Patent US5787173A successfully refreshed from Google Patents.
← Back to Patent Explorer
US5787173A Expired / Lapsed US ⏱️ 0.0 years remaining

Cryptographic key management method and apparatus

Assignee: Tecsec Inc
•
Filing: 1997-03-12
•
Granted: 1998-07-28
•
Expires: 2017-03-12
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A system for the secure communication of a message from a transmitting user to a receiving user using a split key scheme. Each user generates a key component using a cryptographic engine. The key component is a pseudorandom sequence of bits with an appended error detection field which is mathematically calculated based on the pseudorandom sequence. This key component is then sent out on a communications channel from the transmitting user to the receiving user. The receiving user also sends its key component to the transmitting user. Each location performs a mathematical check on the key component received from the other location. If the key component checks pass at both locations, the transmit key component and the receive key component, including the error detection fields, are combined at both locations, forming identical complete keys at both locations. The identical complete keys are then used to initiate the cryptographic engines at both locations for subsequent encryption and decryption of messages between the two locations.

Inventors

  • 👤 Edward M. Seheidt
  • 👤 John J. Crowley

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-05 22:10
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0838; H04L9/0861; H04L9/0877; H04L2209/00; H04L2209/12; H04L2209/34

Claims Analysis

Total Claims: 30
Claim 1
Independent Claim 163 words
A secure communication system, comprising: a) a communications channel; b) a transmit location coupled to the communications channel; and c) a receive location coupled to the communications channel; d) wherein the transmit location includes i) a transmit key component generator for generating a transmit key component, ii) a receive key component receiver for receiving a receive key component, iii) a first key component combiner for combining the transmit key component and the received receive key component to form a transmit key, and iv) transmit memory for storing the receive key component and the transmit key; and e) wherein the receive location includes i) a receive key component generator for generating a receive key component, ii) a transmit key component receiver for receiving a transmit key component, iii) a second key component combiner for combining the transmit key component and the received receive key component to form a receive key, and iv) receive memory for storing the transmit key component and the receive key.
Claim 2
Dependent Claim 163 words
A secure communication system, comprising: a) a communications channel; b) a transmit location coupled to the communications channel; and c) a receive location coupled to the communications channel; d) wherein the transmit location includes i) a transmit key component generator for generating a transmit key component, ii) a receive key component receiver for receiving a receive key component, iii) a first key component combiner for combining the transmit key component and the received receive key component to form a transmit key, and iv) transmit memory for storing the receive key component and the transmit key; and e) wherein the receive location includes i) a receive key component generator for generating a receive key component, ii) a transmit key component receiver for receiving a transmit key component, iii) a second key component combiner for combining the transmit key component and the received receive key component to form a receive key, and iv) receive memory for storing the transmit key component and the receive key.
Claim 3
Dependent Claim 58 words
The secure communication system of 1, wherein: the transmit location further includes encryption means for encrypting a first plaintext message, using the transmit key, to generate an encrypted message, and the receive location further includes decryption means for decrypting the encrypted message, using the receive key, to generate a second plaintext message corresponding to the first plaintext message.
Claim 4
Dependent Claim 58 words
The secure communication system of 1, wherein: the transmit location further includes encryption means for encrypting a first plaintext message, using the transmit key, to generate an encrypted message, and the receive location further includes decryption means for decrypting the encrypted message, using the receive key, to generate a second plaintext message corresponding to the first plaintext message.
Claim 5
Independent Claim 153 words
A method for secure communications, comprising: a) generating a transmit key component at a transmit location; b) generating a receive key component at a receive location; c) receiving the transmit key component at the receive location via a communications channel; d) receiving the receive key component at the transmit location via the communications channel; e) comparing check bits included in the transmit key component with test bits at the receive location; f) comparing check bits included in the receive key component with test bits at the transmit location; g) combining the transmit key component and the receive key component at the receive location to generate a receive key, if the transmit key component check bit comparison resulted in a match; and h) combining the transmit key component and the receive key component at the transmit location to generate a transmit key, if the receive key component check bit comparison resulted in a match.
Claim 6
Independent Claim 153 words
A method for secure communications, comprising: a) generating a transmit key component at a transmit location; b) generating a receive key component at a receive location; c) receiving the transmit key component at the receive location via a communications channel; d) receiving the receive key component at the transmit location via the communications channel; e) comparing check bits included in the transmit key component with test bits at the receive location; f) comparing check bits included in the receive key component with test bits at the transmit location; g) combining the transmit key component and the receive key component at the receive location to generate a receive key, if the transmit key component check bit comparison resulted in a match; and h) combining the transmit key component and the receive key component at the transmit location to generate a transmit key, if the receive key component check bit comparison resulted in a match.
Claim 7
Dependent Claim 42 words
The method of claim 3, further comprising: encrypting a first plaintext message, using the transmit key, to generate an encrypted message, and decrypting the encrypted message, using the receive key, to generate a second plaintext message corresponding to the first plaintext message.
Claim 8
Dependent Claim 131 words
A secure communication system, comprising: a) a communications channel; b) a transmit device coupled to the communications channel; and c) a receive device coupled to the communications channel; d) wherein the transmit device includes a transmitter, transmit key component generating logic circuitry, and transmission-inhibiting logic circuitry; e) wherein the receive device includes a receiver, and transmit key component generating logic circuitry; f) wherein the transmitter includes transmit combining logic circuitry for combining a transmit key component with a receive key component to form a transmit key, and encrypting logic circuitry for encrypting a message using the transmit key; and g) wherein the transmission-inhibiting logic circuitry includes means for selectively inhibiting transmission of the message by the transmitter, based on a comparison of a receive key component field with a stored sequence.
Claim 9
Dependent Claim 131 words
A secure communication system, comprising: a) a communications channel; b) a transmit device coupled to the communications channel; and c) a receive device coupled to the communications channel; d) wherein the transmit device includes a transmitter, transmit key component generating logic circuitry, and transmission-inhibiting logic circuitry; e) wherein the receive device includes a receiver, and transmit key component generating logic circuitry; f) wherein the transmitter includes transmit combining logic circuitry for combining a transmit key component with a receive key component to form a transmit key, and encrypting logic circuitry for encrypting a message using the transmit key; and g) wherein the transmission-inhibiting logic circuitry includes means for selectively inhibiting transmission of the message by the transmitter, based on a comparison of a receive key component field with a stored sequence.
Claim 10
Dependent Claim 42 words
The system of claim 5, wherein the receiver includes receive combining logic circuitry for combining the transmit key component and the receive key component to form a receive key, and decrypting logic circuitry for decrypting an encrypted message using the receive key.
Claim 11
Dependent Claim 25 words
The system of claim 5, wherein the transmit key component includes a first pseudorandom sequence and the receive key component includes a second pseudorandom sequence.
Claim 12
Dependent Claim 16 words
The system of claim 7, wherein the first pseudorandom sequence is a maximal length pseudorandom sequence.
Claim 13
Dependent Claim 41 words
The system of claim 7, wherein the transmit key component further includes a first error detection field based on the first pseudorandom sequence, and the receive key component further includes a second error detection field based on the second pseudorandom sequence.
Claim 14
Dependent Claim 79 words
The system of claim 9, further including: a) a first test error detection sequence stored in a first memory; and b) a second test error detection sequence stored in a second memory; c) wherein the transmitter includes first comparison logic circuitry for comparing the first error detection field with the first test error detection sequence; and d) wherein the receiver includes second comparison logic circuitry for comparing the second error detection field with the second test error detection sequence.
Claim 15
Dependent Claim 27 words
The system of claim 5, wherein the transmit combining logic circuitry includes linking logic circuitry for serially linking the transmit key component and the receive key component.
Claim 16
Dependent Claim 26 words
The system of claim 5, wherein the transmit combining logic circuitry includes addition logic circuitry for adding the transmit key component and the receive key component.
Claim 17
Dependent Claim 125 words
A secure communication system, comprising: a) a transmitter; b) a transmit port connected to the transmitter; c) a receiver; d) a receive port connected to the receiver; e) transmit key component generating logic circuitry connected to the transmitter; f) inhibiting logic circuitry connected to the transmitter; and g) receive key component generating logic circuitry connected to the receiver; h) wherein the transmitter comprises combining logic circuitry for combining a transmit key component and a receive key component to form a key, and encrypting logic circuitry for encrypting a message using the key; and i) wherein the inhibiting logic circuitry includes means for selectively inhibiting transmission of the message by the transmitter, based on a comparison of a receive key component field with a stored sequence.
Claim 18
Dependent Claim 125 words
A secure communication system, comprising: a) a transmitter; b) a transmit port connected to the transmitter; c) a receiver; d) a receive port connected to the receiver; e) transmit key component generating logic circuitry connected to the transmitter; f) inhibiting logic circuitry connected to the transmitter; and g) receive key component generating logic circuitry connected to the receiver; h) wherein the transmitter comprises combining logic circuitry for combining a transmit key component and a receive key component to form a key, and encrypting logic circuitry for encrypting a message using the key; and i) wherein the inhibiting logic circuitry includes means for selectively inhibiting transmission of the message by the transmitter, based on a comparison of a receive key component field with a stored sequence.
Claim 19
Dependent Claim 21 words
The system of claim 13, further comprising a memory device for storing the transmit key component and the receive key component.
Claim 20
Dependent Claim 15 words
The system of claim 14, wherein the pseudorandom sequence is a maximal length pseudorandom sequence.
Claim 21
Dependent Claim 14 words
The system of claim 13, wherein the transmit key component includes a pseudorandom sequence.
Claim 22
Dependent Claim 21 words
The system of claim 16, wherein the transmit key component further includes an error detection field based on the pseudorandom sequence.
Claim 23
Dependent Claim 33 words
The system of claim 17, further comprising storage for a test error detection sequence, wherein the transmitter includes comparison logic circuitry for comparing the error detection field with the test error detection sequence.
Claim 24
Dependent Claim 26 words
The system of claim 13, wherein the combining logic circuitry includes key linking logic circuitry for linking the transmit key component and the receive key component.
Claim 25
Dependent Claim 25 words
The system of claim 13, wherein the combining logic circuitry includes addition logic circuitry for adding the transmit key component and the receive key component.
Claim 26
Independent Claim 132 words
A method for establishing secure communication of messages between locations, comprising: a) generating a transmit key component at a first location when a message is to be transmitted; b) transmitting the transmit key component to a second location; c) receiving the transmit key component at the second location; d) checking the transmit key component for validity; e) generating a receive key component at the second location when a transmit key component is received; f) transmitting the receive key component to the first location; g) receiving the receive key component at the first location; h) checking the receive key component for validity at the first location; and i) enabling message communication between the first location and the second location only if the transmit key component and the receive key component are both valid.
Claim 27
Independent Claim 132 words
A method for establishing secure communication of messages between locations, comprising: a) generating a transmit key component at a first location when a message is to be transmitted; b) transmitting the transmit key component to a second location; c) receiving the transmit key component at the second location; d) checking the transmit key component for validity; e) generating a receive key component at the second location when a transmit key component is received; f) transmitting the receive key component to the first location; g) receiving the receive key component at the first location; h) checking the receive key component for validity at the first location; and i) enabling message communication between the first location and the second location only if the transmit key component and the receive key component are both valid.
Claim 28
Dependent Claim 110 words
The method of claim 21, further comprising, if message communication is enabled: a) combining the transmit key component and the receive key component at the first location to form a transmit key; b) combining the transmit key component and the receive key component at the second location to form a receive key; c) forming an encrypted message by encrypting a first plain text message using the transmit key; d) transmitting the encrypted message to the second location; e) receiving the encrypted message at the second location; and f) forming a second plain text message corresponding to the first plain text message by decrypting the encrypted message using the receive key.
Claim 29
Dependent Claim 28 words
The method of claim 2, wherein combining the transmit key component and the receive key component includes serially linking the transmit key component and the receive key component.
Claim 30
Dependent Claim 29 words
The method of claim 22, wherein combining the transmit key component and the receive key component includes bitwise modulo-2 adding the transmit key component and the receive key component.

References Cited (Backward Citations)

US4417338A Cited
US4649233A Cited
US4876716A Cited
US4926475A Cited
US5150411A Cited
US5442703A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2001-07-27 2002-01-26 2002-07-28 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2005-07-27 2006-01-26 2006-07-28 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2009-07-27 2010-01-26 2010-07-28 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag