Patent US5604804A successfully refreshed from Google Patents.
US5604804A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for certifying public keys in a digital signature scheme
Assignee: NOVOMODO Inc
•
Filing: 1996-04-23
•
Granted: 1997-02-18
•
Expires: 2016-04-23
Abstract
Abstract A method for certifying public keys of a digital signature scheme in a communications system is provided. The secure communications system is one in which there are at least two levels of authorities. A user presents a piece of data to an intermediate level authority who, upon verifying the data, causes an issuing authority to issue a certificate that the piece of data posses a given property. Although the certificate is compacted by not having it contain a pubic key of the intermediate authority, nonetheless, information is stored in order to keep the intermediate authority accountable.
Inventors
- 👤 Silvio Micali
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 06:07
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/02; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3247; H04L9/3255; H04L9/3263
Claims Analysis
Total Claims: 48
Claim 1
Independent Claim
142 words
A method for certifying pieces of data in a system having authorities that certify data, comprising the steps of: (a) presenting a piece of data requiring certification to a first authority for inspection of a given property; (b) if the piece of data passes the inspection of the first authority, causing a second authority to receive an indication that the piece of data has passed the inspection of at least the first authority; (c) having the second authority issue a certificate that the piece of data possesses the given property, the second authority including in the certificate a signature of the second authority and the second authority omitting from the certificate a public key of the first authority; and (d) storing accountability information that renders at least the first authority accountable for pieces of data that the first authority contributes to certify.
Claim 2
Independent Claim
142 words
A method for certifying pieces of data in a system having authorities that certify data, comprising the steps of: (a) presenting a piece of data requiring certification to a first authority for inspection of a given property; (b) if the piece of data passes the inspection of the first authority, causing a second authority to receive an indication that the piece of data has passed the inspection of at least the first authority; (c) having the second authority issue a certificate that the piece of data possesses the given property, the second authority including in the certificate a signature of the second authority and the second authority omitting from the certificate a public key of the first authority; and (d) storing accountability information that renders at least the first authority accountable for pieces of data that the first authority contributes to certify.
Claim 3
Dependent Claim
27 words
A method for certifying, according to claim 1, wherein the piece of data presented is a public key having at least one corresponding secret key associated therewith.
Claim 4
Dependent Claim
44 words
A method for certifying, according to claim 2, wherein the given property of the public key includes a given user choosing the public key to be used in connection with at least one of: a digital signature system and a public key encryption system.
Claim 5
Dependent Claim
20 words
A method for certifying, according to claim 3, wherein the inspection by the first authority includes identifying the presenting user.
Claim 6
Dependent Claim
26 words
A method for certifying, according to claim 4, wherein the inspection includes verifying that the user knows the secret key that corresponds to the public key.
Claim 7
Dependent Claim
43 words
A method for certifying, according to claim 5, wherein the inspection includes checking a digital signature of a given message signed by the user relative to said public key, to determine that the user knows the secret key associated with the public key.
Claim 8
Dependent Claim
40 words
A method for certifying, according to claim 5, wherein the inspection includes verifying that the user knows the secret key associated with the public key by having the user decrypt a given message that is encrypted using the public key.
Claim 9
Dependent Claim
24 words
A method for certifying, according to claim 1, wherein a certified public verification key of the second authority is sufficient to verify the certificate.
Claim 10
Dependent Claim
18 words
A method for certifying, according to claim 1, wherein the piece of data is included in the certificate.
Claim 11
Dependent Claim
21 words
A method for certifying, according to claim 9, wherein the second authority contributes additional data that is included in the certificate.
Claim 12
Dependent Claim
16 words
A method for certifying, according to claim 1, wherein the accountability information identifies the first authority.
Claim 13
Dependent Claim
20 words
A method for certifying, according to claim 1, wherein the accountability information is a digital signature of the first authority.
Claim 14
Dependent Claim
19 words
A method for certifying, according to claim 12, wherein the certificate includes a digital signature of the first authority.
Claim 15
Dependent Claim
19 words
A method for certifying, according to claim 11, wherein the accountability information indicates the name of the first authority.
Claim 16
Dependent Claim
19 words
A method for certifying, according to claim 11, wherein the certificate includes a digital signature of the first authority.
Claim 17
Dependent Claim
22 words
A method for certifying, according to claim 1, wherein at least a portion of the accountability information is stored in the certificate.
Claim 18
Dependent Claim
19 words
A method for certifying, according to claim 16, wherein all of the accountability information is stored in the certificate.
Claim 19
Dependent Claim
19 words
A method for certifying, according to claim 1, wherein the certificate includes a digital signature of the first authority.
Claim 20
Dependent Claim
43 words
A method for certifying, according to claim 1, further comprising the step of: (e) the second authority causing additional information to be saved which, when combined with the accountability information, proves that the first authority contributed to certification of the piece of data.
Claim 21
Dependent Claim
67 words
A method for certifying, according to claim 1, further comprising the step of: (e) a witness causing information to be saved that indicates that the first authority contributed to certification of the piece of data, wherein the information that is saved by the witness is separate from the accountability information and wherein the accountability information is stored in a way to indicate the identity of the witness.
Claim 22
Dependent Claim
37 words
A method for certifying, according to claim 20, wherein the information caused to be saved by the witness includes a portion of a digital signature and the accountability information includes an other portion of the digital signature.
Claim 23
Dependent Claim
30 words
A method for certifying, according to claim 21, wherein the portions of the digital signature, when combined, prove that the first authority contributed to certification of the piece of data.
Claim 24
Independent Claim
204 words
A method for certifying public keys where there are a plurality of authorities A 1 , . . . , A n that certify data, where each i<n authority A i is configured to send authority A i+1 authenticated messages that are verifiable by A i+1 as having genuinely come from A i , and authority A n has a signing key SK n and an associated certified public key, PK n , the method comprising the steps of: (a) having a verification key PK U presented to authority A 1 ; (b) having authority A 1 verify, by means of a predetermined procedure, that PK U possesses some properties out of a set of given properties; (c) for all i<n, having authority A i send authority A i+1 a message indicating that PK U has been verified to possess the given properties; (d) having A n issue a certificate for PK U , A n including in the certificate a signature provided using SK n and A n omitting from the certificate a public key of at least one authority A j for some j<n; and (e) storing accountability information that renders A j accountable for keys that A j contributes to certify.
Claim 25
Independent Claim
204 words
A method for certifying public keys where there are a plurality of authorities A 1 , . . . , A n that certify data, where each i<n authority A i is configured to send authority A i+1 authenticated messages that are verifiable by A i+1 as having genuinely come from A i , and authority A n has a signing key SK n and an associated certified public key, PK n , the method comprising the steps of: (a) having a verification key PK U presented to authority A 1 ; (b) having authority A 1 verify, by means of a predetermined procedure, that PK U possesses some properties out of a set of given properties; (c) for all i<n, having authority A i send authority A i+1 a message indicating that PK U has been verified to possess the given properties; (d) having A n issue a certificate for PK U , A n including in the certificate a signature provided using SK n and A n omitting from the certificate a public key of at least one authority A j for some j<n; and (e) storing accountability information that renders A j accountable for keys that A j contributes to certify.
Claim 26
Dependent Claim
26 words
A method for certifying, according to claim 23, wherein the certificate does not include a public key of at least one other authority A k .
Claim 27
Dependent Claim
33 words
A method for certifying, according to claim 24, wherein the certificate does not include public keys of any authorities A 1 , A 2 . . . A n-2 , A n-1 .
Claim 28
Dependent Claim
21 words
A method for certifying, according to claim 25, wherein the certificate does not include a public key for A n .
Claim 29
Dependent Claim
19 words
A method for certifying, according to claim 25, wherein the certificate includes a public key for A n .
Claim 30
Dependent Claim
19 words
A method for certifying, according to claim 23, wherein knowledge of PK n is sufficient to verify the certificate.
Claim 31
Dependent Claim
16 words
A method for certifying, according to claim 23, wherein PK U is included in the certificate.
Claim 32
Dependent Claim
26 words
A method for certifying, according to claim 29, wherein at least one authority A i , i<n, contributes additional data that is included in the certificate.
Claim 33
Dependent Claim
20 words
A method for certifying, according to claim 30, wherein all authorities contribute additional data that is included in the certificate.
Claim 34
Dependent Claim
20 words
A method for certifying, according to claim 23, wherein a digital signature of A j is included in the certificate.
Claim 35
Dependent Claim
21 words
A method for certifying, according to claim 32, wherein digital signatures of all of the authorities are included in the certificate.
Claim 36
Dependent Claim
26 words
A method for certifying, according to claim 23, wherein for all i<n, authority A i sends authority A i+1 a digital signature of A i .
Claim 37
Dependent Claim
44 words
A method for certifying, according to claim 34, wherein for all i<n, authority A i sends authority A i+1 a digital signature of A i along with digital signatures of all previous authorities A i-1 , A i-2 . . . A 1 .
Claim 38
Dependent Claim
21 words
A method for certifying, according to claim 35, wherein digital signatures of all of the authorities are included in the certificate.
Claim 39
Dependent Claim
16 words
A method for certifying, according to claim 23, wherein the accountability information identifies A j .
Claim 40
Dependent Claim
20 words
A method for certifying, according to claim 37, wherein the accountability information is a digital signature of A j .
Claim 41
Dependent Claim
19 words
A method for certifying, according to claim 37, wherein the accountability information indicates the name of A j .
Claim 42
Dependent Claim
22 words
A method for certifying, according to claim 23, wherein at least a portion of the accountability information is stored in the certificate.
Claim 43
Dependent Claim
19 words
A method for certifying, according to claim 40, wherein all of the accountability information is stored in the certificate.
Claim 44
Dependent Claim
43 words
A method for certifying, according to claim 23, further comprising the step of: (f) an authority A k causing additional information to be saved which, when combined with the accountability information, proves that A j contributed to the certification of PK U .
Claim 45
Dependent Claim
10 words
A method for certifying, according to claim 42, wherein k>j.
Claim 46
Dependent Claim
56 words
A method for certifying, according to claim 23, further comprising the step of: (f) a witness causing information to be saved that indicates that A j contributed to the certification of PK U , wherein the information that is saved is separate from the accountability information and the accountability information indicates the identity of the witness.
Claim 47
Dependent Claim
39 words
A method for certifying, according to claim 44, wherein the information that is caused to be saved by the witness includes a portion of a digital signature and the accountability information includes an other portion of the digital signature.
Claim 48
Dependent Claim
27 words
A method for certifying, according to claim 45, wherein the portions of the digital signature, when combined, prove that A j contributed to the certificate being issued.
References Cited (Backward Citations)
US4326098A
Cited
US4926480A
Cited
US5097504A
Cited
US5214702A
Cited
US4888801A
Cited
US5307411A
Cited
US5261002A
Cited
US5299263A
Cited
US5420927A
Cited
US5420927B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-02-18 | 2000-08-19 | 2001-02-18 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-02-18 | 2004-08-19 | 2005-02-18 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-02-18 | 2008-08-19 | 2009-02-18 | $7700.00 | Window Closed / Lapsed |