Patent US5444780A successfully refreshed from Google Patents.
US5444780A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Client/server based secure timekeeping system
Assignee: International Business Machines Corp
•
Filing: 1993-07-22
•
Granted: 1995-08-22
•
Expires: 2013-07-22
Abstract
Abstract A client/server-based secure timekeeping computer system is provided. A secure-time server which is located in a physically trusted environment, includes a highly accurate time-of-day (TOD) clock, along with a key storage area containing a table of public/private key pairs corresponding to clients in the client/server network. The server encrypts a current time value from its TOD clock using a private key corresponding to a selected client. The encrypted time value is then sent to the client over an open communications channel. Each client in the network is equipped with its own secure timekeeping facility housed within the secure boundaries of a single, tamper-proof VLSI chip. Upon receipt of a secure-time transmission, a client uses its own copy of its private key to decrypt the time value, then loads the decrypted time value into its TOD clock. The tamper-proof VLSI chip in each client also includes an authenticated-time indicator, which is set to TRUE to indicate that the TOD clock contains a trusted time. Programs that require secure time may clock the authenticated time indicator before executing and may cancel execution if a secure time is not available. Programs that do not require secure time are able to execute regardless. To maintain the ongoing accuracy of the client TOD clock once it is set with a trusted time value, the secure timekeeping facility in a client may further include calibration and clock stability adjustment mechanisms which receive client clock calibration adjustment values and accuracy duration values, and which apply these values at intervals to maintain the accuracy of the client TOD clock within acceptable limits and mark the clock as untrusted when it can no longer be maintained within acceptable limits.
Inventors
- 👤 Robert C. Hartman, Jr.
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 13:29
CPC Classifications
G; G06; G06F; G06F12/00; G06F12/14; G06F12/1408; G06F21/00; G06F21/70; G06F21/71; G06F21/72; G06F21/725; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3297; G06F2211/00; G06F2211/009
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
147 words
A secure timekeeping facility for use in a computer system that includes a central processing unit and electronic storage located in a physically secure package, comprising: a public key register for holding a public key for use in identifying a private key for encrypting and decrypting at least time and date transmissions; a private key register for holding the private key; an input for receiving (a) time and date information and (b) clock accuracy-enhancing operation data, encrypted using the private key; data decryption means for decrypting (a) the received time and date information and (b) said clock accuracy-enhancing operation data, using the private key; a time-of-day (TOD) clock including a time clock and a date calendar, having an input for receiving decrypted time and date information and an output for providing unencrypted time and date information, which is subject to modification by said clock accuracy-enhancing operation data.
Claim 2
Dependent Claim
147 words
A secure timekeeping facility for use in a computer system that includes a central processing unit and electronic storage located in a physically secure package, comprising: a public key register for holding a public key for use in identifying a private key for encrypting and decrypting at least time and date transmissions; a private key register for holding the private key; an input for receiving (a) time and date information and (b) clock accuracy-enhancing operation data, encrypted using the private key; data decryption means for decrypting (a) the received time and date information and (b) said clock accuracy-enhancing operation data, using the private key; a time-of-day (TOD) clock including a time clock and a date calendar, having an input for receiving decrypted time and date information and an output for providing unencrypted time and date information, which is subject to modification by said clock accuracy-enhancing operation data.
Claim 3
Dependent Claim
26 words
The secure timekeeping facility as recited in claim 1, wherein the TOD clock is located in the same physically secure package as the central processing unit.
Claim 4
Dependent Claim
23 words
The secure timekeeping facility as recited in claim 1, wherein the public key corresponds with a system serial number for the computer system.
Claim 5
Dependent Claim
27 words
The secure timekeeping facility as recited in claim 1, wherein the public key is unique to the computer system and is accessible outside the physically secure package.
Claim 6
Dependent Claim
27 words
The secure timekeeping facility as recited in claim 1, wherein the private key is unique to the computer system and is inaccessible outside the physically secure package.
Claim 7
Dependent Claim
32 words
The secure timekeeping facility as recited in claim 1, further comprising secure-time request means for requesting from a time server any of current time and date information encrypted using the private key.
Claim 8
Dependent Claim
26 words
The secure timekeeping facility as recited in claim 6, wherein a request initiated by the secure-time request means includes the present value of the TOD clock.
Claim 9
Dependent Claim
35 words
The secure timekeeping facility as recited in claim 1, further comprising client clock calibration means for receiving any of a time and date calibration value and for applying the calibration value to the TOD clock.
Claim 10
Dependent Claim
19 words
The secure timekeeping facility as recited in claim 8, wherein the calibration value is encrypted using the private key.
Claim 11
Dependent Claim
97 words
A secure time server for use in a computer network, comprising: a server time-of-day (TOD) clock including a time clock and a date calendar; an input for receiving a secure time request including a public key; processor means for identifying a private key corresponding to the public key; data encryption means for encrypting time and date information from the TOD clock using the private key; an output for sending the encrypted time and date information to the secure time requestor; and means for passing clock operation data between said secure time server and said secure time requestor.
Claim 12
Dependent Claim
97 words
A secure time server for use in a computer network, comprising: a server time-of-day (TOD) clock including a time clock and a date calendar; an input for receiving a secure time request including a public key; processor means for identifying a private key corresponding to the public key; data encryption means for encrypting time and date information from the TOD clock using the private key; an output for sending the encrypted time and date information to the secure time requestor; and means for passing clock operation data between said secure time server and said secure time requestor.
Claim 13
Dependent Claim
57 words
The secure time server as recited in claim 10, wherein said means for passing includes: calibration adjustment means for computing a client clock calibration value based on any of the value of the server TOD clock, time, date, and calibration history information received from the client, and a calibration history accumulated from prior client clock calibration computations.
Claim 14
Dependent Claim
58 words
The secure time server as recited in claim 10, wherein said means for passing includes: client stability monitoring means for computing a client clock stability value based on any of the value of the server TOD clock, time, date and stability history information received from the client, and a stability history accumulated from prior client clock stability computations.
Claim 15
Dependent Claim
38 words
The secure time server as recited in claim 11, wherein the client clock calibration value is further computed from the amount of drift accumulated in the client TOD clock since the last setting of the client TOD clock.
Claim 16
Dependent Claim
19 words
The secure time server as recited in claim 11, wherein the calibration value is encrypted using the private key.
Claim 17
Dependent Claim
78 words
A secure time server for use in a computer network, comprising: a server time-of-day (TOD) clock including a time clock and a date calendar; processor means for identifying a public key and a private key for which to generate a secure time transmission; date encryption means for encrypting time and date information from the TOD clock using the private key; and an output for broadcasting the public key and the encrypted time, date information and clock operation data.
Claim 18
Dependent Claim
78 words
A secure time server for use in a computer network, comprising: a server time-of-day (TOD) clock including a time clock and a date calendar; processor means for identifying a public key and a private key for which to generate a secure time transmission; date encryption means for encrypting time and date information from the TOD clock using the private key; and an output for broadcasting the public key and the encrypted time, date information and clock operation data.
Claim 19
Dependent Claim
60 words
The secure time server as recited in claim 15, further comprising: calibration adjustment means for computing a client clock calibration value., which is broadcast as clock operation data based on any of the value of the server TOD clock, time, date, and calibration history information received from the client, and a calibration history accumulated from prior client clock calibration computations.
Claim 20
Dependent Claim
61 words
The secure time server as recited in claim 15, further comprising: client stability monitoring means for computing a client clock stability value, which is broadcast as clock operation data based on any of the value of the server TOD clock, time, date, and stability history information received from the client, and a stability history accumulated from prior client clock stability computations.
Claim 21
Dependent Claim
38 words
The secure time server as recited in claim 16, wherein the client clock calibration value is further computed from the amount of drift accumulated in the client TOD clock since the last setting of the client TOD clock.
Claim 22
Dependent Claim
19 words
The secure lime server as recited in claim 15 wherein the calibration value is encrypted using the private key.
References Cited (Backward Citations)
US4310720A
Cited
US4423287A
Cited
US4825050A
Cited
US4575621A
Cited
US4736419A
Cited
US4933898A
Cited
US5189700A
Cited
US5001752A
Cited
US5136643A
Cited
US5022080A
Cited
US5136647A
Cited
US5166953A
Cited
US5136646A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1998-08-21 | 1999-02-20 | 1999-08-22 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2002-08-21 | 2003-02-20 | 2003-08-22 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2006-08-21 | 2007-02-20 | 2007-08-22 | $7700.00 | Window Closed / Lapsed |