US5535276A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Yaksha, an improved system and method for securing communications using split private key asymmetric cryptography
Assignee: Verizon Patent and Licensing Inc
•
Filing: 1994-11-09
•
Granted: 1996-07-09
•
Expires: 2014-11-09
Abstract
Abstract In a system, such as a system utilizing a Kerberos protocol, system users each have an associated asymmetric crypto-key. The security of communications over the system is enhanced by a first user generating a temporary asymmetric crypto-key having a first temporary key portion and an associated second temporary key portion. The second temporary key portion is encrypted by the first user with the first private key portion of the first user crypto-key to form a first encrypted message. Another user, preferably an authentication server, applies the second private key portion and the public key portion of the first user crypto-key to the first encrypted message to decrypt the second temporary key portion and thereby authenticate the first user to the security server. The authentication server then encrypts the first encrypted message with the second private key portion of the first user crypto-key to form a second encrypted message. The first user next applies the public key portion of the first user crypto-key to decrypt the second encrypted message and obtain the second temporary key portion, thereby authenticating the security server to the first user.
Inventors
- 👤 Ravi Ganesan
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 19:57
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L9/321; H04L9/3213; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0825; H04L9/083
Claims Analysis
Total Claims: 46
Claim 1
Independent Claim
236 words
A method for securing communications over a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion, said method for securing communications between at least a first and second of said plurality of users comprising the steps of: generating, for the first user, a temporary asymmetric crypto-key having a first temporary key portion and an associated second temporary key portion; encrypting said second temporary key portion with the first private key portion of a first user crypto-key associated with the first user to form a first encrypted message; obtaining, for a third user, the second temporary key portion by applying the second private key portion of the first user crypto-key to the first encrypted message, thereby authenticating the first user to a third user; further encrypting the first encrypted message with the second private key portion of the first user crypto-key to form a second encrypted message; and obtaining, for the first user, the second temporary key portion by applying the public key portion of the first user crypto-key to decrypt the second encrypted message and thereby authenticating the third user to the first user.
Claim 2
Independent Claim
236 words
A method for securing communications over a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion, said method for securing communications between at least a first and second of said plurality of users comprising the steps of: generating, for the first user, a temporary asymmetric crypto-key having a first temporary key portion and an associated second temporary key portion; encrypting said second temporary key portion with the first private key portion of a first user crypto-key associated with the first user to form a first encrypted message; obtaining, for a third user, the second temporary key portion by applying the second private key portion of the first user crypto-key to the first encrypted message, thereby authenticating the first user to a third user; further encrypting the first encrypted message with the second private key portion of the first user crypto-key to form a second encrypted message; and obtaining, for the first user, the second temporary key portion by applying the public key portion of the first user crypto-key to decrypt the second encrypted message and thereby authenticating the third user to the first user.
Claim 3
Dependent Claim
165 words
A method for securing communications according to claim 1, further comprising the steps of: encrypting a first message from the third user to the second user and a first symmetric session crypto-key with the second private key portion of a second user crypto-key associated with the second user to form a third encrypted message; encrypting the first symmetric session crypto-key with the second temporary key portion to form a forth encrypted message, obtaining, for the first user, the first symmetric session crypto-key by applying the first temporary key portion to the decrypt the fourth encrypted message; encrypting the third encrypted message with the first temporary key portion to form a fifth encrypted message; and obtaining, for the second user, the first message and the first symmetric session crypto-key by applying the second temporary key portion and the first private key portion of the second user crypto-key to decrypt the fifth encrypted message, thereby authenticating the first user and the third user to the second user.
Claim 4
Dependent Claim
52 words
A method for securing communications according to claim 1, further comprising the step of obtaining, for the second user, the second temporary key portion by applying the public key portion of the first user crypto-key to decrypt the second encrypted message, thereby authenticating the first and third users to the second user.
Claim 5
Dependent Claim
36 words
A method for securing communications according to claim 2, wherein said third user is an authentication server and said second user is a ticket granting server which grants a ticket for service from a fourth user.
Claim 6
Dependent Claim
57 words
A method for securing communications according to claim 4, further comprising the step of encrypting a second message from the first user to the second user with the first symmetric session key to form a sixth encrypted message, wherein said first message is an instruction to grant said ticket and said second message is a time stamp.
Claim 7
Dependent Claim
218 words
A method for securing communications according to claim 4, further comprising the steps of: encrypting a third message to the fourth user and a second symmetric session key with the second private key portion of a fourth user crypto-key associated with the fourth user to form a seventh encrypted message; encrypting the third encrypted message with the first private key portion of the second user crypto-key to form an eight encrypted message; encrypting the second symmetric session key with the first symmetric session key to form a ninth encrypted message; obtaining, for the first user, the first message and the first symmetric session key by applying the public key portion of the second user crypto-key to the eight encrypted messages, thereby authenticating the second user to the first user; obtaining, for the first user, the second symmetric session key by applying the first symmetric session key to the ninth encrypted message; encrypting the seventh encrypted message with the first temporary key portion to form a tenth encrypted message; and obtaining, for the fourth user, the third message and the second symmetric session crypto-key by applying the second temporary key portion and the first private key portion of the fourth user crypto-key to the tenth encrypted message and thereby authenticating the first and second users to the fourth user.
Claim 8
Dependent Claim
77 words
A method for securing communications according to claim 6, further comprising the steps of: encrypting the seventh encrypted message with the first private key portion of the fourth user crypto-key to form a twelfth encrypted message; and obtaining, for the first user, the third message and the second symmetric session key by applying the public key portion of the fourth user crypro-key to the twelfth encrypted message and thereby authenticating the fourth user to the first user.
Claim 9
Dependent Claim
58 words
A method for securing communications according to claim 6, further comprising the step of obtaining the second temporary key portion by applying the public key portion of the first user crypto-key to decrypt the second encrypted message, thereby authenticating the first and third users to the second user and the first and third users to the fourth user.
Claim 10
Dependent Claim
69 words
A method for securing communications according to claim 6, further comprising the step of encrypting a fourth message from the first user to the fourth user with the second symmetric session key to form a eleventh encrypted message, wherein said third message to the fourth user is a ticket instructing the fourth user to provide a service and said fourth message to the fourth user is a time stamp.
Claim 11
Dependent Claim
62 words
A method for securing communications according to claim 6, wherein: the first encrypted message includes a first random number string concatenated with the second temporary key portion; the fourth encrypted message includes a second random number string concatenated with the first symmetric session crypto-key; and the ninth encrypted message includes a third random number string concatenated with the second symmetric session crypto-key.
Claim 12
Dependent Claim
18 words
A method for securing communications according to claim 1, wherein said asymmetrical crypto-keys are applied using modular exponentiation.
Claim 13
Dependent Claim
18 words
A method for securing communications according to claim 1, wherein said temporary crypto-key has an associated expiration time.
Claim 14
Dependent Claim
182 words
A method for securing communications according to claim 1, further comprising the steps of: encrypting a hash message with the first private key portion of the first user crypto-key to form a third encrypted message, thereby placing a signature of the first user on the hash message; encrypting said third encrypted message with said first temporary key portion and with the first private key portion of the first user crypto-key to form a fourth encrypted message; obtaining, for the third user, the third encrypted message by applying said second temporary key portion and the second private key portion of the first user crypto-key to the fourth encrypted message; encrypting said third encrypted message with the second private key portion of the first user crypto-key to form a fifth encrypted message, thereby placing a signature of the third user on the hash message; and obtaining, for the second user, the hash message by applying the public key portion of the first user crypto-key to the fifth encrypted message, thereby verifying the joint signatures of the first and third users on the hash message.
Claim 15
Dependent Claim
25 words
A method for securing communications according to claim 13, further comprising the step of encrypting said fifth encrypted message with said second temporary key portion.
Claim 16
Independent Claim
315 words
A method for jointly signing communications over a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion, said method for a first and second of said plurality of users jointly signing communications comprising the steps of: generating, for the first user, a temporary asymmetric crypto-key having a first temporary key portion and an associated second temporary key portion; encrypting said second temporary key portion with the first private key portion of a first user crypto-key associated with the first user to form a first encrypted message; encrypting a hash message with the first private key portion of the first user crypto-key to form a second encrypted message, thereby placing a signature of the first user on the hash message; encrypting said second encrypted message with said first temporary key portion to form a third encrypted message; obtaining, for the second user, the second temporary key portion by applying the second private key portion of the first user crypto-key to the first encrypted message, thereby authenticating the first user to the second user; obtaining, for the second user, the second encrypted message by applying said second temporary key portion to the third encrypted message; encrypting said second encrypted message with the second private key portion of the first user crypto-key to form a fourth encrypted message, thereby placing a signature of the second user on the hash message; and obtaining the hash message by applying the public key portion of the first user crypto-key to the fourth encrypted message, thereby verifying the joint signatures of the first and second users on the hash message.
Claim 17
Independent Claim
315 words
A method for jointly signing communications over a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion, said method for a first and second of said plurality of users jointly signing communications comprising the steps of: generating, for the first user, a temporary asymmetric crypto-key having a first temporary key portion and an associated second temporary key portion; encrypting said second temporary key portion with the first private key portion of a first user crypto-key associated with the first user to form a first encrypted message; encrypting a hash message with the first private key portion of the first user crypto-key to form a second encrypted message, thereby placing a signature of the first user on the hash message; encrypting said second encrypted message with said first temporary key portion to form a third encrypted message; obtaining, for the second user, the second temporary key portion by applying the second private key portion of the first user crypto-key to the first encrypted message, thereby authenticating the first user to the second user; obtaining, for the second user, the second encrypted message by applying said second temporary key portion to the third encrypted message; encrypting said second encrypted message with the second private key portion of the first user crypto-key to form a fourth encrypted message, thereby placing a signature of the second user on the hash message; and obtaining the hash message by applying the public key portion of the first user crypto-key to the fourth encrypted message, thereby verifying the joint signatures of the first and second users on the hash message.
Claim 18
Dependent Claim
145 words
A method for jointly signing communications according to claim 15, further comprising the steps of: encrypting said fourth encrypted message with said second temporary key portion to form a fifth encrypted message; encrypting said first encrypted message with the second private key portion of the first user crypto-key to form a sixth encrypted message; obtaining, for a third user, said second temporary key portion by applying the public key portion of the first user crypto-key to the sixth encrypted message; and obtaining, for the third user said hash message by applying the second temporary public key and the public key portion of the first user crypto-key to the fifth encrypted message; wherein the third encrypted message includes a first random number string concatenated with the second encrypted message, and the fifth encrypted message includes a second random number string concatenated with the fourth encrypted message.
Claim 19
Dependent Claim
19 words
A method for jointly signing communications according to claim 15, wherein said asymmetrical crypto-keys are applied using modular exponentiation.
Claim 20
Dependent Claim
21 words
A method for securing communications over a system according to claim 15, wherein said temporary crypto-key has an associated expiration time.
Claim 21
Dependent Claim
271 words
A secure communications system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion, said system comprising: a database having each said second private key portion stored therein; a first processor connected to a communications network for (i) generating a temporary asymmetric crypto-key having a first temporary key portion and an associated second temporary key portion, (ii) encrypting said second temporary key portion with the first private key portion of a first user crypto-key associated with a first user to form a first encrypted message, and (iii) transmitting said first encrypted message over the communications network; and a second processor connected to the database and to the communications network for (i) retrieving the second private key portion of the first user crypto-key from the database (ii) obtaining the second temporary key portion by applying the second private key portion of the first user crypto-key to the first encrypted message, thereby authenticating the first user, (iii) encrypting the first encrypted message with the second private key portion of the first user crypto-key to form a second encrypted message, and (iv) transmitting the second encrypted message over the communications network; wherein the first processor obtains the second temporary key portion by applying the public key portion of the first user crypto-key to decrypt the second encrypted message and thereby authenticates a second user.
Claim 22
Dependent Claim
271 words
A secure communications system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion, said system comprising: a database having each said second private key portion stored therein; a first processor connected to a communications network for (i) generating a temporary asymmetric crypto-key having a first temporary key portion and an associated second temporary key portion, (ii) encrypting said second temporary key portion with the first private key portion of a first user crypto-key associated with a first user to form a first encrypted message, and (iii) transmitting said first encrypted message over the communications network; and a second processor connected to the database and to the communications network for (i) retrieving the second private key portion of the first user crypto-key from the database (ii) obtaining the second temporary key portion by applying the second private key portion of the first user crypto-key to the first encrypted message, thereby authenticating the first user, (iii) encrypting the first encrypted message with the second private key portion of the first user crypto-key to form a second encrypted message, and (iv) transmitting the second encrypted message over the communications network; wherein the first processor obtains the second temporary key portion by applying the public key portion of the first user crypto-key to decrypt the second encrypted message and thereby authenticates a second user.
Claim 23
Dependent Claim
158 words
A secure communications system according to claim 19, wherein: said second processor (i) retrieves the second private key portion of a third user crypto-key associated with a third user from the database, (ii) generates a first symmetric session crypto-key, (iii) encrypts a first message to the third user and the first symmetric session crypto-key with the second private key portion of the third user crypto-key to form a third encrypted message, (iv) encrypts the first symmetric session crypto-key with the second temporary key portion to form a forth encrypted message; and (v) transmits the third and fourth encrypted messages over the communications network; and said first processor (i) obtains the first symmetric session crypto-key by applying the first temporary key portion to the decrypt the fourth encrypted message, and (ii) encrypts the third encrypted message with the first temporary key portion to form a fifth encrypted message, and (iii) transmits the fifth encrypted message over the communications network.
Claim 24
Dependent Claim
62 words
A secure communications system according to claim 20, further comprising: a third processor connected to said communications network for obtaining the first message and the first symmetric session crypto-key by applying the second temporary key portion and the first private key portion of the second user crypto-key to decrypt the fifth encrypted message, thereby authenticating the first user and the second user.
Claim 25
Dependent Claim
153 words
A secure communications system according to claim 19, wherein: said first processor (i) encrypts a hash message with the first private key portion of the first user crypto-key to form a third encrypted message, thereby placing a signature of the first user on the hash message, (ii) encrypts said third encrypted message with said first temporary key portion and with the first private key portion of the first user crypto-key to form a fourth encrypted message, and (iii) transmits said fourth encrypted messages over the network; said second processor (i) obtains the third encrypted message by applying said second temporary key portion and the second private key portion of the first user crypro-key to the fourth encrypted message, (ii) encrypts said third encrypted message with the second private key portion of the first user crypto-key to form a sixth encrypted message, thereby placing a signature of the second user on the hash message.
Claim 26
Dependent Claim
45 words
A secure communications system according to claim 22, further comprising a third processor for obtaining the hash message by applying the public key portion of the first user crypto-key to the sixth encrypted message, thereby verifying the joint signatures of the first and second users.
Claim 27
Independent Claim
205 words
A method for authenticating users of a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for authenticating users comprising the steps of: a first user encrypting a first message with the first private key portion of a first user crypto-key associated with the first user to form a first encrypted message; the third party obtaining the first message by applying the second private key portion of the first user crypto-key to the first encrypted message, thereby authenticating the first user to the third party; the third party encrypting the first encrypted message with the second private key portion of the first user crypto-key to form a second encrypted message; and the first user, obtaining the first message by applying the public key portion of the first user crypto-key to decrypt the second encrypted message and thereby authenticating the third party to the first user.
Claim 28
Independent Claim
205 words
A method for authenticating users of a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for authenticating users comprising the steps of: a first user encrypting a first message with the first private key portion of a first user crypto-key associated with the first user to form a first encrypted message; the third party obtaining the first message by applying the second private key portion of the first user crypto-key to the first encrypted message, thereby authenticating the first user to the third party; the third party encrypting the first encrypted message with the second private key portion of the first user crypto-key to form a second encrypted message; and the first user, obtaining the first message by applying the public key portion of the first user crypto-key to decrypt the second encrypted message and thereby authenticating the third party to the first user.
Claim 29
Dependent Claim
20 words
A method for authenticating user of a system according to claim 24, wherein said third party is an authentication server.
Claim 30
Independent Claim
172 words
A method for authenticating users of a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for authenticating users comprising the steps of: a first user encrypting a first message with the first private key portion of a first user crypto-key associated with the first user to form a first encrypted message; the third party encrypting the first encrypted message with the second private key portion of the first user crypto-key to form a second encrypted message; and a second user obtaining the first message by applying the public key portion of the first user crypto-key to decrypt the second encrypted message and thereby authenticating the first user to the second user.
Claim 31
Independent Claim
172 words
A method for authenticating users of a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for authenticating users comprising the steps of: a first user encrypting a first message with the first private key portion of a first user crypto-key associated with the first user to form a first encrypted message; the third party encrypting the first encrypted message with the second private key portion of the first user crypto-key to form a second encrypted message; and a second user obtaining the first message by applying the public key portion of the first user crypto-key to decrypt the second encrypted message and thereby authenticating the first user to the second user.
Claim 32
Dependent Claim
39 words
A method for authenticating user of a system according to claim 26, wherein said step of said second user obtaining said first message verifies that the first message is signed by both the first user and the third party.
Claim 33
Dependent Claim
20 words
A method for authenticating user of a system according to claim 26, wherein said third party is an authentication server.
Claim 34
Independent Claim
171 words
A method for authenticating users of a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for authenticating users comprising the steps of: the third party encrypting a first message with the second private key portion of a first user crypto-key associated with the first user to form a first encrypted message; a first user encrypting the first encrypted message with the first private key portion of the first user crypto-key to form a second encrypted message; a second user, obtaining the first message by applying the public key portion of the first user crypto-key to decrypt the second encrypted message and thereby authenticating the first user to the second user.
Claim 35
Independent Claim
171 words
A method for authenticating users of a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for authenticating users comprising the steps of: the third party encrypting a first message with the second private key portion of a first user crypto-key associated with the first user to form a first encrypted message; a first user encrypting the first encrypted message with the first private key portion of the first user crypto-key to form a second encrypted message; a second user, obtaining the first message by applying the public key portion of the first user crypto-key to decrypt the second encrypted message and thereby authenticating the first user to the second user.
Claim 36
Dependent Claim
39 words
A method for authenticating user of a system according to claim 29, wherein said step of said second user obtaining said first message verifies that the first message is signed by both the first user and the third party.
Claim 37
Dependent Claim
20 words
A method for authenticating user of a system according to claim 29, wherein said third party is an authentication server.
Claim 38
Independent Claim
237 words
A method for securing communications over a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for securing communications between at least a first and second of said plurality of users comprising the steps of: generating a temporary asymmetric crypto-key having a first temporary key portion and an associated second temporary key portion; the first user encrypting said second temporary key portion with the first private key portion of a first user crypto-key associated with the first user to form a first encrypted message; the third party encrypting the first encrypted message with the second private key portion of the first user crypto-key to form a second encrypted message; the second user obtaining said second temporary key portion by applying the public key portion of the first user crypto-key; and encrypting a communication between the first user and the second user with one of either said first temporary key portion or said second temporary key portion and decrypting said encrypted communication with the other of either said first temporary key portion or said second temporary key portion.
Claim 39
Independent Claim
237 words
A method for securing communications over a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for securing communications between at least a first and second of said plurality of users comprising the steps of: generating a temporary asymmetric crypto-key having a first temporary key portion and an associated second temporary key portion; the first user encrypting said second temporary key portion with the first private key portion of a first user crypto-key associated with the first user to form a first encrypted message; the third party encrypting the first encrypted message with the second private key portion of the first user crypto-key to form a second encrypted message; the second user obtaining said second temporary key portion by applying the public key portion of the first user crypto-key; and encrypting a communication between the first user and the second user with one of either said first temporary key portion or said second temporary key portion and decrypting said encrypted communication with the other of either said first temporary key portion or said second temporary key portion.
Claim 40
Dependent Claim
20 words
A method for authenticating user of a system according to claim 32, wherein said third party is an authentication server.
Claim 41
Independent Claim
252 words
A method for securing communications over a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for securing communications between at least a first and second of said plurality of users comprising the steps of: generating a temporary asymmetric crypto-key having a first temporary key portion and an associated second temporary key portion; the third party encrypting a symmetric session crypto-key with the second private key portion of a first user crypto-key associated with a first user to form a first encrypted message; the third party encrypting the symmetric session crypto-key with the second temporary key portion to form a second encrypted message, obtaining, for a second user, the symmetric session crypto-key by applying the first temporary key portion to decrypt the second encrypted message; encrypting the first encrypted message with the first temporary key portion to form a third encrypted message; obtaining, for the first user, the symmetric session crypto-key by applying the second temporary key portion and the first private key portion of the first user crypto-key to decrypt the third encrypted message; and encrypting a communication between the first user and the second user with said symmetric session crypto-key.
Claim 42
Independent Claim
252 words
A method for securing communications over a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for securing communications between at least a first and second of said plurality of users comprising the steps of: generating a temporary asymmetric crypto-key having a first temporary key portion and an associated second temporary key portion; the third party encrypting a symmetric session crypto-key with the second private key portion of a first user crypto-key associated with a first user to form a first encrypted message; the third party encrypting the symmetric session crypto-key with the second temporary key portion to form a second encrypted message, obtaining, for a second user, the symmetric session crypto-key by applying the first temporary key portion to decrypt the second encrypted message; encrypting the first encrypted message with the first temporary key portion to form a third encrypted message; obtaining, for the first user, the symmetric session crypto-key by applying the second temporary key portion and the first private key portion of the first user crypto-key to decrypt the third encrypted message; and encrypting a communication between the first user and the second user with said symmetric session crypto-key.
Claim 43
Dependent Claim
31 words
A method for securing communications according to claim 34, further comprising the symmetric session crypto-key being disclosed, by the third party, to a third user for eavesdropping on said encrypted communication.
Claim 44
Independent Claim
258 words
A method for securing communications over a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for securing communications between at least a first and second of said plurality of users comprising the steps of: generating a temporary asymmetric crypto-key having a first temporary key portion and, an associated second temporary key portion; the third party encrypting a first symmetric session key with the second private key portion of a first user crypto-key associated with a first user to form a first encrypted message; the third party encrypting the first symmetric session key with a second symmetric session key to form a second encrypted message; obtaining, for a second user, the first symmetric session key by applying the second symmetric session key to the second encrypted message; the second user encrypting the first encrypted message with the first temporary key portion to form a third encrypted message; obtaining, for the first user, the second symmetric session crypro-key by applying the second temporary key portion and the first private key portion of the first user crypto-key to the third encrypted message; and encrypting a communication between the first user and the second user with said second symmetric session crypto-key.
Claim 45
Independent Claim
258 words
A method for securing communications over a system having a plurality of system users, each said user having an associated asymmetric crypto-key with a public key portion and a corresponding private key portion, each public key portion being accessible to the plurality of system users, each private key portion having a first private key portion known only to the associated user and a corresponding second private key portion known only to a third party, said method for securing communications between at least a first and second of said plurality of users comprising the steps of: generating a temporary asymmetric crypto-key having a first temporary key portion and, an associated second temporary key portion; the third party encrypting a first symmetric session key with the second private key portion of a first user crypto-key associated with a first user to form a first encrypted message; the third party encrypting the first symmetric session key with a second symmetric session key to form a second encrypted message; obtaining, for a second user, the first symmetric session key by applying the second symmetric session key to the second encrypted message; the second user encrypting the first encrypted message with the first temporary key portion to form a third encrypted message; obtaining, for the first user, the second symmetric session crypro-key by applying the second temporary key portion and the first private key portion of the first user crypto-key to the third encrypted message; and encrypting a communication between the first user and the second user with said second symmetric session crypto-key.
Claim 46
Dependent Claim
32 words
A method for securing communications according to claim 36, further comprising the second symmetric session crypto-key being disclosed, by the third party, to a third user for eavesdropping on said encrypted communication.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-07-09 | 2000-01-08 | 2000-07-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-07-09 | 2004-01-08 | 2004-07-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-07-09 | 2008-01-08 | 2008-07-09 | $7700.00 | Window Closed / Lapsed |