US5809140A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Session key distribution using smart cards
Assignee: Nytell Software LLC
•
Filing: 1996-10-15
•
Granted: 1998-09-15
•
Expires: 2016-10-15
Abstract
Abstract Methods and apparatus are disclosed for providing secure session key distribution using a smart circuit card or other intelligent device. First and second hosts communicate with each other and with a server over a communication network. The first host initiates the session key distribution process by transmitting a session identifier to the server. The first host uses a first smart card storing the first host secret key to generate a first message in the form of a random bit stream which is transmitted to the second host. The server generates a second message as a function of the server secret key and the session identifier, and transmits it to the first host. The second host uses a second smart card storing the second host secret key to generate a third message as a function of the second host secret key and the first message, and transmits the third message to the first host. The first host then uses the first smart card to generate a potential session key pair as a function of the second and third messages and the first host secret key. If the first host accepts the session key pair, it transmits one of the session keys of the pair to the second host. The second host uses the second smart card to generate a validity indication as a function of the transmitted session key and a portion of the third message, and accepts or rejects the session key depending upon the result. The first and second cards may be implemented as stateless devices which include only limited memory, processing and input/output capabilities.
Inventors
- 👤 Aviel D. Rubin
- 👤 Victor J. Shoup
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-04 18:05
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0827; H04L9/083; H04L9/0838
Claims Analysis
Total Claims: 30
Claim 1
Independent Claim
181 words
A method of establishing a secure session key between first and second hosts which communicate over a network, the method comprising the steps of: transmitting a session identifier from at least one of the first and the second hosts to a server connected to the network; transmitting a first message from the first host to the second host, wherein the first message is a random bit string generated in the first host; receiving in the first host a second message from the server, wherein the second message is generated in the server as a function of a server secret key and the session identifier received from at least one of the first and second hosts; receiving in the first host a third message from the second host, wherein the third message is generated in the second host as a function of a second host secret key and the first message received from the first host; and generating a potential session key pair in the first host as a function of the second and third messages and a first host secret key.
Claim 2
Independent Claim
181 words
A method of establishing a secure session key between first and second hosts which communicate over a network, the method comprising the steps of: transmitting a session identifier from at least one of the first and the second hosts to a server connected to the network; transmitting a first message from the first host to the second host, wherein the first message is a random bit string generated in the first host; receiving in the first host a second message from the server, wherein the second message is generated in the server as a function of a server secret key and the session identifier received from at least one of the first and second hosts; receiving in the first host a third message from the second host, wherein the third message is generated in the second host as a function of a second host secret key and the first message received from the first host; and generating a potential session key pair in the first host as a function of the second and third messages and a first host secret key.
Claim 3
Dependent Claim
48 words
The method of claim 1 wherein the step of generating the potential session key pair further includes the step of applying the second and third messages as inputs to a first card which is associated with the first host and stores the secret key for the first host.
Claim 4
Dependent Claim
35 words
The method of claim 2 wherein the card is implemented as a stateless processing device such that the potential session key pair depends only on the second and third messages and no previously received messages.
Claim 5
Dependent Claim
37 words
The method of claim 2 wherein the card further includes a memory for storing the first host secret key and a processor for generating the potential session key pair in response to the second and third messages.
Claim 6
Dependent Claim
76 words
The method of claim 1 further including the steps of: accepting the session key pair in the first host if the first host determines that the potential session key pair corresponds to a valid session key pair, and rejecting the session key pair in the first host otherwise; and transmitting one of the session keys of the potential session key pair to the second host if the session key pair is accepted in the first host.
Claim 7
Dependent Claim
81 words
The method of claim 5 further including the steps of: receiving in the second host a transmitted session key of a session key pair accepted in the first host; generating in the second host as a function of the transmitted session key and at least a portion of the third message an indication of the validity of the transmitted session key; and accepting or rejecting the transmitted session key in the second host depending upon the value of the validity indication.
Claim 8
Dependent Claim
43 words
The method of claim 1 further including the step of generating the first message in a first card which is associated with the first host and stores the first host secret key, the first card providing an output corresponding to the first message.
Claim 9
Dependent Claim
50 words
The method of claim 1 further including the step of generating the third message in a second card which is associated with the second host and stores the second host secret key, the second card receiving the first message as an input and providing the third message as an output.
Claim 10
Dependent Claim
56 words
The method of claim 1 further including the step of generating the potential session key pair in a first card which is associated with the first host and stores the first host secret key, the first card receiving the second and third messages as an input and providing the potential session key pair as an output.
Claim 11
Dependent Claim
69 words
The method of claim 6 wherein the step of generating in the second host an indication of the validity of the transmitted session key further includes the step of generating the indication in a second card associated with the second host, the second card receiving the transmitted session key and at least a portion of the third message as inputs and providing an output corresponding to the validity indication.
Claim 12
Independent Claim
174 words
An apparatus for use in establishing a secure session key between first and second hosts which communicate over a network, the apparatus comprising: a processor associated with the first host, the processor operative to transmit a session identifier to a server connected to the network, to transmit a first message to the second host, wherein the first message is a random bit string generated in the first host, to receive a second message from the server, wherein the second message is generated in the server as a function of a server secret key and the session identifier, and to receive a third message from the second host, wherein the third message is generated in the second host as a function of a second host secret key and the first message received from the first host; and a card connected to communicate with the processor, the card including a memory for storing the first host secret key, inputs for receiving the first and second messages, and an output corresponding to a potential session key pair.
Claim 13
Independent Claim
174 words
An apparatus for use in establishing a secure session key between first and second hosts which communicate over a network, the apparatus comprising: a processor associated with the first host, the processor operative to transmit a session identifier to a server connected to the network, to transmit a first message to the second host, wherein the first message is a random bit string generated in the first host, to receive a second message from the server, wherein the second message is generated in the server as a function of a server secret key and the session identifier, and to receive a third message from the second host, wherein the third message is generated in the second host as a function of a second host secret key and the first message received from the first host; and a card connected to communicate with the processor, the card including a memory for storing the first host secret key, inputs for receiving the first and second messages, and an output corresponding to a potential session key pair.
Claim 14
Dependent Claim
35 words
The apparatus of claim 11 wherein the card is implemented as a stateless processing device such that the potential session key pair depends only on the second and third messages and no previously received messages.
Claim 15
Dependent Claim
29 words
The apparatus of claim 11 wherein the card further includes a card processor for generating the potential session key pair as a function of the second and third messages.
Claim 16
Dependent Claim
65 words
The apparatus of claim 11 wherein the processor is further operative to accept the session key pair if the potential session key pair is determined to correspond to a valid session key pair, to reject the session key pair otherwise, and to transmit one of the session keys of the potential session key pair to the second host if the session key pair is accepted.
Claim 17
Independent Claim
185 words
A method of establishing a secure session key between first and second hosts which communicate over a network, the method comprising the steps of: transmitting a session identifier from at least one of the first and the second hosts to a server connected to the network; receiving in the second host a first message from the first host, wherein the first message is a random bit string generated in the first host, and further wherein the first host receives from the server a second message generated in the server as a function of a server secret key and the session identifier; transmitting from the second host to the first host a third message from the second host, wherein the third message is generated in the second host as a function of a second host secret key and the first message received from the first host; and receiving in the second host a session key generated in the first host as a function of the second and third messages and a first host secret key, wherein the session key has been accepted in the first host.
Claim 18
Independent Claim
185 words
A method of establishing a secure session key between first and second hosts which communicate over a network, the method comprising the steps of: transmitting a session identifier from at least one of the first and the second hosts to a server connected to the network; receiving in the second host a first message from the first host, wherein the first message is a random bit string generated in the first host, and further wherein the first host receives from the server a second message generated in the server as a function of a server secret key and the session identifier; transmitting from the second host to the first host a third message from the second host, wherein the third message is generated in the second host as a function of a second host secret key and the first message received from the first host; and receiving in the second host a session key generated in the first host as a function of the second and third messages and a first host secret key, wherein the session key has been accepted in the first host.
Claim 19
Dependent Claim
50 words
The method of claim 15 further including the step of generating the third message in a second card which is associated with the second host and stores the second host secret key, the second card receiving the first message as an input and providing the third message as an output.
Claim 20
Dependent Claim
35 words
The method of claim 16 wherein the card is implemented as a stateless processing device such that the potential session key pair depends only on the second and third messages and no previously received messages.
Claim 21
Dependent Claim
37 words
The method of claim 16 wherein the card further includes a memory for storing the first host secret key and a processor for generating the potential session key pair in response to the second and third messages.
Claim 22
Dependent Claim
76 words
The method of claim 15 further including the steps of: accepting the session key pair in the first host if the first host determines that the potential session key pair corresponds to a valid session key pair, and rejecting the session key pair in the first host otherwise; and transmitting one of the session keys of the potential session key pair to the second host if the session key pair is accepted in the first host.
Claim 23
Dependent Claim
62 words
The method of claim 15 further including the steps of: generating in the second host as a function of the transmitted session key and at least a portion of the third message an indication of the validity of the transmitted session key; and accepting or rejecting the transmitted session key in the second host depending upon the value of the validity indication.
Claim 24
Dependent Claim
69 words
The method of claim 20 wherein the step of generating in the second host an indication of the validity of the transmitted session key further includes the step of generating the indication in a second card associated with the second host, the second card receiving the transmitted session key and at least a portion of the third message as inputs and providing an output corresponding to the validity indication.
Claim 25
Independent Claim
206 words
An apparatus for use in establishing a secure session key between first and second hosts which communicate over a network, the apparatus comprising: a processor associated with the second host, the processor operative to transmit a session identifier to a server connected to the network, to receive a first message from the first host, wherein the first message is a random bit string generated in the first host, and further wherein the first host receives from the server a second message generated in the server as a function of a server secret key and the session identifier, to transmit to the first host a third message, wherein the third message is generated in the second host as a function of a second host secret key and the first message received from the first host, and to receive a session key generated in the first host as a function of the second and third messages and a first host secret key, wherein the session key has been accepted in the first host; and a card connected to communicate with the processor, the card including a memory for storing the second host secret key, inputs for receiving the first message, and an output corresponding to the third message.
Claim 26
Independent Claim
206 words
An apparatus for use in establishing a secure session key between first and second hosts which communicate over a network, the apparatus comprising: a processor associated with the second host, the processor operative to transmit a session identifier to a server connected to the network, to receive a first message from the first host, wherein the first message is a random bit string generated in the first host, and further wherein the first host receives from the server a second message generated in the server as a function of a server secret key and the session identifier, to transmit to the first host a third message, wherein the third message is generated in the second host as a function of a second host secret key and the first message received from the first host, and to receive a session key generated in the first host as a function of the second and third messages and a first host secret key, wherein the session key has been accepted in the first host; and a card connected to communicate with the processor, the card including a memory for storing the second host secret key, inputs for receiving the first message, and an output corresponding to the third message.
Claim 27
Dependent Claim
33 words
The apparatus of claim 22 wherein the card is implemented as a stateless processing device such that the potential session key pair depends only on the first message and no previously received messages.
Claim 28
Dependent Claim
28 words
The apparatus of claim 23 wherein the card further includes a memory for storing the second host secret key and a card processor for generating the third message.
Claim 29
Dependent Claim
49 words
The apparatus of claim 22 wherein the processor is further operative to accept or reject the transmitted session key depending upon the value of a validity indication, wherein the validity indication is generated as a function of the session key and at least a portion of the third message.
Claim 30
Dependent Claim
33 words
The apparatus of claim 25 wherein the card includes inputs for receiving the transmitted session key and at least a portion of the third message and an output corresponding to the validity indication.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-09-14 | 2002-03-16 | 2002-09-15 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-09-14 | 2006-03-16 | 2006-09-15 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-09-14 | 2010-03-16 | 2010-09-15 | $7700.00 | Window Closed / Lapsed |