US5651068A
Expired / Lapsed
US
⏱️ 0.0 years remaining
International cryptography framework
Assignee: Hewlett Packard Development Co LP
•
Filing: 1995-03-08
•
Granted: 1997-07-22
•
Expires: 2015-03-08
Abstract
Abstract A cryptographic framework consists of four basic service elements that include a national flag card, a cryptographic unit, a host system, and a network security server. Three of the four service elements have a fundamentally hierarchical relationship. The National Flag Card (NFC) is installed into the Cryptographic Unit (CU) which, in turn, is installed into a Host System (HS). Cryptographic functions on the Host System cannot be executed without a Cryptographic Unit, which itself requires the presence of a valid National Flag Card before it's services are available. The fourth service element, a Network Security Server (NSS), can provide a range of different security services including verification of the other three service elements. The framework addresses national policies governing cryptography, where such policies can be independently developed and maintained using a such a framework. Furthermore, the common service elements provide the necessary focus for establishing interoperability while reconciling these different National policies.
Inventors
- 👤 Keith S. Klemba
- 👤 Roger Merckling
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 17:50
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/602; G06F21/62; G06F21/6218; G06F21/70; G06F21/71; G06F21/72; H; H04; H04L; H04L9/00; H04L9/32; H04L9/321; H04L9/3271; G06F2221/00; G06F2221/21; G06F2221/2111; H04L2209/00; H04L2209/56; Y; Y04; Y04S; Y04S40/00; Y04S40/20
Claims Analysis
Total Claims: 29
Claim 1
Independent Claim
67 words
A cryptographic function for an international cryptography framework that includes a cryptographic unit, said cryptographic function comprising: a national flag card for accommodating at least one defining parameter of a cryptographic scheme as required by a particular national policy without affecting user system hardware, software, or data structures beyond anticipated adaptation; said cryptographic unit requiring the presence of said national flag card to execute said cryptographic function.
Claim 2
Dependent Claim
67 words
A cryptographic function for an international cryptography framework that includes a cryptographic unit, said cryptographic function comprising: a national flag card for accommodating at least one defining parameter of a cryptographic scheme as required by a particular national policy without affecting user system hardware, software, or data structures beyond anticipated adaptation; said cryptographic unit requiring the presence of said national flag card to execute said cryptographic function.
Claim 3
Dependent Claim
40 words
The framework of claim 1, further comprising: a cryptographic unit including a cryptography engine, said cryptographic unit adapted to implement said cryptographic scheme if and only if said cryptographic unit is used in combination with a valid national flag card.
Claim 4
Dependent Claim
55 words
The framework of claim 2, further comprising: a host system adapted to implement an information technology application, said host system arranged for communication with said cryptographic unit and adapted to implement said cryptographic scheme if and only if said host system is used in combination with a cryptographic unit and a valid national flag card.
Claim 5
Dependent Claim
44 words
The framework of claim 1, further comprising: a network security server adapted to provide trusted third party services including any of authentication, digital signature verification, digital authorization certificate generation, and authentication of said national flag card prior to allowing implementation of said cryptographic scheme.
Claim 6
Dependent Claim
49 words
The framework of claim 4, wherein said national flag card incorporates an electronic stamp that identifies a particular national policy; and wherein said network security server is a network node that verifies said stamp for message handling processes within said network prior to allowing implementation of said cryptographic scheme.
Claim 7
Dependent Claim
22 words
The framework of claim 4, wherein said network security server is adapted to distribute a cryptography key to said national flag card.
Claim 8
Dependent Claim
22 words
The framework of claim 1, wherein said national flag card includes user personalization information in each message generated using said cryptographic scheme.
Claim 9
Dependent Claim
133 words
A cryptographic framework for providing uniform cryptography that operates consistently and in conformance with diverse national policies, comprising: a national flag card for accommodating a cryptographic scheme as required by a particular national policy without affecting user system hardware, software, or data structures; a cryptographic unit including a cryptography engine, a cryptographic unit adapted to implement said cryptographic scheme; and a host system for implementing an information technology application, wherein said host system is in communication with said cryptographic unit via an application programming interface, and wherein said national flag card is installed into said cryptographic unit which, in turn, is installed into said host system, such that cryptographic functions on said host system cannot be executed without a cryptographic unit, which in turn requires the presence of a valid national flag card.
Claim 10
Dependent Claim
133 words
A cryptographic framework for providing uniform cryptography that operates consistently and in conformance with diverse national policies, comprising: a national flag card for accommodating a cryptographic scheme as required by a particular national policy without affecting user system hardware, software, or data structures; a cryptographic unit including a cryptography engine, a cryptographic unit adapted to implement said cryptographic scheme; and a host system for implementing an information technology application, wherein said host system is in communication with said cryptographic unit via an application programming interface, and wherein said national flag card is installed into said cryptographic unit which, in turn, is installed into said host system, such that cryptographic functions on said host system cannot be executed without a cryptographic unit, which in turn requires the presence of a valid national flag card.
Claim 11
Dependent Claim
35 words
The framework of claim 8, further comprising: a network security server adapted to provide trusted third party security services, including verification of any of said national flag card, said cryptographic unit, and said host system.
Claim 12
Dependent Claim
49 words
The framework of claim 9, wherein said national flag card incorporates an electronic stamp that identifies a particular national policy; and wherein said network security server is a network node that verifies said stamp for message handling processes within said network prior to allowing implementation of said cryptographic scheme.
Claim 13
Dependent Claim
22 words
The framework of claim 9, wherein said network security server is adapted to distribute a cryptography key to said national flag card.
Claim 14
Dependent Claim
22 words
The framework of claim 8, wherein said national flag card includes user personalization information in each message generated using said cryptographic scheme.
Claim 15
Dependent Claim
15 words
The framework of claim 8, wherein said cryptographic unit is a self-contained PCMCIA card-like unit.
Claim 16
Dependent Claim
15 words
The framework of claim 8, wherein said national flag card is a tamper-resistant smart card.
Claim 17
Dependent Claim
20 words
The framework of claim 14, wherein said cryptographic unit is adapted to receive and secure said national flag card therein.
Claim 18
Dependent Claim
19 words
The framework of claim 13, wherein said host unit is adapted to receive and secure said cryptographic unit therein.
Claim 19
Dependent Claim
47 words
The framework of claim 8, wherein said cryptographic unit implements a generic encryption engine; and wherein said national flag card is adapted to assure that said generic cryptographic engine and the use thereof comply with national cryptographic policy of the country in which said framework is used.
Claim 20
Dependent Claim
27 words
The framework of claim 17, wherein said national flag card is adapted to selectively implement at least one additional cryptographic engine in combination with said cryptographic unit.
Claim 21
Dependent Claim
114 words
A cryptography framework, comprising: a flag card for accommodating a cryptographic scheme as required by a particular application without affecting user system hardware, software or data structures; a cryptographic unit including a cryptography engine, said cryptographic unit adapted to implement said cryptographic scheme if and only if said cryptographic is used in combination with a valid flag card; and a host system for implementing an information technology application, said host system arranged for communication with said cryptographic unit and adapted to implement said cryptographic scheme if and only if said host system is used with combination with a cryptographic unit and a valid flag card; wherein said flag card implements a selected cryptographic standard.
Claim 22
Dependent Claim
114 words
A cryptography framework, comprising: a flag card for accommodating a cryptographic scheme as required by a particular application without affecting user system hardware, software or data structures; a cryptographic unit including a cryptography engine, said cryptographic unit adapted to implement said cryptographic scheme if and only if said cryptographic is used in combination with a valid flag card; and a host system for implementing an information technology application, said host system arranged for communication with said cryptographic unit and adapted to implement said cryptographic scheme if and only if said host system is used with combination with a cryptographic unit and a valid flag card; wherein said flag card implements a selected cryptographic standard.
Claim 23
Dependent Claim
30 words
The framework of claim 19, further comprising: a network security server adapted to provide trusted third party authentication of said flag card prior to allowing implementation of said cryptographic scheme.
Claim 24
Dependent Claim
36 words
The framework of claim 19, wherein said selected cryptographic standard may comprise any of a selected cryptography algorithm, a selected level of cryptography, a national policy, information personalization, system and network access metering, and renewable cryptography.
Claim 25
Independent Claim
89 words
A method for providing uniform cryptography that operates consistently and in conformance with diverse national policies, comprising the steps of: providing a national flag card for accommodating a cryptographic scheme as required by a particular national policy without affecting user system hardware, software, or data structures; operating said national flag card in combination with a cryptographic unit including a cryptography engine, said cryptographic unit implementing said cryptographic scheme; and implementing an information technology application with said host system in communication with said cryptographic unit via an application programming interface.
Claim 26
Independent Claim
89 words
A method for providing uniform cryptography that operates consistently and in conformance with diverse national policies, comprising the steps of: providing a national flag card for accommodating a cryptographic scheme as required by a particular national policy without affecting user system hardware, software, or data structures; operating said national flag card in combination with a cryptographic unit including a cryptography engine, said cryptographic unit implementing said cryptographic scheme; and implementing an information technology application with said host system in communication with said cryptographic unit via an application programming interface.
Claim 27
Dependent Claim
54 words
The method of claim 22, further comprising the steps of: installing said national flag card into said cryptographic unit; installing said cryptographic unit into said host system, such that cryptographic functions on said host system cannot be executed without a cryptographic unit, which in turn requires the presence of a valid national flag card.
Claim 28
Dependent Claim
39 words
The method of claim 22, further comprising the step of: providing a network security server adapted to provide trusted third party security services, including verification of any of said national flag card, said cryptographic unit, and said host system.
Claim 29
Dependent Claim
49 words
The method of claim 22, further comprising the steps of: incorporating an electronic stamp into said national flag card that identifies a particular national policy; and verifying said stamp for message handling processes within said network prior to allowing implementation of said cryptographic scheme with said network security server.
References Cited (Backward Citations)
US5164988A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-07-21 | 2001-01-20 | 2001-07-22 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-07-21 | 2005-01-20 | 2005-07-22 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-07-21 | 2009-01-20 | 2009-07-22 | $7700.00 | Window Closed / Lapsed |