US5680458A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Root key compromise recovery
Assignee: Microsoft Technology Licensing LLC
•
Filing: 1995-11-14
•
Granted: 1997-10-21
•
Expires: 2015-11-14
Abstract
Abstract A method of recovering from a compromise of a root key which is the private key of a first public key-private key pair, the method including the steps of electronically sending out an emergency message indicating that the root key has been compromised and also containing a replacement key and a digital signature which was generated by using the root key; and publishing in an out-of-band channel a value V, wherein V is derived from the emergency message.
Inventors
- 👤 Jeffrey F. Spelman
- 👤 Matthew W. Thomlinson
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 05:53
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0891; H04L2209/00; H04L2209/80
Claims Analysis
Total Claims: 19
Claim 1
Independent Claim
97 words
A method of replacing a root key, said root key being the private key of a first public key-private key pair, said method comprising: electronically sending out a message, said message indicating that the root key is being replaced, said message also containing a replacement key and a digital signature which was generated by using the root key, said replacement key being the public key of a second public key-private key pair which is replacing the first public key-private key pair; and publishing in an out-of-band channel a value V, wherein V is derived from the message.
Claim 2
Independent Claim
97 words
A method of replacing a root key, said root key being the private key of a first public key-private key pair, said method comprising: electronically sending out a message, said message indicating that the root key is being replaced, said message also containing a replacement key and a digital signature which was generated by using the root key, said replacement key being the public key of a second public key-private key pair which is replacing the first public key-private key pair; and publishing in an out-of-band channel a value V, wherein V is derived from the message.
Claim 3
Dependent Claim
24 words
The method of claim 1 further comprising computing the value V by applying a one-way function to at least some part of the message.
Claim 4
Dependent Claim
31 words
The method of claim 2 further comprising generating the message by concatenating the replacement key with an identifier, said identifier identifying the message as a message which carries a replacement key.
Claim 5
Dependent Claim
33 words
The method of claim 2 further comprising generating the message by concatenating the replacement key with a serial number, said serial number indicating which of a plurality of root keys is being replaced.
Claim 6
Dependent Claim
27 words
The method of claim 2 further comprising generating the message by concatenating the replacement key with a good-to date which indicates when the replacement key will expire.
Claim 7
Dependent Claim
31 words
The method of claim 2 further comprising generating the message by concatenating the replacement key with a good-from date which indicates a time beyond which the replacement key will become active.
Claim 8
Independent Claim
114 words
A method of replacing a root key, said root key being the private key of a first public key-private key pair, said method comprising: generating a first message which includes a replacement key and an indication that the root key is being replaced, said replacement key being the public key of a second public key-private key pair which is replacing the first public key-private key pair; generating a digital signature by applying the root key to the first message; combining the first message and the digital signature to produce a second message; electronically sending out the second message; publishing in an out-of-band channel a value V, wherein V is derived from the second message.
Claim 9
Independent Claim
114 words
A method of replacing a root key, said root key being the private key of a first public key-private key pair, said method comprising: generating a first message which includes a replacement key and an indication that the root key is being replaced, said replacement key being the public key of a second public key-private key pair which is replacing the first public key-private key pair; generating a digital signature by applying the root key to the first message; combining the first message and the digital signature to produce a second message; electronically sending out the second message; publishing in an out-of-band channel a value V, wherein V is derived from the second message.
Claim 10
Independent Claim
167 words
A method of responding to a change of a root key, said root key being the private key of a first public key-private key pair, said method comprising: electronically receiving a message, said message indicating that the root key is being replaced, said message also containing a replacement key and a digital signature which was generated by using the root key, said replacement key being the public key of a second public key-private key pair which is replacing the first public key-private key pair; using the public key corresponding to the root key to verify the digital signature of the message; obtaining through an out-of-band channel a value V that was derived from the message by applying an algorithm to at least some part of the message; applying the algorithm to said at least some part of the message to generate a value B; comparing B to V; and if B equals V, replacing the public key which corresponds to the root key with the replacement key.
Claim 11
Independent Claim
167 words
A method of responding to a change of a root key, said root key being the private key of a first public key-private key pair, said method comprising: electronically receiving a message, said message indicating that the root key is being replaced, said message also containing a replacement key and a digital signature which was generated by using the root key, said replacement key being the public key of a second public key-private key pair which is replacing the first public key-private key pair; using the public key corresponding to the root key to verify the digital signature of the message; obtaining through an out-of-band channel a value V that was derived from the message by applying an algorithm to at least some part of the message; applying the algorithm to said at least some part of the message to generate a value B; comparing B to V; and if B equals V, replacing the public key which corresponds to the root key with the replacement key.
Claim 12
Independent Claim
105 words
A method of recovering from a compromise of a root key, said root key being the private key of a first public key-private key pair, said method comprising: electronically sending out an emergency message, said emergency message indicating that the root key has been compromised, said emergency message also containing a replacement key and a digital signature which was generated by using the root key, said replacement key being the public key of a second public key-private key pair which is replacing the first public key-private key pair; and publishing in an out-of-band channel a value V, wherein V is derived from the emergency message.
Claim 13
Independent Claim
105 words
A method of recovering from a compromise of a root key, said root key being the private key of a first public key-private key pair, said method comprising: electronically sending out an emergency message, said emergency message indicating that the root key has been compromised, said emergency message also containing a replacement key and a digital signature which was generated by using the root key, said replacement key being the public key of a second public key-private key pair which is replacing the first public key-private key pair; and publishing in an out-of-band channel a value V, wherein V is derived from the emergency message.
Claim 14
Independent Claim
177 words
A method of recovering from a compromise of a root key, said root key being the private key of a first public key-private key pair, said method comprising: electronically receiving an emergency message, said emergency message indicating that the root key is being replaced, said emergency message also containing a replacement key and a digital signature which was generated by using the root key, said replacement key being the public key of a second public key-private key pair which is replacing the first public key-private key pair; using the public key of the first public key-private key pair to verify the digital signature of the emergency message; obtaining through an out-of-band channel a value V that was derived from the emergency message by applying an algorithm to at least some part of the emergency message; applying the algorithm to said at least some part of the emergency message to generate a value B; comparing B to V; and if B equals V, replacing the public key of the first public key-private key pair with the replacement key.
Claim 15
Independent Claim
177 words
A method of recovering from a compromise of a root key, said root key being the private key of a first public key-private key pair, said method comprising: electronically receiving an emergency message, said emergency message indicating that the root key is being replaced, said emergency message also containing a replacement key and a digital signature which was generated by using the root key, said replacement key being the public key of a second public key-private key pair which is replacing the first public key-private key pair; using the public key of the first public key-private key pair to verify the digital signature of the emergency message; obtaining through an out-of-band channel a value V that was derived from the emergency message by applying an algorithm to at least some part of the emergency message; applying the algorithm to said at least some part of the emergency message to generate a value B; comparing B to V; and if B equals V, replacing the public key of the first public key-private key pair with the replacement key.
Claim 16
Independent Claim
214 words
An apparatus for recovering from a compromise of a root key, said root key being a private key of a private key-public key pair, said apparatus comprising: a digital processor; a communication interface connected to said digital processor and through which an emergency message is electronically received, said emergency message indicating that the root key has been compromised, said message also containing a replacement key and a digital signature which was generated by using the compromised root key; memory storing the public key corresponding to the root key; and an input device through which a value V is entered into the digital processor, wherein V is obtained through an out-of-band channel and was generated by applying an algorithm to at least some part of the emergency message, wherein said digital processor is programmed to use the public key corresponding to the root key to verify the digital signature of the emergency message; wherein said digital processor is programmed to apply the algorithm to said at least some part of the emergency message to generate a value B; wherein said digital processor is programmed to compare B to V; and wherein said digital processor is programmed to replace the public key which corresponds to the root key with the replacement key, if B equals V.
Claim 17
Independent Claim
214 words
An apparatus for recovering from a compromise of a root key, said root key being a private key of a private key-public key pair, said apparatus comprising: a digital processor; a communication interface connected to said digital processor and through which an emergency message is electronically received, said emergency message indicating that the root key has been compromised, said message also containing a replacement key and a digital signature which was generated by using the compromised root key; memory storing the public key corresponding to the root key; and an input device through which a value V is entered into the digital processor, wherein V is obtained through an out-of-band channel and was generated by applying an algorithm to at least some part of the emergency message, wherein said digital processor is programmed to use the public key corresponding to the root key to verify the digital signature of the emergency message; wherein said digital processor is programmed to apply the algorithm to said at least some part of the emergency message to generate a value B; wherein said digital processor is programmed to compare B to V; and wherein said digital processor is programmed to replace the public key which corresponds to the root key with the replacement key, if B equals V.
Claim 18
Dependent Claim
181 words
A computer-readable medium storing a computer program which is executable on a computer including a memory, the computer program for recovering from a compromise of a root key, the root key being a private key of a private key-public key pair, said stored program comprising: computer readable instructions which cause said computer to retrieve an emergency message from memory, said emergency message indicating that the root key has been compromised, said message also containing a replacement key and a digital signature which was generated by using the compromised root key; computer readable instructions which cause said computer to use the public key corresponding to the root key to verify the digital signature of the emergency message; computer readable instructions which cause said computer to apply the algorithm to said at least some part of the emergency message to generate a value B; computer readable instructions which cause said computer to compare B to V; and computer readable instructions which cause said computer to replace the public key which corresponds to the root key with the replacement key, if B equals V.
Claim 19
Dependent Claim
181 words
A computer-readable medium storing a computer program which is executable on a computer including a memory, the computer program for recovering from a compromise of a root key, the root key being a private key of a private key-public key pair, said stored program comprising: computer readable instructions which cause said computer to retrieve an emergency message from memory, said emergency message indicating that the root key has been compromised, said message also containing a replacement key and a digital signature which was generated by using the compromised root key; computer readable instructions which cause said computer to use the public key corresponding to the root key to verify the digital signature of the emergency message; computer readable instructions which cause said computer to apply the algorithm to said at least some part of the emergency message to generate a value B; computer readable instructions which cause said computer to compare B to V; and computer readable instructions which cause said computer to replace the public key which corresponds to the root key with the replacement key, if B equals V.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-10-20 | 2001-04-21 | 2001-10-21 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-10-20 | 2005-04-21 | 2005-10-21 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-10-20 | 2009-04-21 | 2009-10-21 | $7700.00 | Window Closed / Lapsed |