US5515439A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Exchange certificate for one way validation of information
Assignee: International Business Machines Corp
•
Filing: 1994-11-09
•
Granted: 1996-05-07
•
Expires: 2014-11-09
Abstract
Abstract In a communications system, a method is described allowing two users having established a communication session identified by a unique session freshness proof, to transmit and validate a new value of a variable by using an exchange certificate which combines the following elements: the new value of the variable, a common secret key known by both users, an exchange counter representative of the number of values of said variable transmitted between the two users during the current communication session and a session freshness proof. Protection against potential eavesdroppers and intruders is provided by combining cryptographically the elements of the exchange certificate. Further protection is obtained by interrupting the current communication session and opening a new one characterized by a new unique session freshness proof when the exchange counter reaches its maximum value; thus avoiding the risk that the same value of the session freshness keeps being used when the exchange counter is reset to its initial value. Consequently a given pair of values of the session freshness proof and of the exchange counter will never be used more than one time, making eavesdropping and, replaying attacks from intruders more difficult. Preferably, the method used for opening a new communication session uses already known authentication methods based on the common secret key.
Inventors
- 👤 David Bantz
- 👤 Frederic Bauchot
- 👤 Eliane D. Bello
- 👤 Shay Kutten
- 👤 Hugo Krawczyk
- 👤 Amir Herzberg
- 👤 Yishay Mansour
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 10:56
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0838; H04L9/0841; H04L9/0844; H04L9/0891; H04L2209/00; H04L2209/80
Claims Analysis
Total Claims: 20
Claim 1
Independent Claim
370 words
A method for transmitting a value K' of a variable, between a first user A of a communications system and a second user B, and for validating said value K', said users sharing a common secret key S and having established a first communication session identified by a first unique session freshness proof N2 known to both user A and user B, said method being characterized in that it comprises the steps of: a. transmitting from A to B said value K' by means of an exchange certificate comprising at least two fields M1 and M2 of the minimum form: M1=f( S, K', . . . ) M2=g( S, K', N2, c1, . . . ) wherein f( ) and g( ) are functions such that, f( S, K', . . . )=m1 cannot be solved for K' without knowledge of S, m1 being a given value of field M1 and, g( S, K', N2, c1, . . . )=m2 cannot be solved for K' without knowledge of S, m2 being a given value of field M2; and wherein, c1 is an exchange counter controlled by A and representative of the number of values of said variable exchanged between user A and user B during said first communication session; b. processing by B of said exchange certificate M comprising the steps of: •deriving from said exchange certificate M said value K' as a result of solving for K' equation: f( S, K', . . . )=M1; and •validating said value K' as a result of the verification of a set of validation conditions comprising at least an equation of the minimum form: g( S, K', N2, c2, . . . )=M2 wherein, c2 is an exchange counter controlled by B and representative of the number of values of said variable exchanged between user A and user B during said first communication session. c. interrupting at the initiative of either A or B said first communication session between A and B and opening a second communication session identified by a second unique session freshness proof upon occurrence of anyone of a set of session reset conditions, said set of reset conditions comprising failure of at least one of said validation conditions.
Claim 2
Independent Claim
370 words
A method for transmitting a value K' of a variable, between a first user A of a communications system and a second user B, and for validating said value K', said users sharing a common secret key S and having established a first communication session identified by a first unique session freshness proof N2 known to both user A and user B, said method being characterized in that it comprises the steps of: a. transmitting from A to B said value K' by means of an exchange certificate comprising at least two fields M1 and M2 of the minimum form: M1=f( S, K', . . . ) M2=g( S, K', N2, c1, . . . ) wherein f( ) and g( ) are functions such that, f( S, K', . . . )=m1 cannot be solved for K' without knowledge of S, m1 being a given value of field M1 and, g( S, K', N2, c1, . . . )=m2 cannot be solved for K' without knowledge of S, m2 being a given value of field M2; and wherein, c1 is an exchange counter controlled by A and representative of the number of values of said variable exchanged between user A and user B during said first communication session; b. processing by B of said exchange certificate M comprising the steps of: •deriving from said exchange certificate M said value K' as a result of solving for K' equation: f( S, K', . . . )=M1; and •validating said value K' as a result of the verification of a set of validation conditions comprising at least an equation of the minimum form: g( S, K', N2, c2, . . . )=M2 wherein, c2 is an exchange counter controlled by B and representative of the number of values of said variable exchanged between user A and user B during said first communication session. c. interrupting at the initiative of either A or B said first communication session between A and B and opening a second communication session identified by a second unique session freshness proof upon occurrence of anyone of a set of session reset conditions, said set of reset conditions comprising failure of at least one of said validation conditions.
Claim 3
Dependent Claim
28 words
The method of claim 1 wherein said set of session reset conditions further comprises the event that either of exchange counters c1 and c2 reaches its maximum value.
Claim 4
Independent Claim
82 words
The method according to any one of claims 1 or 2 wherein, f(S, K', . . . )=Es(q) g(S, K', N2, c1, . . . )=Es(r op Es(s op' t)) wherein Es( ) is a data encryption function using S as the encryption key; op and op' are mathematical or Boolean operations; and q, r, s, t are functions of the minimum form q=q(K', . . . ) r=r(N2, . . . ) s=s(K', . . . ) t=t(c1, . . .).
Claim 5
Dependent Claim
16 words
The method of claim 3 wherein op and op' represent exclusive bit by bit OR Boolean.
Claim 6
Dependent Claim
33 words
The method of claim 4 wherein functions q, r, s and t are: q(K', . . . )=K' r(N2, . . . )=N2 s(K', . . . )=K' t(c1, . . . )=c1
Claim 7
Independent Claim
31 words
The method according to any one of claims 1 or 2 wherein said exchange certificate further comprises a third field M3 of the minimum form M3=h( c1, . . . ).
Claim 8
Dependent Claim
21 words
The method of claim 6 wherein said set of validation conditions further comprises verifying that h( c2, . . . )=M3.
Claim 9
Dependent Claim
15 words
The method of claim 7 wherein function h is h( c, . . . )=c.
Claim 10
Independent Claim
360 words
A system for transmitting a value K' of a variable, between a first user A of a communications system and a second user B, and for validating said value K', said users sharing a common secret key S and having established a first communication session identified by a first unique session freshness proof N2 known to both user A and user B, said system comprising: a. means for transmitting from A to B said value K' by means of an exchange certificate comprising at least two fields M1 and M2 of the minimum form: M1=f(S, K', . . . ) M2=g(S, K', N2, c1, . . . ) wherein F() and g() are functions such that, f(S, K', . . . )=m1 cannot be solved for K' without knowledge of S, m1 being a given value of field M1 and, g(S, K', N2, c1, . . .)=m2 cannot be solved for K' without knowledge of S, m2 being a given value of field M2; and wherein, c1 is an exchange counter controlled by A and representative of the number of values of said variable exchanged between user A and user B during said first communication session; b. means for processing by B of said exchange certificate M comprising: means for deriving from said exchange certificate M said value K' as a result of solving for K' equation: f(S, K', . . . )=M1; and means for validating said value K' as a result of the verification of a set of validation conditions comprising at least an equation of the minimum form: g(S, K', N2, c2, . . .)=M2 wherein, c2 is an exchange counter controlled by B and representative of the number of values of said variable exchanged between user A and user B during said first communication session; c. means for interrupting at the initiative of either A or B said first communication session between A and B and opening a second communication session identified by a second unique session freshness proof upon occurrence of any one of a set of session reset conditions, said set of reset conditions comprising failure of at least one of said validation conditions.
Claim 11
Independent Claim
360 words
A system for transmitting a value K' of a variable, between a first user A of a communications system and a second user B, and for validating said value K', said users sharing a common secret key S and having established a first communication session identified by a first unique session freshness proof N2 known to both user A and user B, said system comprising: a. means for transmitting from A to B said value K' by means of an exchange certificate comprising at least two fields M1 and M2 of the minimum form: M1=f(S, K', . . . ) M2=g(S, K', N2, c1, . . . ) wherein F() and g() are functions such that, f(S, K', . . . )=m1 cannot be solved for K' without knowledge of S, m1 being a given value of field M1 and, g(S, K', N2, c1, . . .)=m2 cannot be solved for K' without knowledge of S, m2 being a given value of field M2; and wherein, c1 is an exchange counter controlled by A and representative of the number of values of said variable exchanged between user A and user B during said first communication session; b. means for processing by B of said exchange certificate M comprising: means for deriving from said exchange certificate M said value K' as a result of solving for K' equation: f(S, K', . . . )=M1; and means for validating said value K' as a result of the verification of a set of validation conditions comprising at least an equation of the minimum form: g(S, K', N2, c2, . . .)=M2 wherein, c2 is an exchange counter controlled by B and representative of the number of values of said variable exchanged between user A and user B during said first communication session; c. means for interrupting at the initiative of either A or B said first communication session between A and B and opening a second communication session identified by a second unique session freshness proof upon occurrence of any one of a set of session reset conditions, said set of reset conditions comprising failure of at least one of said validation conditions.
Claim 12
Dependent Claim
28 words
The system of claim 9 wherein said set of session reset conditions further comprises the event that either of exchange counters c1 and c2 reaches its maximum value.
Claim 13
Independent Claim
80 words
The system of either of claims 9, or 10 wherein, f(S, K', . . . )=Es(q) g(S, K', N2, c1, . . . )=Es(r op Es(s op't)) wherein Es( ) is a data encryption function using S as the encryption key; op and op' are mathematical or Boolean operations; and q, r, s, t are functions of the minimum form q=q(K', . . . ) r=r(N2, . . . ) s=s(K', . . . ) t=t(c1, . . . ).
Claim 14
Dependent Claim
17 words
The system of claim 11 wherein op and op' represent exclusive bit by bit OR Boolean operation.
Claim 15
Dependent Claim
33 words
The system of claim 12 wherein functions q, r, s and t are: q(K', . . . )=K' r(N2, . . . )=N2 s(K', . . . )=K' t(c1, . . . )=c1.
Claim 16
Independent Claim
29 words
The system according to any of claims 9 or 10 wherein said exchange certificate further comprises a third field M3 of the minimum form M3=h(c1, . . . ).
Claim 17
Dependent Claim
22 words
The system of claim 14 wherein said set of validation conditions further comprises means for verifying that h(c2, . . . )=M3.
Claim 18
Dependent Claim
14 words
The system of claim 15 wherein function h is h(c, . . . )=c.
Claim 19
Dependent Claim
15 words
The system of claim 9 wherein said communications system uses a radio frequency communication channel.
Claim 20
Dependent Claim
14 words
The system of claim 9 wherein said communications system uses an infrared communication channel.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-05-07 | 1999-11-06 | 2000-05-07 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-05-07 | 2003-11-06 | 2004-05-07 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-05-07 | 2007-11-06 | 2008-05-07 | $7700.00 | Window Closed / Lapsed |