secret key at a site of a first user and selecting a second secret key at a site of a second user wherein the first and second secret keys are different; notifying the second user of a number that was calculated at the site of the first user with the public data and the first secret key as a first public key, and notifying the first user of a number that was calculated at the site of the second user with the public data and the second secret key as a second public key; calculating a common key by using the first secret key and the second public key from the second user at the site of the first user, and calculating the common key by using the second secret key and the first public key from the first user at the site of the second user; ciphering the data to be transmitted at the site of one of the first and second users who wishes to transmit the data by using the common key; transmitting the ciphered data from the site of one of the first and second users who wishes to transmit the data to the other user; and deciphering the ciphered data using common key at the site of the other user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 26

A method of implementing a privacy communication via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of the users from the system provider; selecting a first secret key at a site of a first user and selecting a second secret key at a site of a second user wherein the first and second secret keys are different; notifying the second user of a number that was calculated at the site of the first user with the public data and the first secret key as a first public key, and notifying the first user of a number that was calculated at the site of the second user with the public data and the second secret key as a second public key; calculating a common key by using the first secret key and the second public key from the second user at the site of the first user, and calculating the common key by using the second secret key and the first public key from the first user at the site of the second user; ciphering the data to be transmitted at the site of one of the first and second users who wishes to transmit the data by using the common key; transmitting the ciphered data from the site of one of the first and second users who wishes to transmit the data to the other user; and deciphering the ciphered data using common key at the site of the other user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 33

A method of generating and verifying electronic signatures via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of the users from a network provider; selecting a secret key at a site of a first user; notifying the second user of a number that was calculated at the site of the first user with the public data and the secret key as a public key; generating a random number at the site of the first user and subsequently ciphering the random number with the public data; generating an electronic signature to be transmitted with data at the site of the first user by using the random number and the secret key; transmitting the ciphered random number and the signature of data from the first user to the second user; and verifying the electronic signature by using the public key and the ciphered random number at the site of the second user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 34

A method of generating and verifying electronic signatures via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of the users from a network provider; selecting a secret key at a site of a first user; notifying the second user of a number that was calculated at the site of the first user with the public data and the secret key as a public key; generating a random number at the site of the first user and subsequently ciphering the random number with the public data; generating an electronic signature to be transmitted with data at the site of the first user by using the random number and the secret key; transmitting the ciphered random number and the signature of data from the first user to the second user; and verifying the electronic signature by using the public key and the ciphered random number at the site of the second user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 41

A method of implementing a privacy communication via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of the users from a network provider; selecting a secret key at a site of a first user; notifying the second user of a number that was calculated at the site of the first user with the public data and the secret key as a public key; generating a random number at the site of the first user and subsequently ciphering the random number with the public data; ciphering the data to be transmitted at the site of the second user by using the random number and the public key; transmitting the ciphered random number and the ciphered data from the second user to the first user; and deciphering the ciphered data using secret key and the ciphered random number at the site of the first user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 42

A method of implementing a privacy communication via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of the users from a network provider; selecting a secret key at a site of a first user; notifying the second user of a number that was calculated at the site of the first user with the public data and the secret key as a public key; generating a random number at the site of the first user and subsequently ciphering the random number with the public data; ciphering the data to be transmitted at the site of the second user by using the random number and the public key; transmitting the ciphered random number and the ciphered data from the second user to the first user; and deciphering the ciphered data using secret key and the ciphered random number at the site of the first user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 49

A method of generating and verifying electronic signatures via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of the users from the system provider; selecting a first secret key at a site of a first user, selecting a second secret key at a site of a second user, and selecting a third secret key at a site of a third user wherein the first, second and third secret keys are different; notifying the third user of a number that was calculated at the site of the first user with the public data and the first secret key as a first public key, and notifying the first user of a number that was calculated at the site of the third user with the public data and the second secret key as a third public key; calculating a common key by using the first secret key and the third public key from the third user at the site of the first user, and calculating the first common key by using the third secret key and the first public key from the first user at the site of the third user; notifying the third user of a second public key that was calculated at the site of second user with the public data and the second secret key, and notifying the second user of the third public key that was calculated at the site of the third user with the public data and the third secret key; calculating a second common key by using the second secret key and the third public key from the third user at the site of the second user, and calculating the second common key by using the third secret key and the second public key from the second user at the site of the third user; generating a first electronic signature to be transmitted with data by using the first common key at the site of the first user; verifying the first electronic signature by using the first common key at the site of the third user; generating a second electronic signature to be transmitted with the data to the second user using the second common key at the site of the third user; and verifying the second electronic signature by using the second common key at the site of the second user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 50

A method of generating and verifying electronic signatures via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of the users from the system provider; selecting a first secret key at a site of a first user, selecting a second secret key at a site of a second user, and selecting a third secret key at a site of a third user wherein the first, second and third secret keys are different; notifying the third user of a number that was calculated at the site of the first user with the public data and the first secret key as a first public key, and notifying the first user of a number that was calculated at the site of the third user with the public data and the second secret key as a third public key; calculating a common key by using the first secret key and the third public key from the third user at the site of the first user, and calculating the first common key by using the third secret key and the first public key from the first user at the site of the third user; notifying the third user of a second public key that was calculated at the site of second user with the public data and the second secret key, and notifying the second user of the third public key that was calculated at the site of the third user with the public data and the third secret key; calculating a second common key by using the second secret key and the third public key from the third user at the site of the second user, and calculating the second common key by using the third secret key and the second public key from the second user at the site of the third user; generating a first electronic signature to be transmitted with data by using the first common key at the site of the first user; verifying the first electronic signature by using the first common key at the site of the third user; generating a second electronic signature to be transmitted with the data to the second user using the second common key at the site of the third user; and verifying the second electronic signature by using the second common key at the site of the second user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 57

A method of implementing a privacy communication via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of users from a network provider; selecting a first secret key at a site of a first user, selecting a second secret key at a site of a second user, and selecting a third secret key at a site of a third user wherein the first, second and third secret keys are different; notifying the third user of a number that was calculated at the site of the first user with the public data and the first secret key as a first public key, and notifying the first user of a number that was calculated at the site of the third user with the public data and the second secret key as a third public key; calculating a first common key by using the first secret key and the third public key from the third user at the site of the first user, and calculating the first common key by using the third secret key and the first public key from the first user at the site of the third user; notifying the third user of a second public key that was calculated at the site of the second user with the public data and the second secret key, and notifying the second user of the third public key that was calculated at the site of the third user with the public data and the third secret key; calculating a second common key by using the second secret key and the third public key from the third user at the site of the second user, and calculating the second common key by using the third secret key and the second public key from the second user at the site of the third user; ciphering data to be transmitted using the first common key at the site of the first user; deciphering the ciphered data using the first common key at the site of the third user; re-ciphering the data to be transmitted to the second user using the second common key at the site of the third user; and deciphering the ciphered data using the second common key at the site of the second user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 58

A method of implementing a privacy communication via a public digital network system by using an elliptic curve, comprising the steps of: supplying on the network system public data to each of users from a network provider; selecting a first secret key at a site of a first user, selecting a second secret key at a site of a second user, and selecting a third secret key at a site of a third user wherein the first, second and third secret keys are different; notifying the third user of a number that was calculated at the site of the first user with the public data and the first secret key as a first public key, and notifying the first user of a number that was calculated at the site of the third user with the public data and the second secret key as a third public key; calculating a first common key by using the first secret key and the third public key from the third user at the site of the first user, and calculating the first common key by using the third secret key and the first public key from the first user at the site of the third user; notifying the third user of a second public key that was calculated at the site of the second user with the public data and the second secret key, and notifying the second user of the third public key that was calculated at the site of the third user with the public data and the third secret key; calculating a second common key by using the second secret key and the third public key from the third user at the site of the second user, and calculating the second common key by using the third secret key and the second public key from the second user at the site of the third user; ciphering data to be transmitted using the first common key at the site of the first user; deciphering the ciphered data using the first common key at the site of the third user; re-ciphering the data to be transmitted to the second user using the second common key at the site of the third user; and deciphering the ciphered data using the second common key at the site of the second user, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 65

A method of supplying programs to a plurality of subscribers from a TV program supplier via a public digital network, comprising the following steps: the TV program supplier noting a subscriber's identification code and sending a smart card to each subscriber, the smart card storing information necessary to decipher enciphered image data, the image data being enciphered using an elliptic curve E, its element P, and a number found by the identification code; installing the smart card to a TV receiver at each subscriber's end; a subscriber using his own identification code to send a request to the TV program supplier for a TV program; enciphering image data of the requested TV program using the elliptic curve E, its element P, and the number found by the identification code upon receipt of the request, and sending resulting enciphered image data to the requesting subscriber via the public digital network by the program supplier; and deciphering the enciphered image data using the smart card with the TV receiver and displaying resulting deciphered image data as original image data at the subscriber's end, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and its y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 66

A method of supplying programs to a plurality of subscribers from a TV program supplier via a public digital network, comprising the following steps: the TV program supplier noting a subscriber's identification code and sending a smart card to each subscriber, the smart card storing information necessary to decipher enciphered image data, the image data being enciphered using an elliptic curve E, its element P, and a number found by the identification code; installing the smart card to a TV receiver at each subscriber's end; a subscriber using his own identification code to send a request to the TV program supplier for a TV program; enciphering image data of the requested TV program using the elliptic curve E, its element P, and the number found by the identification code upon receipt of the request, and sending resulting enciphered image data to the requesting subscriber via the public digital network by the program supplier; and deciphering the enciphered image data using the smart card with the TV receiver and displaying resulting deciphered image data as original image data at the subscriber's end, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and its y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 73

A system of supplying programs to a plurality of subscribers from a TV program supplier via a public digital network, comprising the following steps: the TV program supplier sending a smart card to each subscriber, the smart card storing information necessary to decipher enciphered image data, the image data being enciphered using an elliptic curve E, its element P, and a random number generated by the program supplier using its own identification code; installing the smart card to a TV receiver at each subscriber's end; a subscriber using his own identification code to send a request to the TV program supplier for enciphering image data of a TV program using the elliptic curve E, its element P, identification code, and the random number, and transmitting resulting enciphered image data via the public digital network by the TV program supplier; selecting a channel to receive the TV program from the TV program supplier specified by the identification code by the subscriber; and deciphering the enciphered image data using the smart card with the TV receiver and displaying resulting deciphered image data as original image data at the subscriber's end, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.

Claim 74

A system of supplying programs to a plurality of subscribers from a TV program supplier via a public digital network, comprising the following steps: the TV program supplier sending a smart card to each subscriber, the smart card storing information necessary to decipher enciphered image data, the image data being enciphered using an elliptic curve E, its element P, and a random number generated by the program supplier using its own identification code; installing the smart card to a TV receiver at each subscriber's end; a subscriber using his own identification code to send a request to the TV program supplier for enciphering image data of a TV program using the elliptic curve E, its element P, identification code, and the random number, and transmitting resulting enciphered image data via the public digital network by the TV program supplier; selecting a channel to receive the TV program from the TV program supplier specified by the identification code by the subscriber; and deciphering the enciphered image data using the smart card with the TV receiver and displaying resulting deciphered image data as original image data at the subscriber's end, wherein the step of supplying and the public data includes the steps of: choosing an elliptic curve E having GF(q) as a field of definition where q is a power of a prime number, and where the order of a group consisting of the elements of GF(q) denoted as E((GF(q)) is divisible by a prime number of 30 or more digits; and determining an element called a base point P that gives a small absolute number less than 32 bits to at least one of its x-coordinate denoted as x(P) and y-coordinate denoted as y(P), so that fewer parameters represent E, GF(q), P, the order of P to facilitate recovering the base point P.