Key escrow method with warrant bounds

Claim 1

A method for assuring limited privacy in a communications network, comprising the steps of: (a) sending a cipher text message of a form c(a,b,d)=f(S(a,b,d), k(a,b,d)) from a terminal of a party a via said network to a terminal of one or more parties b where: P(a) is a public key of the party a; S(a) is a secret key of the party a, such that g S (a) =P(a) mod p, p and g being integers; P(b) is a public key of a party b; h is a one way hash function; f(k,m) is a cipher function; d is a period of time; S(a,d)=h(S(a),d); S(a,b,d)=h(S(a,d), P(b)); and k(a,b,d)=h(P(b) S (a),d) is a session key valid for the period of time d; (b) transmitting one or more encrypted information messages through the network between said party a and said one or more parties b using f as a cipher function and k(a,b,d) as a session key; and (c) providing from a trustee to a wiretapper terminal connected to said network S(a,b,d) for each specific party b whose communications to and from party a the wiretapper terminal is authorized to decrypt or S(a,d) if the wiretapper terminal is authorized to decrypt communications to or from the party a from or to any other party b.

Claim 2

A method for assuring limited privacy in a communications network, comprising the steps of: (a) sending a cipher text message of a form c(a,b,d)=f(S(a,b,d), k(a,b,d)) from a terminal of a party a via said network to a terminal of one or more parties b where: P(a) is a public key of the party a; S(a) is a secret key of the party a, such that g S (a) =P(a) mod p, p and g being integers; P(b) is a public key of a party b; h is a one way hash function; f(k,m) is a cipher function; d is a period of time; S(a,d)=h(S(a),d); S(a,b,d)=h(S(a,d), P(b)); and k(a,b,d)=h(P(b) S (a),d) is a session key valid for the period of time d; (b) transmitting one or more encrypted information messages through the network between said party a and said one or more parties b using f as a cipher function and k(a,b,d) as a session key; and (c) providing from a trustee to a wiretapper terminal connected to said network S(a,b,d) for each specific party b whose communications to and from party a the wiretapper terminal is authorized to decrypt or S(a,d) if the wiretapper terminal is authorized to decrypt communications to or from the party a from or to any other party b.

Claim 4

A method for assuring limited privacy in a communications network, comprising the steps of: (a) sending a cipher message c=f(k,m) generated from a clear text message m via said network from a party a to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function; (b) at least one trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a; (c) transmitting an information message via said network between said parties a and b, the message being encrypted using said cipher function f and said session key; and (d) decrypting said information message transmitted between said parties a and b at said wiretapper terminal.

Claim 5

A method for assuring limited privacy in a communications network, comprising the steps of: (a) sending a cipher message c=f(k,m) generated from a clear text message m via said network from a party a to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function; (b) at least one trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a; (c) transmitting an information message via said network between said parties a and b, the message being encrypted using said cipher function f and said session key; and (d) decrypting said information message transmitted between said parties a and b at said wiretapper terminal.

Claim 21

A method for performing a wiretapping in a communications network, comprising the steps of: (1) using a terminal a connected to said network, deriving a common session key which is valid for a particular period of time from (i) a secret key of said terminal a, (ii) a public key of a terminal b also connected to said network, and (iii) information indicating said period of time; (2) using said terminal a, deriving a cipher key which is valid for said particular period of time from said secret key of said terminal a and said public key of said terminal b; (3) transmitting via said network from said terminal a to said terminal b a cipher message in which said common session key is encrypted by said cipher key using a cipher function; (4) transmitting via said network from said terminal a to said terminal b an information message encrypted using said common session key and said cipher function; and (5) in response to a warrant, providing to a wiretapper terminal connected to said network information which permits said wiretap terminal to decrypt the cipher message and obtain the common session key without the wiretapper terminal obtaining knowledge of the secret key of the terminal a.

Claim 22

A method for performing a wiretapping in a communications network, comprising the steps of: (1) using a terminal a connected to said network, deriving a common session key which is valid for a particular period of time from (i) a secret key of said terminal a, (ii) a public key of a terminal b also connected to said network, and (iii) information indicating said period of time; (2) using said terminal a, deriving a cipher key which is valid for said particular period of time from said secret key of said terminal a and said public key of said terminal b; (3) transmitting via said network from said terminal a to said terminal b a cipher message in which said common session key is encrypted by said cipher key using a cipher function; (4) transmitting via said network from said terminal a to said terminal b an information message encrypted using said common session key and said cipher function; and (5) in response to a warrant, providing to a wiretapper terminal connected to said network information which permits said wiretap terminal to decrypt the cipher message and obtain the common session key without the wiretapper terminal obtaining knowledge of the secret key of the terminal a.

Claim 23

A method for assuring limited privacy in a communications network, comprising the steps of: (a) sending a cipher message c=f(k,m) generated from a clear text message m via said network from a party a to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function and selecting the cipher key derived from the secret key of part a to be of a form: S(a,b,d)=h(S(a,d), P(b)), where: S(a,d)=h(S(a),d); S(a) is a secret key of party a; P(b) is a public key of a party b; d is a period of time; and h is a one way hash function; (b) at least one trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a; (c) transmitting an information message via said network between said parties a and b, the message being encrypted using said cipher function f and said session key; and (d) decrypting said information message transmitted between said parties a and b at said wiretapper terminal.

Claim 24

A method for assuring limited privacy in a communications network, comprising the steps of: (a) sending a cipher message c=f(k,m) generated from a clear text message m via said network from a party a to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function and selecting the cipher key derived from the secret key of part a to be of a form: S(a,b,d)=h(S(a,d), P(b)), where: S(a,d)=h(S(a),d); S(a) is a secret key of party a; P(b) is a public key of a party b; d is a period of time; and h is a one way hash function; (b) at least one trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a; (c) transmitting an information message via said network between said parties a and b, the message being encrypted using said cipher function f and said session key; and (d) decrypting said information message transmitted between said parties a and b at said wiretapper terminal.

Claim 25

A method for assuring limited privacy in a communications network, comprising the steps of: (a) a first party a sending a cipher message c=f(k,m) generated from a clear text message m via said network to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f(k,m) and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function; (b) at least one trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a; (c) parties a and b transmitting an information message via said network between said parties a and b, the message being encrypted using said cipher function f(k,m) and said session key; (d) the wiretapper terminal decrypting said information message transmitted between said parties a and one or more specific parties b; and (e) the at least one trustee providing said wiretapper terminal with sufficient information to decrypt said cipher message only for said one or more specific parties b in a form: S(a,b,d)=h(S(a,d), P(b)), where: S(a,d)=h(S(a),d); S(a) is a secret key of the party a; P(b) is a public key of the party b; d is a period of time; and h is a one way hash function; for each of said one or more specific parties b.

Claim 26

A method for assuring limited privacy in a communications network, comprising the steps of: (a) a first party a sending a cipher message c=f(k,m) generated from a clear text message m via said network to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f(k,m) and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function; (b) at least one trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a; (c) parties a and b transmitting an information message via said network between said parties a and b, the message being encrypted using said cipher function f(k,m) and said session key; (d) the wiretapper terminal decrypting said information message transmitted between said parties a and one or more specific parties b; and (e) the at least one trustee providing said wiretapper terminal with sufficient information to decrypt said cipher message only for said one or more specific parties b in a form: S(a,b,d)=h(S(a,d), P(b)), where: S(a,d)=h(S(a),d); S(a) is a secret key of the party a; P(b) is a public key of the party b; d is a period of time; and h is a one way hash function; for each of said one or more specific parties b.

Claim 27

A method for assuring limited privacy in a communications network, comprising the steps of: (a) a first party a sending a cipher message c=f(k,m) generated from a clear text message m via said network to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f(k,m) and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function; (b) a trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a, said information of a form; S(a,d)=h(S(a),d); and said wiretapper terminal deriving said cipher key using said information S(a,d), where: S(a) is a secret key of a party a; P(b) is a public key of the party b; d is a period of time; and h is a one way hash function; (c) parties a and b transmitting an information message via said network between themselves, the message being encrypted using said cipher function f(k,m) and said session key; and (d) the wiretapper terminal decrypting said information message between said party a and one or more specific parties b.

Claim 28

A method for assuring limited privacy in a communications network, comprising the steps of: (a) a first party a sending a cipher message c=f(k,m) generated from a clear text message m via said network to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f(k,m) and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function; (b) a trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a, said information of a form; S(a,d)=h(S(a),d); and said wiretapper terminal deriving said cipher key using said information S(a,d), where: S(a) is a secret key of a party a; P(b) is a public key of the party b; d is a period of time; and h is a one way hash function; (c) parties a and b transmitting an information message via said network between themselves, the message being encrypted using said cipher function f(k,m) and said session key; and (d) the wiretapper terminal decrypting said information message between said party a and one or more specific parties b.

Claim 29

A method for assuring limited privacy in a communications network, comprising the steps of: (a) a first party a sending a cipher message c=f(k,m) generated from a clear text message m via said network to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f(k,m) and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function and selecting said cipher key derived from said secret key to be of a form: S(a,b,d)=T(S 1 (a,b,d),S 2 (a,b,d), . . . , S n (a,b,d)) where: T is a threshold function; S i (a,b,d)=h(S i (a,d),P(b)); S i (a,d)=h(S i (a),d); S i (a) is a verifiable share of a secret key S(a) of the party a which is known to a particular trustee i in a plurality of n trustees; P(b) is a public key of a party b; d is a period of time; and h is a hash function; (b) at least one trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a; (c) parties a and b transmitting an information message via said network between themselves, the message being encrypted using said cipher function f(k,m) and said session key; and (d) the wiretapper terminal decrypting said information message transmitted between said parties a and b.

Claim 30

A method for assuring limited privacy in a communications network, comprising the steps of: (a) a first party a sending a cipher message c=f(k,m) generated from a clear text message m via said network to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f(k,m) and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function and selecting said cipher key derived from said secret key to be of a form: S(a,b,d)=T(S 1 (a,b,d),S 2 (a,b,d), . . . , S n (a,b,d)) where: T is a threshold function; S i (a,b,d)=h(S i (a,d),P(b)); S i (a,d)=h(S i (a),d); S i (a) is a verifiable share of a secret key S(a) of the party a which is known to a particular trustee i in a plurality of n trustees; P(b) is a public key of a party b; d is a period of time; and h is a hash function; (b) at least one trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a; (c) parties a and b transmitting an information message via said network between themselves, the message being encrypted using said cipher function f(k,m) and said session key; and (d) the wiretapper terminal decrypting said information message transmitted between said parties a and b.

Claim 31

A method for assuring limited privacy in a communications network, comprising the steps of: (a) a first party a sending a cipher message c=f(k,m) generated from a clear text message m via said network to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f(k,m) and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function; (b) at least one trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a; (c) parties a and b transmitting an information message via said network between themselves, the message being encrypted using said cipher function f(k,m) and said session key; and (d) the wiretapper terminal decrypting said information message transmitted between said parties a and b; and (e) determining said cipher key using a terminal of said party a according to a method comprising the steps of: (i) using a processing unit in said terminal of said party a, determining S i (a,d)=h(S i (a),d) for 1≦i≦n where S i (a) is a verifiable share of a secret key S(a) of the party a known to a particular trustee i out of a plurality of n trustees, d is a period of time, and h is a hash function; (ii) using said processing unit in said terminal of said party a, determining S i (a,b,d)=h(S i (a,d), P(b)) for 1≦i≦n; and (iii) using said processing unit in said terminal a, combining said quantities S i (a,b,d) to obtain said cipher key S(a,b,d).

Claim 32

A method for assuring limited privacy in a communications network, comprising the steps of: (a) a first party a sending a cipher message c=f(k,m) generated from a clear text message m via said network to a party b, said cipher message c including a common session key k of the parties a and b which is encrypted using a cipher function f(k,m) and a cipher key which is derived from a secret key of the party a by the party a using a one way hash function; (b) at least one trustee providing to a wiretapper terminal connected to said network sufficient information to permit said wiretapper terminal to decrypt said cipher message using said cipher key and obtain said session key without said wiretapper terminal obtaining said secret key of the party a; (c) parties a and b transmitting an information message via said network between themselves, the message being encrypted using said cipher function f(k,m) and said session key; and (d) the wiretapper terminal decrypting said information message transmitted between said parties a and b; and (e) determining said cipher key using a terminal of said party a according to a method comprising the steps of: (i) using a processing unit in said terminal of said party a, determining S i (a,d)=h(S i (a),d) for 1≦i≦n where S i (a) is a verifiable share of a secret key S(a) of the party a known to a particular trustee i out of a plurality of n trustees, d is a period of time, and h is a hash function; (ii) using said processing unit in said terminal of said party a, determining S i (a,b,d)=h(S i (a,d), P(b)) for 1≦i≦n; and (iii) using said processing unit in said terminal a, combining said quantities S i (a,b,d) to obtain said cipher key S(a,b,d).