Patent US5588061A successfully refreshed from Google Patents.
US5588061A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for identity verification, forming joint signatures and session key agreement in an RSA public cryptosystem
Assignee: Verizon Patent and Licensing Inc
•
Filing: 1994-07-20
•
Granted: 1996-12-24
•
Expires: 2014-07-20
Abstract
Abstract A method for improving an RSA cryptosystem by generating a user private exponent key, having an associated modulus N, and a user public exponent key for each user of the system. Each user's public exponent key is provided to all users of the system. Each user's private exponent key is divided into a two user key portions. A first user key portion is maintained exclusively by the user for whom the associated private exponent key was generated. A second user key portion is entrusted to one or more other users of the RSA system. The bit length of the first user key portion is no greater than fifteen percent of the bit length of the associated modulus N but not less than 56 bits. The two portions of the private exponent key may be used by two users to exchange two numbers, the product of which is used as a session key to secure communications between the two users. The portions of the private exponent key may also be used by different users to verify the identity of each to the other. Additionally, the portions of the private exponent key can be used to form joint signatures on documents.
Inventors
- 👤 Ravi Ganesan
- 👤 Yacov Yacobi
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 18:36
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/085; H04L9/30; H04L9/3006; H04L9/302; H04L9/32; H04L9/3247; H04L9/3249
Claims Analysis
Total Claims: 50
Claim 1
Independent Claim
109 words
A method for using an RSA cryptosystem comprising the steps of: generating a private exponent key, having an associated modulus N of a predetermined bit length, and a corresponding public exponent key; dividing said private exponent key into a first private key portion and a second private key portion, wherein said first private key portion has a bit length of no greater than fifteen percent of the bit length of the associated modulus N but not less than 56 bits; disclosing said first private key portion to a first user; and disclosing said second private key portion to a selected one or more other users of the RSA system.
Claim 2
Independent Claim
109 words
A method for using an RSA cryptosystem comprising the steps of: generating a private exponent key, having an associated modulus N of a predetermined bit length, and a corresponding public exponent key; dividing said private exponent key into a first private key portion and a second private key portion, wherein said first private key portion has a bit length of no greater than fifteen percent of the bit length of the associated modulus N but not less than 56 bits; disclosing said first private key portion to a first user; and disclosing said second private key portion to a selected one or more other users of the RSA system.
Claim 3
Dependent Claim
45 words
A method according to claim 1, wherein said private exponent key is comprised of a private exponent and the modulus N which is a product of two large prime numbers, and said public exponent key is comprised of a public exponent and the modulus N.
Claim 4
Dependent Claim
22 words
A method according to claim 1, wherein said bit length of said first private key portion is between 56 and 72 bits.
Claim 5
Dependent Claim
137 words
In an RSA cryptosystem in which a first user is associated with a private exponent key having an associated modulus N of a predetermined bit length, and a corresponding public exponent key, said private exponent key being divided into a first private key portion and a second private key portion, the first private key portion being available to the first user, and the second private key portion being available to a second user of the RSA system, a method for user identity verification comprising the steps of: transforming a message with said first private key portion; and recovering the message by applying thereto the second private key portion and public exponent key; wherein said first private key portion has a bit length no greater than fifteen percent of the modulus N but not less than 56 bits.
Claim 6
Dependent Claim
137 words
In an RSA cryptosystem in which a first user is associated with a private exponent key having an associated modulus N of a predetermined bit length, and a corresponding public exponent key, said private exponent key being divided into a first private key portion and a second private key portion, the first private key portion being available to the first user, and the second private key portion being available to a second user of the RSA system, a method for user identity verification comprising the steps of: transforming a message with said first private key portion; and recovering the message by applying thereto the second private key portion and public exponent key; wherein said first private key portion has a bit length no greater than fifteen percent of the modulus N but not less than 56 bits.
Claim 7
Dependent Claim
36 words
A method according to claim 4, further comprising the steps of: transforming a message with said second private key portion; and recovering the message by applying thereto the first private key portion and public exponent key.
Claim 8
Dependent Claim
22 words
A method according to claim 4, wherein said bit length of said first private key portion is between 56 and 72 bits.
Claim 9
Dependent Claim
141 words
In an RSA cryptosystem in which a first user is associated with a private exponent key, having an associated modulus N of a predetermined bit length, and a corresponding public exponent key, said private exponent key being divided into a first private key portion and a second private key portion, the first private key portion being available to the first user, and the second private key portion being available to a second user of the RSA system, a method for user identity verification comprising the steps of: transforming a message with said first private key portion and public exponent key; and recovering the message by applying thereto the second private key portion; wherein said first private key portion has a bit length no greater than fifteen percent of the bit length of the modulus N but not less than 56 bits.
Claim 10
Dependent Claim
141 words
In an RSA cryptosystem in which a first user is associated with a private exponent key, having an associated modulus N of a predetermined bit length, and a corresponding public exponent key, said private exponent key being divided into a first private key portion and a second private key portion, the first private key portion being available to the first user, and the second private key portion being available to a second user of the RSA system, a method for user identity verification comprising the steps of: transforming a message with said first private key portion and public exponent key; and recovering the message by applying thereto the second private key portion; wherein said first private key portion has a bit length no greater than fifteen percent of the bit length of the modulus N but not less than 56 bits.
Claim 11
Dependent Claim
36 words
A method according to claim 7, further comprising the steps of: transforming a message with said second private key portion and public exponent key; and recovering the message by applying thereto the first private key portion.
Claim 12
Dependent Claim
22 words
A method according to claim 7, wherein said bit length of said first private key portion is between 56 and 72 bits.
Claim 13
Dependent Claim
206 words
In an RSA cryptosystem in which a first user is associated with a private exponent key, having an associated modulus N of a predetermined bit length, and a corresponding public exponent key, said private exponent key being divided into a first private key portion and a second private key portion, the first private key portion being available to the first user, the second private key portion being available to a second user of the RSA system, and the user public exponent key being available to a third user of said RSA system, a method for forming joint signatures comprising the steps of: transforming a message with the first private key portion to form a signature of the first user on the message; further transforming said message by applying thereto said second private key portion to form a signature of the second user on said message, thereby resulting in a jointly signed message; and inverting said jointly signed message by applying thereto said public exponent key, thereby verifying that the message was signed by both private key portions; wherein the first private key portion has a bit length no greater than fifteen percent of the bit length of the modulus N but not less than 56 bits.
Claim 14
Dependent Claim
206 words
In an RSA cryptosystem in which a first user is associated with a private exponent key, having an associated modulus N of a predetermined bit length, and a corresponding public exponent key, said private exponent key being divided into a first private key portion and a second private key portion, the first private key portion being available to the first user, the second private key portion being available to a second user of the RSA system, and the user public exponent key being available to a third user of said RSA system, a method for forming joint signatures comprising the steps of: transforming a message with the first private key portion to form a signature of the first user on the message; further transforming said message by applying thereto said second private key portion to form a signature of the second user on said message, thereby resulting in a jointly signed message; and inverting said jointly signed message by applying thereto said public exponent key, thereby verifying that the message was signed by both private key portions; wherein the first private key portion has a bit length no greater than fifteen percent of the bit length of the modulus N but not less than 56 bits.
Claim 15
Dependent Claim
85 words
A method according to claim 10, further comprising the steps of: transforming a second message with the second private key portion to form a signature of the second user; further transforming said second message by applying thereto said first private key portion to form a signature of said first user on said message, thereby resulting in a jointly signed message; and inverting said jointly signed message by applying thereto said public exponent key, thereby verifying that the message was signed by both private key portions.
Claim 16
Dependent Claim
22 words
A method according to claim 10, wherein said bit length of said first private key portion is between 56 and 72 bits.
Claim 17
Dependent Claim
222 words
In an RSA cryptosystem in which a first user is associated with a private exponent key and a corresponding public exponent key, said private exponent key being divided into a first private key portion and a second private key portion, the first private key portion being available to the first user, the second private key portion being available to a second user of the RSA system, and the public exponent key being available to said first and second users, a method for forming a joint symmetric session encryption key comprising the steps of: transforming a first number with the first private key portion; recovering said first number by applying thereto said second private key portion and said public exponent key; transforming a second number with the second private key portion and the public exponent key; recovering said second number by applying thereto said first private key portion; multiplying the first number and the second number to form the joint symmetric session encryption key; and using said session encryption key to secure communications between said first user and said second user; wherein said private exponent key has an associated modulus N, and said first private key portion has a bit length of (i) no greater than fifteen percent of a bit length of the modulus N and (ii) not less than 56 bits.
Claim 18
Dependent Claim
222 words
In an RSA cryptosystem in which a first user is associated with a private exponent key and a corresponding public exponent key, said private exponent key being divided into a first private key portion and a second private key portion, the first private key portion being available to the first user, the second private key portion being available to a second user of the RSA system, and the public exponent key being available to said first and second users, a method for forming a joint symmetric session encryption key comprising the steps of: transforming a first number with the first private key portion; recovering said first number by applying thereto said second private key portion and said public exponent key; transforming a second number with the second private key portion and the public exponent key; recovering said second number by applying thereto said first private key portion; multiplying the first number and the second number to form the joint symmetric session encryption key; and using said session encryption key to secure communications between said first user and said second user; wherein said private exponent key has an associated modulus N, and said first private key portion has a bit length of (i) no greater than fifteen percent of a bit length of the modulus N and (ii) not less than 56 bits.
Claim 19
Dependent Claim
45 words
A method according to claim 13, wherein said private exponent key is comprised of a private exponent and the modulus N which is a product of two large prime numbers, and said public exponent key is comprised of a public exponent and the modulus N.
Claim 20
Dependent Claim
21 words
A method according to claim 13, wherein said first user key portion has a bit length between 56 and 72 bits.
Claim 21
Dependent Claim
125 words
An RSA cryptosystem comprising: means for generating a private exponent key, having an associated modulus N of a predetermined bit length, and a corresponding public exponent key for a user of said RSA system; means for dividing said private exponent key into a first private key portion and a second private key portion, wherein said first private key portion has a bit length of no greater than fifteen percent of the bit length of the modulus N but not less than 56 bits; means for storing said public exponent key and said second private key portion wherein access to said second private key portion is selectively allowed; and means for retrieving the second private key portion and the public exponent key from said storing means.
Claim 22
Dependent Claim
125 words
An RSA cryptosystem comprising: means for generating a private exponent key, having an associated modulus N of a predetermined bit length, and a corresponding public exponent key for a user of said RSA system; means for dividing said private exponent key into a first private key portion and a second private key portion, wherein said first private key portion has a bit length of no greater than fifteen percent of the bit length of the modulus N but not less than 56 bits; means for storing said public exponent key and said second private key portion wherein access to said second private key portion is selectively allowed; and means for retrieving the second private key portion and the public exponent key from said storing means.
Claim 23
Dependent Claim
45 words
A system according to claim 16, wherein said private exponent key is comprised of a private exponent and the modulus N which is a product of two large prime numbers, and said public exponent key is comprised of a public exponent and the modulus N.
Claim 24
Dependent Claim
21 words
A system according to claim 16, wherein said bit length of said first private key portion is 56 and 72 bits.
Claim 25
Dependent Claim
179 words
An RSA cryptosystem in which a user is associated with a private exponent key and a corresponding public exponent key, said private exponent key being divided into a first private key portion and a second private key portion, the first private key portion being available to a first user, comprising: means for storing said second private key portion and public exponent key; means for retrieving said second private key portion and public exponent key from said storing means, wherein retrieval of said second private key portion is selectively allowed; means for transforming a first message with said first private key portion; means for transforming a second message with said second private key portion and public exponent key; and means for recovering said first message by applying thereto the first private key portion; wherein said user private exponent key has an associated modulus N of a predetermined bit length and the first private key portion has a bit length of no greater than fifteen percent of the bit length of the associated modulus N but not less than 56 bits.
Claim 26
Dependent Claim
179 words
An RSA cryptosystem in which a user is associated with a private exponent key and a corresponding public exponent key, said private exponent key being divided into a first private key portion and a second private key portion, the first private key portion being available to a first user, comprising: means for storing said second private key portion and public exponent key; means for retrieving said second private key portion and public exponent key from said storing means, wherein retrieval of said second private key portion is selectively allowed; means for transforming a first message with said first private key portion; means for transforming a second message with said second private key portion and public exponent key; and means for recovering said first message by applying thereto the first private key portion; wherein said user private exponent key has an associated modulus N of a predetermined bit length and the first private key portion has a bit length of no greater than fifteen percent of the bit length of the associated modulus N but not less than 56 bits.
Claim 27
Dependent Claim
37 words
A system according to claim 19, further comprising: means for transmitting said first and second messages from said transforming means to said recovering means; and means for verifying that each of the messages has been properly recovered.
Claim 28
Dependent Claim
59 words
A system according to claim 20, further comprising: means for transforming a third message with said first private key portion; means for further transforming said third message by applying said second private key portion to said third message to form a jointly signed message; and means for recovering said jointly signed message by applying thereto said public exponent key.
Claim 29
Dependent Claim
40 words
A system according to claim 21, further comprising: means for transmitting said third message from said transforming means to said further transforming means; and means for transmitting said jointly signed message from said further transforming means to said recovering means.
Claim 30
Dependent Claim
119 words
A system according to claim 22, further comprising: means for generating a first number and transforming said first number with said first private key portion; means for generating a second number and transforming said second number with said second private key portion and the public exponent key; means for recovering said first number by applying thereto the second private key portion and the public exponent key; means for recovering said second number by applying thereto the first private key portion; means for multiplying the first number and the second number to form a symmetric session encryption key; and means for encrypting one or more messages transmitted between a first user and a second user using said session encryption key.
Claim 31
Dependent Claim
45 words
A system according to claim 19, wherein said private exponent key is comprised of a private exponent and a modulus N which is a product of two large prime numbers, and said public exponent key is comprised of a public exponent and the modulus N.
Claim 32
Dependent Claim
21 words
A system according to claim 19, wherein said first private key portion has a bit length between 56 to 72 bits.
Claim 33
Dependent Claim
25 words
A method according to claim 2, wherein said plurality of numbers used to compute the modulus N are not known to users of the system.
Claim 34
Dependent Claim
25 words
A method according to claim 14, wherein said plurality of numbers used to compute the modulus N are not known to users of the system.
Claim 35
Dependent Claim
25 words
A system according to claim 17, wherein said plurality of numbers used to compute the modulus N are not known to users of the system.
Claim 36
Dependent Claim
25 words
A system according to claim 24, wherein said plurality of numbers used to compute the modulus N are not known to users of the system.
Claim 37
Dependent Claim
26 words
A method according to claim 1, wherein the private exponent key has a bit length greater than the bit length of the first private key portion.
Claim 38
Dependent Claim
29 words
A method according to claim 30, wherein the private exponent key has a bit length of at least twenty-five percent of the bit length of the associated modulus N.
Claim 39
Dependent Claim
26 words
A method according to claim 4, wherein the private exponent key has a bit length greater than the bit length of the first private key portion.
Claim 40
Dependent Claim
29 words
A method according to claim 32, wherein the private exponent key has a bit length of at least twenty-five percent of the bit length of the associated modulus N.
Claim 41
Dependent Claim
26 words
A method according to claim 7, wherein the private exponent key has a bit length greater than the bit length of the first private key portion.
Claim 42
Dependent Claim
29 words
A method according to claim 34, wherein the private exponent key has a bit length of at least twenty-five percent of the bit length of the associated modulus N.
Claim 43
Dependent Claim
26 words
A method according to claim 10, wherein the private exponent key has a bit length greater than the bit length of the first private key portion.
Claim 44
Dependent Claim
29 words
A method according to claim 36, wherein the private exponent key has a bit length of at least twenty-five percent of the bit length of the associated modulus N.
Claim 45
Dependent Claim
26 words
A method according to claim 13, wherein the private exponent key has a bit length greater than the bit length of the first private key portion.
Claim 46
Dependent Claim
53 words
A method according to claim 13, wherein the private exponent key has a bit length of at least twenty-five percent of a bit length of an associated modulus N and the first private key portion has a bit length no greater than fifteen percent of the bit length of said associated modulus N.
Claim 47
Dependent Claim
26 words
A system according to claim 16, wherein the private exponent key has a bit length greater than the bit length of the first private key portion.
Claim 48
Dependent Claim
29 words
A system according to claim 40, wherein the private exponent key has a bit length of at least twenty-five percent of the bit length of the associated modulus N.
Claim 49
Dependent Claim
26 words
A system according to claim 19, wherein the private exponent key has a bit length greater than the bit length of the first private key portion.
Claim 50
Dependent Claim
29 words
A system according to claim 42, wherein the private exponent key has a bit length of at least twenty-five percent of the bit length of the associated modulus N.
References Cited (Backward Citations)
US4200770A
Cited
US4218582A
Cited
US4405829A
Cited
US4424414A
Cited
US4736423A
Cited
US4995082A
Cited
US5276737A
Cited
US5276737B1
Cited
US5299263A
Cited
US5375169A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-12-24 | 2000-06-24 | 2000-12-24 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-12-24 | 2004-06-24 | 2004-12-24 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-12-24 | 2008-06-24 | 2008-12-24 | $7700.00 | Window Closed / Lapsed |