← Back to Patent Explorer
US5517567A Expired / Lapsed US ⏱️ 0.0 years remaining

Key distribution system

Assignee: Daq Electronics Inc
•
Filing: 1994-08-23
•
Granted: 1996-05-14
•
Expires: 2014-08-23
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A system for securely distributing a communications key from a master unit to a remote unit for use in cryptographic communications between the master and remote units employs first and second secret numbers stored in both the master and remote units, and a random number generated in the master unit which is combined with the first secret number to produce a first intermediate number which is in turn combined with the second secret number to produce a second intermediate number. The second intermediate number is combined with the communications key to produce a transmission number sent with the random number to the remote unit. The remote unit, using the random number, the transmission number, and the first and second secret numbers, is able to reproduce the communications key. A method for securely distributing the communications key from the master unit to the remote unit is also provided along with a system and method for authenticating the identity of any one of a plurality of remote units in communication with the master unit, whereby each remote unit stores first and second secret numbers unique to it, all of which secret numbers are also stored in the master unit.

Inventors

  • 👤 Philip Epstein

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-10-28 14:37
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0838; H04L9/0841; H04L9/0844

Claims Analysis

Total Claims: 35
Claim 1
Independent Claim 206 words
A system for securely distributing a communications key from a master unit to a remote unit, comprising: memory means for storing first and second secret numbers in the master unit; random number generating means for providing a random number to the master unit; first combining means in the master unit for combining said random number with said first secret number to produce a first intermediate number; second combining means in the master unit for combining said first intermediate number with said second secret number to produce a second intermediate number; third combining means in the master unit for combining said second intermediate number with the communications key to produce a transmission number; communication means for transmitting signals between the master and remote units; memory means for storing said first and second secret numbers in the remote unit; first combining means in the remote unit for combining said random number with said first secret number to produce said first intermediate number; second combining means in the remote unit for combining said first intermediate number with said second secret number to produce said second intermediate number; and third combining means in the remote unit for combining said intermediate number with said transmission number to produce the communications key.
Claim 2
Independent Claim 206 words
A system for securely distributing a communications key from a master unit to a remote unit, comprising: memory means for storing first and second secret numbers in the master unit; random number generating means for providing a random number to the master unit; first combining means in the master unit for combining said random number with said first secret number to produce a first intermediate number; second combining means in the master unit for combining said first intermediate number with said second secret number to produce a second intermediate number; third combining means in the master unit for combining said second intermediate number with the communications key to produce a transmission number; communication means for transmitting signals between the master and remote units; memory means for storing said first and second secret numbers in the remote unit; first combining means in the remote unit for combining said random number with said first secret number to produce said first intermediate number; second combining means in the remote unit for combining said first intermediate number with said second secret number to produce said second intermediate number; and third combining means in the remote unit for combining said intermediate number with said transmission number to produce the communications key.
Claim 3
Dependent Claim 43 words
The system as claimed in claim 1, wherein said second combining means in the master unit and said second combining means in the remote unit include encryption means for encrypting said first intermediate number using said second secret number as an encrypting key.
Claim 4
Dependent Claim 14 words
The system as claimed in claim 2, wherein said encryption means uses DES encryption.
Claim 5
Dependent Claim 38 words
The system as claimed in claim 1, wherein said first combining means in the master unit and said first combining means in the remote unit include means for exclusive OR-ing said random number with said first secret number.
Claim 6
Dependent Claim 50 words
The system as claimed in claim 1, wherein said third combining means in the master unit includes means for exclusive OR-ing said second intermediate number with the communications key and said third combining in the remote unit includes means for exclusive OR-ing said second intermediate number with said transmission number.
Claim 7
Dependent Claim 29 words
The system as claimed in claim 4, wherein said third combining means in the remote unit includes means for exclusive OR-ing said second intermediate number with said transmission number.
Claim 8
Dependent Claim 32 words
The system as claimed in claim 1, further comprising enrolling means for securely copying said first and second secret numbers from the master unit into said memory means in the remote unit.
Claim 9
Independent Claim 199 words
A method for securely distributing a communications key from a master unit to a remote unit, comprising the steps of: (a) storing first and second secret numbers in the master and remote units; (b) generating a random number and storing said random number in the master unit; (c) combining said random number with said first secret number to produce a first intermediate number in the master unit; (d) combining said first intermediate number with said second secret number to produce a second intermediate number in the master unit; (e) combining said second intermediate number with said communications key to produce a transmission number in the master unit; (f) transmitting said transmission number and said random number from the master unit to said the remote unit; (g) receiving said transmission number and said random number in the remote unit; (h) combining said random number with said first secret number to produce said first intermediate number in the remote unit; (i) combining said first intermediate number with said second secret number to produce said second intermediate number in the remote unit; and (j) combining said second intermediate number with said transmission number to produce said communications key in the remote unit.
Claim 10
Independent Claim 199 words
A method for securely distributing a communications key from a master unit to a remote unit, comprising the steps of: (a) storing first and second secret numbers in the master and remote units; (b) generating a random number and storing said random number in the master unit; (c) combining said random number with said first secret number to produce a first intermediate number in the master unit; (d) combining said first intermediate number with said second secret number to produce a second intermediate number in the master unit; (e) combining said second intermediate number with said communications key to produce a transmission number in the master unit; (f) transmitting said transmission number and said random number from the master unit to said the remote unit; (g) receiving said transmission number and said random number in the remote unit; (h) combining said random number with said first secret number to produce said first intermediate number in the remote unit; (i) combining said first intermediate number with said second secret number to produce said second intermediate number in the remote unit; and (j) combining said second intermediate number with said transmission number to produce said communications key in the remote unit.
Claim 11
Dependent Claim 45 words
The method as claimed in claim 8, wherein said step of combining said first intermediate number with said second secret number in the master and remote units includes the step of encrypting said first intermediate number using said second secret number as an encrypting key.
Claim 12
Dependent Claim 14 words
The method as claimed in claim 9, wherein said encrypting step comprises DES encryption.
Claim 13
Dependent Claim 40 words
The method as claimed in claim 8, wherein said step of combining said random number with said first secret number in the master and remote units includes the step of exclusive OR-ing said random number with said first secret number.
Claim 14
Dependent Claim 69 words
The method as claimed in claim 8, wherein said step of combining said second intermediate number with said communications key in the master unit includes the step of exclusive OR-ing said second intermediate number with said communications key and said step of combining said second intermediate number with said transmission number in the remote unit includes the step of exclusive OR-ing said second intermediate number with said transmission number.
Claim 15
Dependent Claim 69 words
The method as claimed in claim 11, wherein said step of combining said second intermediate number with said communications key in the master unit includes the step of exclusive OR-ing said second intermediate number with said communications key and said step of combining said second intermediate number with said transmission number in the remote unit includes the step of exclusive OR-ing said second intermediate number with said transmission number.
Claim 16
Dependent Claim 25 words
The method as claimed in claim 8, wherein said steps of (b) through (j) are repeated on a periodic basis to change said communications key.
Claim 17
Dependent Claim 15 words
The method as claimed in claim 14, wherein said periodic basis is about every hour.
Claim 18
Dependent Claim 17 words
The method as claimed in claim 14, wherein said periodic basis is less than every 15 minutes.
Claim 19
Dependent Claim 16 words
The method as claimed in claim 14, wherein said periodic basis is about every three minutes.
Claim 20
Dependent Claim 28 words
The method as claimed in claim 8, further including the step of securely copying said first and second secret numbers from the master unit to the remote unit.
Claim 21
Independent Claim 226 words
A method for authenticating the identity of remote unit in a plurality of remote units in communication with a master unit, said method comprising the steps of: (a) storing in each one of the plurality of remote units first and second secret numbers, said first and second secret numbers in one remote unit being different than said first and second secret numbers in any other remote unit; (b) storing in the master unit said first and second secret numbers of the plurality of the remote units; (c) establishing initial contact between the master unit and a selected one of the plurality of remote units; (d) providing a random number to the master unit; (e) transmitting said random number from the master unit to said selected remote unit; (f) processing said random number in said selected remote unit with said first and second secret numbers stored in said selected remote unit to generate a remote processed number; (g) processing said random number in the master unit with said first and second secret numbers to generate a master processed number; (h) transmitting said remote processed number to the master unit; and (i) comparing said remote processed number and said master processed number in the master unit, whereby the identity of said selected remote unit is authenticated when said remote processed number is equal to said master processed number.
Claim 22
Independent Claim 226 words
A method for authenticating the identity of remote unit in a plurality of remote units in communication with a master unit, said method comprising the steps of: (a) storing in each one of the plurality of remote units first and second secret numbers, said first and second secret numbers in one remote unit being different than said first and second secret numbers in any other remote unit; (b) storing in the master unit said first and second secret numbers of the plurality of the remote units; (c) establishing initial contact between the master unit and a selected one of the plurality of remote units; (d) providing a random number to the master unit; (e) transmitting said random number from the master unit to said selected remote unit; (f) processing said random number in said selected remote unit with said first and second secret numbers stored in said selected remote unit to generate a remote processed number; (g) processing said random number in the master unit with said first and second secret numbers to generate a master processed number; (h) transmitting said remote processed number to the master unit; and (i) comparing said remote processed number and said master processed number in the master unit, whereby the identity of said selected remote unit is authenticated when said remote processed number is equal to said master processed number.
Claim 23
Dependent Claim 59 words
A method as claimed in claim 19, wherein said step of processing said random number in said selected remote and master units comprises the steps of combining said random number with said first secret number to generate an intermediate number and combining said intermediate number with said second secret number to generate said respective remote and master processed numbers.
Claim 24
Dependent Claim 52 words
The method as claimed in claim 20, wherein said step of combining said random number with said first secret number in said selected remote unit and the master unit includes the step of exclusive OR-ing said random number with said first secret number in the master unit and said selected remote unit.
Claim 25
Dependent Claim 46 words
A method as claimed in claim 20, wherein said step of combining said intermediate number with said second secret number in the master unit and said selected remote unit includes the step of encrypting said intermediate number using said second secret number as an encrypting key.
Claim 26
Dependent Claim 14 words
The method as claimed in claim 22, wherein said encrypting step comprises DES encryption.
Claim 27
Dependent Claim 53 words
The method as claimed in claim 19, wherein said step of establishing initial contact comprises the steps of transmitting an identification number from said selected remote unit to the master unit and recalling in the master unit said first and second secret numbers associated with said identification number identifying said selected remote unit.
Claim 28
Independent Claim 248 words
A system for authenticating the identity of a remote unit in a plurality of remote units in communication with a master unit, comprising: remote memory means for storing in each one of the plurality of remote units first and second secret numbers, said first and second secret numbers in one remote unit being different than said first and second secret numbers in any other remote unit; master memory means for storing in the master unit said first and second secret numbers of the plurality of the remote units; contact means for establishing initial communication between the master unit and a selected one of the plurality of said remote units; random number generating means for providing a random number to the master unit; communications means for transmitting signals between the master and remote units; remote processing means for combining said random number in said selected remote unit with said first and second secret numbers stored in said selected remote unit in said predetermined manner to generate a remote processed number; master processing means for processing said random number in the master unit with said first and second secret numbers for said selected remote unit stored in the master unit in said predetermined manner to generate a master processed number; and comparison means for comparing said remote processed number and said master processed number in the master unit, whereby the identity of said selected remote unit is authenticated when said remote processed number is equal to said master processed number.
Claim 29
Independent Claim 248 words
A system for authenticating the identity of a remote unit in a plurality of remote units in communication with a master unit, comprising: remote memory means for storing in each one of the plurality of remote units first and second secret numbers, said first and second secret numbers in one remote unit being different than said first and second secret numbers in any other remote unit; master memory means for storing in the master unit said first and second secret numbers of the plurality of the remote units; contact means for establishing initial communication between the master unit and a selected one of the plurality of said remote units; random number generating means for providing a random number to the master unit; communications means for transmitting signals between the master and remote units; remote processing means for combining said random number in said selected remote unit with said first and second secret numbers stored in said selected remote unit in said predetermined manner to generate a remote processed number; master processing means for processing said random number in the master unit with said first and second secret numbers for said selected remote unit stored in the master unit in said predetermined manner to generate a master processed number; and comparison means for comparing said remote processed number and said master processed number in the master unit, whereby the identity of said selected remote unit is authenticated when said remote processed number is equal to said master processed number.
Claim 30
Dependent Claim 57 words
The system as claimed in claim 25, wherein said remote processing means and said master processing means comprise first combining means for combining said random number with said first secret number to produce an intermediate number and means for combining said intermediate number with said second secret number to produce said respective remote and master processed numbers.
Claim 31
Dependent Claim 32 words
The system as claimed in claim 26, wherein said first combining means in said selected remote and master units include means for exclusive OR-ing said random number with said first secret number.
Claim 32
Dependent Claim 36 words
The system as claimed in claim 26, wherein said second combining means in said selected remote and master units include encryption means for encrypting said intermediate number using said second secret number as an encrypting key.
Claim 33
Dependent Claim 14 words
The system as claimed in claim 28, wherein said encryption means uses DES encryption.
Claim 34
Dependent Claim 28 words
The system as claimed in claim 25, wherein said contact means comprises transmission means for transmitting an identification number from said selected remote unit to the master unit.
Claim 35
Dependent Claim 16 words
The system as claimed in claim 25, wherein said selected remote unit comprises a cellular telephone.

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 1999-05-14 1999-11-13 2000-05-14 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2003-05-14 2003-11-13 2004-05-14 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2007-05-14 2007-11-13 2008-05-14 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag