Patent EP0032162A1 successfully refreshed from Google Patents.
Patent US5764772A successfully refreshed from Google Patents.
US5764772A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Differential work factor cryptography method and system
Assignee: International Business Machines Corp
•
Filing: 1995-12-15
•
Granted: 1998-06-09
•
Expires: 2015-12-15
Abstract
Abstract Differential work factor cryptographic method, system, and data structure for reducing but not eliminating the work factor required by an authority to break an encrypted message encrypted with a secret encryption key. The secret key is split into at least two partial keys such that knowledge of a first of the partial keys reduces but does not eliminate the work factor required to break the encrypted message. The first partial key is encrypted using a public key of the authority. The encrypted first partial key is provided with the encrypted message to enable the authority, upon obtaining the message, to decrypt the encrypted first partial key using the authority's private key and to break the message using the first partial key. In preferred embodiments, the first partial key is encrypted with additional information which can be reconstructed by the recipient, such as a hash of the secret encryption key, a hash of the secret key concatenated with a salt, all or part of the salt, and control information. The use of a hash function provides one method of enforcing the partial key system. If a salt is used, the salt is also encrypted with the secret key encrypted using the intended recipient's public key. The invention provides secure communications against attackers while satisfying governmental restrictions on the use, export or import of strong encryption products.
Inventors
- 👤 Charles W. Kaufman
- 👤 Stephen M. Matyas, Jr.
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 11:26
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0894; H04L9/088
Claims Analysis
Total Claims: 27
Claim 1
Independent Claim
141 words
A method for reducing but not eliminating the work factor required by an authorized entity to break an encrypted message, which encrypted message requires a secret encryption key to decrypt the message, the method comprising: splitting the secret encryption key into at least two partial keys such that knowledge of a first of the partial keys reduces but does not eliminate the work factor required to break the encrypted message; calculating a hash of at least part of the secret encryption key in combination with a salt; encrypting at least the hash in combination with the first partial key using a public key of the authorized entity; and providing the encrypted first partial key together with the encrypted message thereby enabling the authorized entity to determine the first partial key and to break the encrypted message using the first partial key.
Claim 2
Independent Claim
141 words
A method for reducing but not eliminating the work factor required by an authorized entity to break an encrypted message, which encrypted message requires a secret encryption key to decrypt the message, the method comprising: splitting the secret encryption key into at least two partial keys such that knowledge of a first of the partial keys reduces but does not eliminate the work factor required to break the encrypted message; calculating a hash of at least part of the secret encryption key in combination with a salt; encrypting at least the hash in combination with the first partial key using a public key of the authorized entity; and providing the encrypted first partial key together with the encrypted message thereby enabling the authorized entity to determine the first partial key and to break the encrypted message using the first partial key.
Claim 3
Dependent Claim
46 words
The method of claim 1 furter comprising encrypting the message using the secret encryption key, encrypting at least the secret encryption key using a public key of the intended recipient, and providing to the intended recipient such encrypted secret encryption key together with the encrypted message.
Claim 4
Dependent Claim
43 words
The method of claim 2 wherein the step of encrypting at least the secret encryption key using the public key of the intended recipient comprises encrypting at least the secret encryption key in combination with the salt using the intended recipient's public key.
Claim 5
Dependent Claim
34 words
The method of claim 1 wherein the step of encrypting at least the hash in combination with the first partial key comprises encrypting in combination the hash, the first partial key, and the salt.
Claim 6
Dependent Claim
36 words
The method of claim 1 wherein the step of encrypting at least the hash in combination with the first partial key comprises encrypting in combination the hash, the first partial key, and part of the salt.
Claim 7
Dependent Claim
43 words
The method of claim 1 wherein the step of encrypting at least the hash in combination with the first partial key using a public key of the authorized entity comprises encrypting control information in combination with the hash and the first partial key.
Claim 8
Dependent Claim
87 words
The method of claim 1 wherein a governmental authority imposes one or more restrictions on use, import, or export of encryption hardware or software using encryption keys greater than a given size, and wherein the step of splitting the secret encryption key into at least two partial keys comprises making the size of the at least one partial key remaining after splitting off the first partial key equal to or less than the encryption key size subject to the one or more restrictions of the governmental authority.
Claim 9
Dependent Claim
67 words
The method of claim 1 wherein the method reduces but does not eliminate the work factor required by at least one additional authorized entity to break the encrypted message, further comprising providing the at least one additional authorized entity with information that enables the at least one additional authorized entity to determine the first partial key and to break the encrypted message using the first partial key.
Claim 10
Dependent Claim
124 words
The method of claim 1 wherein the method reduces but does not eliminate the work factor required by at least one additional authorized entity to break the encrypted message, further comprising: splitting the secret encryption key into at least two additional partial keys, which additional partial keys are different than the at least two partial keys, such that knowledge of a first of the additional partial keys reduces but does not eliminate the work factor required to break the encrypted message; and providing the at least one additional authorized entity with information that enables the at least one additional authorized entity to determine the first of the additional partial keys and to break the encrypted message using the first of the additional partial keys.
Claim 11
Dependent Claim
27 words
The method of claim 1 wherein the step of calculating a hash comprises calculating a hash of the entire secret encryption key in combination with the salt.
Claim 12
Dependent Claim
130 words
A data structure for an encrypted message transmitted from one computer system to another, the data structure providing a reduced work factor for an authorized entity to break the encrypted message, the data structure comprising: a first encrypted data entity comprising the message encrypted with a secret encryption key; and a second encrypted data entity attached to the first encrypted data entity, the second encrypted data entity comprising, in combination, a partial key of the secret encryption key, a hash of at least part of the secret encryption key and a salt, and all or part of the salt, encrypted using a public key of the authorized entity thereby enabling the authorized entity to decrypt the encrypted partial key and to use the partial key to break the encrypted message.
Claim 13
Dependent Claim
130 words
A data structure for an encrypted message transmitted from one computer system to another, the data structure providing a reduced work factor for an authorized entity to break the encrypted message, the data structure comprising: a first encrypted data entity comprising the message encrypted with a secret encryption key; and a second encrypted data entity attached to the first encrypted data entity, the second encrypted data entity comprising, in combination, a partial key of the secret encryption key, a hash of at least part of the secret encryption key and a salt, and all or part of the salt, encrypted using a public key of the authorized entity thereby enabling the authorized entity to decrypt the encrypted partial key and to use the partial key to break the encrypted message.
Claim 14
Dependent Claim
44 words
The data structure of claim 11 further comprising a third encrypted data entity attached to the first encrypted data entity, the third encrypted data entity comprising at least the secret encryption key encrypted with a public key of an intended recipient of the message.
Claim 15
Dependent Claim
26 words
The data structure of claim 12 wherein the third encrypted data entity comprises the secret encryption key in combination with all or part of the salt.
Claim 16
Dependent Claim
24 words
The data structure of claim 11 wherein the second encrypted data entity comprises a hash of the entire secret encryption key and the salt.
Claim 17
Dependent Claim
166 words
A computer usable medium having computer readable program code means embodied in said medium for causing said computer to perform method steps for reducing but not eliminating the work factor required by an authorized entity to break an encrypted message, which message is encrypted such that a secret encryption key is required to decrypt the message, the method steps comprising: splitting the secret encryption key into at least two partial keys such that knowledge of a first of the partial keys reduces but does not eliminate the work factor required to break the encrypted message; calculating a hash of at least part of the secret encryption key in combination with a salt; encrypting at least the hash in combination with the first partial key using a public key of the authorized entity; and providing the encrypted first partial key together with the encrypted message thereby enabling the authorized entity to determine the first partial key and to break the encrypted message using the first partial key.
Claim 18
Dependent Claim
166 words
A computer usable medium having computer readable program code means embodied in said medium for causing said computer to perform method steps for reducing but not eliminating the work factor required by an authorized entity to break an encrypted message, which message is encrypted such that a secret encryption key is required to decrypt the message, the method steps comprising: splitting the secret encryption key into at least two partial keys such that knowledge of a first of the partial keys reduces but does not eliminate the work factor required to break the encrypted message; calculating a hash of at least part of the secret encryption key in combination with a salt; encrypting at least the hash in combination with the first partial key using a public key of the authorized entity; and providing the encrypted first partial key together with the encrypted message thereby enabling the authorized entity to determine the first partial key and to break the encrypted message using the first partial key.
Claim 19
Dependent Claim
213 words
A computer usable medium having computer readable program code means embodied in said medium for causing said computer to perform method steps for decrypting an encrypted message received in a differential work factor cryptographic system in which the message is encrypted using a secret encryption key, a partial key of the secret encryption key is encrypted in combination with a hash of at least the secret encryption key and a salt using a public key of an authority, and the encrypted partial key is transmitted with the encrypted message, the method steps comprising: determining whether the encrypted partial key is received with the encrypted message and is valid by generating a hash of at least the secret encryption key and the salt, encrypting the hashed at least secret encryption key and salt in combination with the partial key using the public key of the authority, and comparing the encrypted hashed at least secret encryption key and partial key with the encrypted partial key received with the encrypted message; if the encrypted partial key is not received with the encrypted message or is not valid, refusing to decrypt the encrypted message; and if the encrypted partial key is received with the encrypted message and is valid, decrypting the message using the secret encryption key.
Claim 20
Dependent Claim
213 words
A computer usable medium having computer readable program code means embodied in said medium for causing said computer to perform method steps for decrypting an encrypted message received in a differential work factor cryptographic system in which the message is encrypted using a secret encryption key, a partial key of the secret encryption key is encrypted in combination with a hash of at least the secret encryption key and a salt using a public key of an authority, and the encrypted partial key is transmitted with the encrypted message, the method steps comprising: determining whether the encrypted partial key is received with the encrypted message and is valid by generating a hash of at least the secret encryption key and the salt, encrypting the hashed at least secret encryption key and salt in combination with the partial key using the public key of the authority, and comparing the encrypted hashed at least secret encryption key and partial key with the encrypted partial key received with the encrypted message; if the encrypted partial key is not received with the encrypted message or is not valid, refusing to decrypt the encrypted message; and if the encrypted partial key is received with the encrypted message and is valid, decrypting the message using the secret encryption key.
Claim 21
Independent Claim
88 words
A method for providing an authorized entity with at least part of a secret encryption key used to encrypt a message transmitted to an intended recipient, the method comprising: encrypting the at least part of the secret encryption key in combination with a hash of at least part of the secret encryption key and a salt such that the authorized entity can decrypt the at least part of the secret encryption key; and transmitting the encrypted at least part of the secret encryption key with the encrypted message.
Claim 22
Independent Claim
88 words
A method for providing an authorized entity with at least part of a secret encryption key used to encrypt a message transmitted to an intended recipient, the method comprising: encrypting the at least part of the secret encryption key in combination with a hash of at least part of the secret encryption key and a salt such that the authorized entity can decrypt the at least part of the secret encryption key; and transmitting the encrypted at least part of the secret encryption key with the encrypted message.
Claim 23
Dependent Claim
67 words
The method of claim 17 further comprising: determining, upon receipt by the intended recipient of the encrypted message, whether the encrypted at least part of the secret encryption key is transmitted with the encrypted message and is valid; and refusing to decrypt the encrypted message if the encrypted at least part of the secret encryption key is not transmitted with the encrypted message or is not valid.
Claim 24
Dependent Claim
26 words
The method of claim 17 wherein the step of encrypting the at least part of the secret encryption key comprises encrypting the entire secret encryption key.
Claim 25
Dependent Claim
35 words
The method of claim 17 wherein the step of encrypting comprises encrypting the at least part of the secret encryption key in combination with a hash of the entire secret encryption key and the salt.
Claim 26
Independent Claim
146 words
A method for reducing but not eliminating the work factor required by an authorized entity to break an encrypted message, which encrypted message requires a secret encryption key to decrypt the message, the method comprising: splitting the secret encryption key into at least two partial keys such that knowledge of a first of the partial keys reduces but does not eliminate the work factor required to break the encrypted message; calculating a hash of the secret encryption key in combination with a salt; encrypting the hash in combination with the first partial key and all or part of the salt using a public key of the authorized entity; encrypting the secret encryption key in combination with the salt using a public key of an intended recipient of the encrypted message; and providing the encrypted first partial key and encrypted secret key together with the encrypted message.
Claim 27
Independent Claim
146 words
A method for reducing but not eliminating the work factor required by an authorized entity to break an encrypted message, which encrypted message requires a secret encryption key to decrypt the message, the method comprising: splitting the secret encryption key into at least two partial keys such that knowledge of a first of the partial keys reduces but does not eliminate the work factor required to break the encrypted message; calculating a hash of the secret encryption key in combination with a salt; encrypting the hash in combination with the first partial key and all or part of the salt using a public key of the authorized entity; encrypting the secret encryption key in combination with the salt using a public key of an intended recipient of the encrypted message; and providing the encrypted first partial key and encrypted secret key together with the encrypted message.
References Cited (Backward Citations)
US4405829A
Cited
US4326098A
Cited
US4908861A
Cited
US5016274A
Cited
US5081678A
Cited
US5224163A
Cited
US5479512A
Cited
US5463690A
Cited
US5241599A
Cited
US5434920A
Cited
US5261002A
Cited
US5276737A
Cited
US5315658A
Cited
US5315658B1
Cited
US5276737B1
Cited
US5418854A
Cited
EP0576224A2
Cited
US5323464A
Cited
US5416841A
Cited
US5440635A
Cited
US5432852A
Cited
US5436972A
Cited
US5473696A
Cited
EP0653695A2
Cited
US5420926A
Cited
US5420927A
Cited
US5420927B1
Cited
US5416842A
Cited
US5557765A
Cited
US5499296A
Cited
US5535276A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-06-08 | 2001-12-08 | 2002-06-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-06-08 | 2005-12-08 | 2006-06-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-06-08 | 2009-12-08 | 2010-06-09 | $7700.00 | Window Closed / Lapsed |