Patent US5588059A successfully refreshed from Google Patents.
US5588059A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Computer system and method for secure remote communication sessions
Assignee: General Dynamics Mission Systems Inc
•
Filing: 1995-03-02
•
Granted: 1996-12-24
•
Expires: 2015-03-02
Abstract
Abstract A computer system includes a Key Certification Agency (KCA) (12), a host computer (16), and a number of remote terminals (14). The KCA (12) uses incompatible encryption processes (96, 98) to encrypt session control data and to store the data as various messages (44, 46, 48) in a user token (26). The token (26) may be removably installed in any remote terminal (14). To set up a communication session, the token uncovers one of the messages (48) using a crypto-uncovering agent which is known to the user. This message includes a remote traffic key after deciphering, but the key is never transmitted to the host. The host (16) deciphers the other messages (44, 46) and constructs a host traffic key in response to data contained therein. No plain text is transmitted during the setup or the session.
Inventors
- 👤 Ronald V. Chandos
- 👤 Robert I. Foster
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 17:04
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0442; H04L63/08; H04L63/0823; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/083; H04L9/0838; H04L9/0841; H04L9/0844; H04L9/40
Claims Analysis
Total Claims: 21
Claim 1
Independent Claim
134 words
A method for operating a calling node to provide security for a communication session between said calling node and a called node, said method comprising the steps of: a) storing encrypted user identifying data at said calling node; a1) storing an encrypted portion of a called node traffic key at said calling node; b) storing an encrypted calling node traffic key at said calling node; c) sending said encrypted user identifying data from said calling node to said called node; c1) sending said encrypted portion of said called node traffic key from said calling node to said called node; d) obtaining a crypto-uncovering agent from a user of said calling node; and e) deciphering said encrypted calling node traffic key in response to said crypto-uncovering agent to obtain a deciphered calling node traffic key.
Claim 2
Independent Claim
134 words
A method for operating a calling node to provide security for a communication session between said calling node and a called node, said method comprising the steps of: a) storing encrypted user identifying data at said calling node; a1) storing an encrypted portion of a called node traffic key at said calling node; b) storing an encrypted calling node traffic key at said calling node; c) sending said encrypted user identifying data from said calling node to said called node; c1) sending said encrypted portion of said called node traffic key from said calling node to said called node; d) obtaining a crypto-uncovering agent from a user of said calling node; and e) deciphering said encrypted calling node traffic key in response to said crypto-uncovering agent to obtain a deciphered calling node traffic key.
Claim 3
Dependent Claim
59 words
A method as claimed in claim 1 wherein: said step e) additionally comprises the step of deciphering a phone number in response to said crypto-uncovering agent to obtain a deciphered phone number; and said method additionally comprises, prior to said step of sending, the step of dialing said deciphered phone number to establish a connection to said called node.
Claim 4
Dependent Claim
58 words
A method as claimed in claim 1 wherein: said step b) additionally comprises the step of storing an encrypted tamper detection checksum with said encrypted calling node traffic key; said step e) additionally comprises the step of deciphering said encrypted tamper detection checksum; and said method additionally comprises the step of verifying said checksum after said step e).
Claim 5
Independent Claim
143 words
A method for operating a calling node to provide security for a communication session between said calling node and a called node, said method comprising the steps of: a) storing encrypted user identifying data at said calling node; a1) storing an encrypted portion of a called node traffic key; b) storing an encrypted calling node traffic key at said calling node; c) sending said encrypted user identifying data from said calling node to said called node; c1) sending said encrypted portion of said called node traffic key to said called node; d) obtaining a crypto-uncovering agent from a user of said calling node; e) deciphering said encrypted calling node traffic key in response to said crypto-uncovering agent to obtain a deciphered calling node traffic key; and f) decrypting data received at said calling node from said called node using said deciphered traffic key.
Claim 6
Independent Claim
143 words
A method for operating a calling node to provide security for a communication session between said calling node and a called node, said method comprising the steps of: a) storing encrypted user identifying data at said calling node; a1) storing an encrypted portion of a called node traffic key; b) storing an encrypted calling node traffic key at said calling node; c) sending said encrypted user identifying data from said calling node to said called node; c1) sending said encrypted portion of said called node traffic key to said called node; d) obtaining a crypto-uncovering agent from a user of said calling node; e) deciphering said encrypted calling node traffic key in response to said crypto-uncovering agent to obtain a deciphered calling node traffic key; and f) decrypting data received at said calling node from said called node using said deciphered traffic key.
Claim 7
Independent Claim
130 words
A method for operating a calling node to provide security for a communication session between said calling node and a called node, said method comprising the steps of: a) storing encrypted user identifying data at said calling node; b) storing an encrypted traffic key at said calling node; c) sending said encrypted user identifying data from said calling node to said called node; d) obtaining a crypto-uncovering agent from a user of said calling node; e) deciphering said encrypted traffic key in response to said crypto-uncovering agent to obtain a deciphered traffic key; f) encrypting said user identifying data in accordance with a first cryptography process; and g) encrypting said traffic key in accordance with a second cryptography process, wherein said first and second processes are incompatible with one another.
Claim 8
Independent Claim
130 words
A method for operating a calling node to provide security for a communication session between said calling node and a called node, said method comprising the steps of: a) storing encrypted user identifying data at said calling node; b) storing an encrypted traffic key at said calling node; c) sending said encrypted user identifying data from said calling node to said called node; d) obtaining a crypto-uncovering agent from a user of said calling node; e) deciphering said encrypted traffic key in response to said crypto-uncovering agent to obtain a deciphered traffic key; f) encrypting said user identifying data in accordance with a first cryptography process; and g) encrypting said traffic key in accordance with a second cryptography process, wherein said first and second processes are incompatible with one another.
Claim 9
Independent Claim
141 words
A method for operating a calling node to provide security for a communication session between said calling node and a called node, said method comprising the steps of: a) storing encrypted user identifying data at said calling node; a1) including said user identifying data in a first message; a2) storing an encrypted second message at said calling node; b) storing an encrypted traffic key at said calling node; c) sending said encrypted user identifying data from said calling node to said called node; d) obtaining a crypto-uncovering agent from a user of said calling node; e) deciphering said encrypted traffic key in response to said crypto-uncovering agent to obtain a deciphered traffic key; f) encrypting said encrypted second message in response to said deciphered traffic key to produce a twice-encrypted message; and g) sending said twice-encrypted message to said called node.
Claim 10
Independent Claim
141 words
A method for operating a calling node to provide security for a communication session between said calling node and a called node, said method comprising the steps of: a) storing encrypted user identifying data at said calling node; a1) including said user identifying data in a first message; a2) storing an encrypted second message at said calling node; b) storing an encrypted traffic key at said calling node; c) sending said encrypted user identifying data from said calling node to said called node; d) obtaining a crypto-uncovering agent from a user of said calling node; e) deciphering said encrypted traffic key in response to said crypto-uncovering agent to obtain a deciphered traffic key; f) encrypting said encrypted second message in response to said deciphered traffic key to produce a twice-encrypted message; and g) sending said twice-encrypted message to said called node.
Claim 11
Dependent Claim
147 words
A remote terminal for providing security for a communication session between said remote terminal and a host computer, said remote terminal comprising: a first memory region containing encrypted user identifying data and an encrypted portion of a host traffic key; a second memory region containing an encrypted remote terminal traffic key; a modem for sending said encrypted user identifying data from said remote terminal to said host computer; a user input device for obtaining a crypto-uncovering agent from a user of said remote terminal; a controller coupled to said user input device, said first and second memory regions, and said modem for deciphering said encrypted remote terminal traffic key in response to said crypto-uncovering agent to obtain a deciphered remote terminal traffic key and for sending said encrypted user identifying data and said encrypted portion of said host traffic key to said host computer through said modem.
Claim 12
Dependent Claim
147 words
A remote terminal for providing security for a communication session between said remote terminal and a host computer, said remote terminal comprising: a first memory region containing encrypted user identifying data and an encrypted portion of a host traffic key; a second memory region containing an encrypted remote terminal traffic key; a modem for sending said encrypted user identifying data from said remote terminal to said host computer; a user input device for obtaining a crypto-uncovering agent from a user of said remote terminal; a controller coupled to said user input device, said first and second memory regions, and said modem for deciphering said encrypted remote terminal traffic key in response to said crypto-uncovering agent to obtain a deciphered remote terminal traffic key and for sending said encrypted user identifying data and said encrypted portion of said host traffic key to said host computer through said modem.
Claim 13
Dependent Claim
38 words
A remote terminal as claimed in claim 7 additionally comprising a link decryptor coupled to said controller for decrypting data received at said remote terminal from said host computer in response to said deciphered remote terminal traffic key.
Claim 14
Dependent Claim
65 words
A remote terminal as claimed in claim 7 wherein: said second memory region additionally contains an encrypted phone number and said controller is additionally used for deciphering said phone number in response to said crypto-uncovering agent to obtain a deciphered phone number; and said controller is cooperatively configured with said modem to dial said deciphered phone number to establish a connection to said host computer.
Claim 15
Dependent Claim
70 words
A remote terminal as claimed in claim 7 wherein: said user input device is included in a portable personal computer; and said first and second memory regions, said modem, and said controller are included in a token which is removably installable in said portable personal computer, said token being unable to retain said deciphered traffic key within said token when said token is not installed in said portable personal computer.
Claim 16
Dependent Claim
144 words
A remote terminal for providing security for a communication session between said remote terminal and a host computer, said remote terminal comprising: a first memory, region containing encrypted user identifying data, said user identifying data being encrypted in accordance with a first cryptography process; a second memory, region containing an encrypted traffic key, said traffic key being encrypted in accordance with a second cryptography process, said first and second processes being incompatible with one another; a modem for sending said encrypted user identifying data from said remote terminal to said host computer; a user input device for obtaining a crypto-uncovering agent from a user of said remote terminal; and a controller coupled to said user input device, said first and second memory regions, and said modem for deciphering said encrypted traffic key in response to said crypto-uncovering agent to obtain a deciphered traffic key.
Claim 17
Dependent Claim
144 words
A remote terminal for providing security for a communication session between said remote terminal and a host computer, said remote terminal comprising: a first memory, region containing encrypted user identifying data, said user identifying data being encrypted in accordance with a first cryptography process; a second memory, region containing an encrypted traffic key, said traffic key being encrypted in accordance with a second cryptography process, said first and second processes being incompatible with one another; a modem for sending said encrypted user identifying data from said remote terminal to said host computer; a user input device for obtaining a crypto-uncovering agent from a user of said remote terminal; and a controller coupled to said user input device, said first and second memory regions, and said modem for deciphering said encrypted traffic key in response to said crypto-uncovering agent to obtain a deciphered traffic key.
Claim 18
Independent Claim
148 words
A method of operating a computing system having a key certification agency, a host computer, and a remote terminal to provide security for communication sessions between said remote terminal and said host computer, said method comprising the steps of: a) at said key certification agency, encrypting user identifying data using a first encryption process, encrypting a remote traffic key using a second encryption process, and storing said encrypted user identifying data and said encrypted remote traffic key in a component of said remote terminal; b) at said remote terminal, obtaining a crypro-uncovering agent from a user of said remote terminal, deciphering said remote traffic key in response to said crypto-uncovering agent, and sending said encrypted user identifying data to said host computer; and c) at said host computer, deciphering said encrypted user identifying data, and obtaining a host traffic key in response to said deciphered user identifying data.
Claim 19
Independent Claim
148 words
A method of operating a computing system having a key certification agency, a host computer, and a remote terminal to provide security for communication sessions between said remote terminal and said host computer, said method comprising the steps of: a) at said key certification agency, encrypting user identifying data using a first encryption process, encrypting a remote traffic key using a second encryption process, and storing said encrypted user identifying data and said encrypted remote traffic key in a component of said remote terminal; b) at said remote terminal, obtaining a crypro-uncovering agent from a user of said remote terminal, deciphering said remote traffic key in response to said crypto-uncovering agent, and sending said encrypted user identifying data to said host computer; and c) at said host computer, deciphering said encrypted user identifying data, and obtaining a host traffic key in response to said deciphered user identifying data.
Claim 20
Dependent Claim
108 words
A method as claimed in claim 12 wherein: said step a) additionally comprises the steps of encrypting a portion of said host traffic key using said first encryption process and storing said encrypted portion of said host traffic key in said component of said remote terminal; said step b) additionally comprises the step of sending said encrypted portion of said host traffic key to said host computer; and said step c) additionally comprises the steps of deciphering said encrypted portion of said host traffic key and obtaining said host traffic key in response to said deciphered user identifying data and said deciphered portion of said host traffic key.
Claim 21
Dependent Claim
58 words
A method as claimed in claim 12 additionally comprising the steps of: at said host computer, encrypting and decrypting data communicated between said remote terminal and said host computer using said host traffic key; and at said remote terminal, encrypting and decrypting data communicated between said remote terminal and said host computer using said deciphered remote traffic key.
References Cited (Backward Citations)
US3931504A
Cited
US4262239A
Cited
US4238853A
Cited
US4310720A
Cited
US4317957A
Cited
US4430728A
Cited
US4531023A
Cited
US4707804A
Cited
US4679226A
Cited
US4733345A
Cited
US4882752A
Cited
US4916738A
Cited
US4888800A
Cited
US4962449A
Cited
US4926481A
Cited
US5144665A
Cited
US5251258A
Cited
US5179591A
Cited
US5341426A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-12-24 | 2000-06-24 | 2000-12-24 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-12-24 | 2004-06-24 | 2004-12-24 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-12-24 | 2008-06-24 | 2008-12-24 | $7700.00 | Window Closed / Lapsed |