US5841865A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Enhanced cryptographic system and method with key escrow feature
Assignee: Certco Inc
•
Filing: 1997-04-11
•
Granted: 1998-11-24
•
Expires: 2017-04-11
Abstract
Abstract The invention provides a cryptographic system and method with a key escrow feature that uses a method for verifiably splitting users' private keys into components and for sending those components to trusted agents chosen by the particular users, and provides a system that uses a modern public key certificate management, enforced by a chip device that also self-certifies. A preferred embodiment of this invention provides a method for generating verifiably trusted communications among a plurality of users, comprising the steps of escrowing at a trusted escrow center a plurality of asymmetric cryptographic keys to be used by a plurality of users; verifying each of said plurality of keys at the escrow center; certifying the authorization of each of said plurality of keys upon verification; and initiating a communication from each of said plurality of users using a respective one of said plurality of keys contingent upon certification. Further preferred embodiments provide for rekeying and upgrading of device firmware using a certificate system, and encryption of stream-oriented data.
Inventors
- 👤 Frank Wells Sudia
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 13:54
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/02; G06Q20/38; G06Q20/382; G06Q20/3821; G06Q20/3829; H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0825; H04L9/0838; H04L9/0841; H04L9/0844; H04L9/085; H04L9/088; H04L9/0894; H04L9/32; H04L9/3247; H04L9/3263; G06F; G06F7/00; G06F7/60; G06F7/72; G06F7/724; G06F7/725
Claims Analysis
Total Claims: 58
Claim 1
Independent Claim
81 words
A method for generating verifiably trusted communication among a plurality of users, comprising the steps of: escrowing at a trusted escrow center a plurality of secret asymmetric cryptographic keys to be used by a plurality of users; verifying each of said plurality of keys at the escrow center; certifying each of said plurality of keys upon verification; and initiating a communication from each of said plurality of users using a respective one of said plurality of keys contingent upon said certification.
Claim 2
Independent Claim
81 words
A method for generating verifiably trusted communication among a plurality of users, comprising the steps of: escrowing at a trusted escrow center a plurality of secret asymmetric cryptographic keys to be used by a plurality of users; verifying each of said plurality of keys at the escrow center; certifying each of said plurality of keys upon verification; and initiating a communication from each of said plurality of users using a respective one of said plurality of keys contingent upon said certification.
Claim 3
Independent Claim
76 words
A method for generating verifiably trusted communications among a plurality of users, comprising the steps of: escrowing at a trusted escrow center a secret asymmetric cryptographic key associated with each of a plurality of users; verifying each of the keys at the escrow center; certifying each of the keys upon verification; and initiating a secure communication from an initiating user to a receiving user contingent upon certification of keys of both the initiating and receiving users.
Claim 4
Independent Claim
76 words
A method for generating verifiably trusted communications among a plurality of users, comprising the steps of: escrowing at a trusted escrow center a secret asymmetric cryptographic key associated with each of a plurality of users; verifying each of the keys at the escrow center; certifying each of the keys upon verification; and initiating a secure communication from an initiating user to a receiving user contingent upon certification of keys of both the initiating and receiving users.
Claim 5
Dependent Claim
35 words
The method of claim 2 wherein a trusted hardware device of the initiating user performs a step of confirming certification of keys of both the initiating and receiving user prior to initiating the secure communication.
Claim 6
Dependent Claim
48 words
The method of claim 2 wherein: a certification step includes a step of an escrow center issuing an escrow certificate which certifies a key of the receiving user; and the communication initiation step includes a step of an initiating user validating the escrow certificate of the receiving user.
Claim 7
Dependent Claim
69 words
The method of claim 2 further including steps of: an authorizing entity issuing escrow center certificates for first and second escrow centers, said receiving user escrowing a key at the second escrow center; the first and second escrow centers issuing user certificates for the issuing and receiving users; and an initiating user validating the second escrow center's certificate and the receiving user's certificate prior to initiating the secure communication.
Claim 8
Dependent Claim
31 words
The method of claim 2 wherein a trusted device performs a step of confirming verification of the receiving user's key using logic within the trusted device that is resistant to compromise.
Claim 9
Dependent Claim
17 words
The method of claim 2 wherein an escrowed key is an intermediate number of a Diffie-Hellman protocol.
Claim 10
Independent Claim
96 words
A method for generating verifiably trusted communications among a plurality of users with selective non-party access, comprising the steps of: escrowing, at a trusted escrow center, secret asymmetric cryptographic keys associated with a plurality of users, each user associated with at least one key and at least a first selectable non-party to have access to the user's communications; verifying the keys at the escrow center; certifying each of the keys upon verification; initiating a trusted communication from a sending user to a recipient in a manner that permits access to the communication by the first non-party.
Claim 11
Independent Claim
96 words
A method for generating verifiably trusted communications among a plurality of users with selective non-party access, comprising the steps of: escrowing, at a trusted escrow center, secret asymmetric cryptographic keys associated with a plurality of users, each user associated with at least one key and at least a first selectable non-party to have access to the user's communications; verifying the keys at the escrow center; certifying each of the keys upon verification; initiating a trusted communication from a sending user to a recipient in a manner that permits access to the communication by the first non-party.
Claim 12
Dependent Claim
25 words
The method of claim 8 wherein the communication initiating step includes a step of sending access information encrypted by a key of the first non-party.
Claim 13
Dependent Claim
31 words
The method of claim 8 wherein the escrowing step includes a step of registering with an escrow center a trusted hardware device associated with a user and with the first non-party.
Claim 14
Dependent Claim
49 words
The method of claim 10 wherein the escrowing step includes steps of: a device originator issuing a first owner certificate identifying a trusted hardware device and the first non-party; and communicating the owner certificate to an escrow agent to identify the first non-party having access to the user's communications.
Claim 15
Dependent Claim
31 words
The method of claim 8 wherein the communication initiating step includes a step of sending information accessible to a second non-party associated with the recipient to have access to the communication.
Claim 16
Dependent Claim
49 words
The method of claim 8 further including steps of: the recipient communicating a designation of a second non-party to an escrow center along with a key of the recipient; and the escrow center including the designation of the second non-party in a certificate with the key of the recipient.
Claim 17
Dependent Claim
32 words
The method of claim 13 further including a step of communicating a certificate of the receiving user to the sending user, said certificate designating the second non-party having access to the communication.
Claim 18
Independent Claim
93 words
A method for generating verifiably trusted communications among a plurality of users with third party access, comprising the steps of: escrowing with at least one of a plurality of escrow centers a secret asymmetric cryptographic key associated with each of a plurality of users; verifying the keys at the escrow center; certifying each of the keys upon verification; initiating a trusted communication from a sending user to a receiving user using a verified key, said communication including information to recover a key of the initiating user and a key of the receiving user.
Claim 19
Independent Claim
93 words
A method for generating verifiably trusted communications among a plurality of users with third party access, comprising the steps of: escrowing with at least one of a plurality of escrow centers a secret asymmetric cryptographic key associated with each of a plurality of users; verifying the keys at the escrow center; certifying each of the keys upon verification; initiating a trusted communication from a sending user to a receiving user using a verified key, said communication including information to recover a key of the initiating user and a key of the receiving user.
Claim 20
Dependent Claim
22 words
A method as in claim 15 wherein said communication includes information identifying escrow centers of keys of the sending and receiving users.
Claim 21
Dependent Claim
20 words
A method as in claim 15 wherein said communication includes information encrypted by a key associated with an escrow center.
Claim 22
Dependent Claim
49 words
A method as in claim 15 further including steps of: recovering an escrowed key; confining the recovered key in a trusted device in a secure manner which prevents reading of the key from outside the secure device; and accessing a communication using the key contained in the trusted device.
Claim 23
Dependent Claim
30 words
A method as in claim 18 wherein the accessing step includes a step of accessing secure communications only during a limited time period, said trusted device enforcing the time limitation.
Claim 24
Dependent Claim
24 words
A method as in claim 15 further including steps of: retrieving shares of an escrowed key; and deriving a whole key from the shares.
Claim 25
Dependent Claim
21 words
A method as in claim 15 further including a step of the secure device maintaining an audit trail of accessed communications.
Claim 26
Independent Claim
79 words
A method for generating verifiably trusted communications among a plurality of users, comprising the steps of: escrowing at an escrow center a secret asymmetric cryptographic key associated with each of a plurality of users; verifying the keys at the escrow center; certifying each of the keys upon verification; and initiating a communication from an initiating user to a receiving user contingent upon a trusted device of the initiating user confirming certification of keys of the sending and receiving users.
Claim 27
Independent Claim
79 words
A method for generating verifiably trusted communications among a plurality of users, comprising the steps of: escrowing at an escrow center a secret asymmetric cryptographic key associated with each of a plurality of users; verifying the keys at the escrow center; certifying each of the keys upon verification; and initiating a communication from an initiating user to a receiving user contingent upon a trusted device of the initiating user confirming certification of keys of the sending and receiving users.
Claim 28
Dependent Claim
48 words
The method of claim 22 wherein the trusted device performs the steps of: storing a key of the escrow center within the trusted device; and using the stored escrow center key to confirm a certificate of an escrow center attesting that a receiving user's key has been verified.
Claim 29
Dependent Claim
27 words
The method of claim 22 wherein at least one of the steps of escrowing, verifying and certifying is in response to a request from the trusted device.
Claim 30
Dependent Claim
20 words
The method of claim 22 wherein the trusted device signs a data structure using a key associated with the device.
Claim 31
Dependent Claim
19 words
The method of claim 22 further including a step of the trusted device generating a key to be escrowed.
Claim 32
Dependent Claim
13 words
The method of claim 26 wherein a key is a communication encryption key.
Claim 33
Dependent Claim
12 words
The method of claim 26 wherein a key is a signature key.
Claim 34
Dependent Claim
38 words
The method of claim 26 wherein at least one of the steps requires a trusted device, and the trusted device performs the required step only after receiving authorizing information from a third party distinct from its associated user.
Claim 35
Independent Claim
86 words
A method for generating verifiably trusted communications among a plurality of users, comprising the steps of: escrowing at a trusted escrow center a secret asymmetric cryptographic key associated with each of a plurality of users; verifying the keys at the escrow center; certifying each of the keys upon verification; and initiating a communication from an initiating user to a receiving user contingent upon certification of a key used in the communication, said communication containing access information that permits access to the communication by an outside party.
Claim 36
Independent Claim
86 words
A method for generating verifiably trusted communications among a plurality of users, comprising the steps of: escrowing at a trusted escrow center a secret asymmetric cryptographic key associated with each of a plurality of users; verifying the keys at the escrow center; certifying each of the keys upon verification; and initiating a communication from an initiating user to a receiving user contingent upon certification of a key used in the communication, said communication containing access information that permits access to the communication by an outside party.
Claim 37
Dependent Claim
23 words
The method of claim 30 wherein the access information includes a designation of an escrow center of a key of the receiving user.
Claim 38
Dependent Claim
23 words
The method of claim 30 wherein the access information includes a designation of an escrow center of a key of the sending user.
Claim 39
Dependent Claim
32 words
The method of claim 30 wherein the access information includes recovery information for recovering a key escrowed at an escrow center, said recovery information encrypted by a key of the escrow center.
Claim 40
Dependent Claim
20 words
The method of claim 30 wherein the communication includes a message key encrypted by a key of the sending user.
Claim 41
Dependent Claim
20 words
The method of claim 30 wherein the communication includes a message key encrypted by a key of the receiving user.
Claim 42
Dependent Claim
24 words
The method of claim 30 wherein the communication includes a message key encrypted by a key of one not a party to the communication.
Claim 43
Dependent Claim
17 words
The method of claim 30 wherein the access information includes time information indicating a time of communication.
Claim 44
Dependent Claim
25 words
The method of claim 30 wherein the access information includes a designation of a geographic region associated with an escrow center of the receiving user.
Claim 45
Dependent Claim
24 words
The method of claim 30 wherein the access information includes a designation of geographic region associated with an escrow center of the sending user.
Claim 46
Dependent Claim
24 words
The method of claim 30 wherein a trusted device of the sending user signs access information using a key associated with the trusted device.
Claim 47
Independent Claim
93 words
A method for generating verifiably trusted communications among a plurality of users, comprising the steps of: escrowing at a trusted escrow center a secret asymmetric cryptographic key associated with each of a plurality of users; verifying the keys at the escrow center; certifying (i) each of the keys upon verification and (ii) a trusted device associated with each user; and initiating a communication from an initiating user to a recipient after certification of a key used for the communication and after confirmation of attributes of a trusted device associated with the initiating user.
Claim 48
Independent Claim
93 words
A method for generating verifiably trusted communications among a plurality of users, comprising the steps of: escrowing at a trusted escrow center a secret asymmetric cryptographic key associated with each of a plurality of users; verifying the keys at the escrow center; certifying (i) each of the keys upon verification and (ii) a trusted device associated with each user; and initiating a communication from an initiating user to a recipient after certification of a key used for the communication and after confirmation of attributes of a trusted device associated with the initiating user.
Claim 49
Dependent Claim
31 words
The method of claim 41 further including a step of an escrow center issuing a certificate for a user including the user's key and a key associated with a trusted device.
Claim 50
Dependent Claim
38 words
The method of claim 41 further including a step of an escrow center issuing a certificate for a user including information designating a selectable outside party distinct from the user to have access to communications involving the user.
Claim 51
Dependent Claim
31 words
The method of claim 41 further including a step of an escrow center issuing a certificate for a user including a key of a selectable outside party distinct from the user.
Claim 52
Dependent Claim
27 words
The method of claim 41 further including a step of an escrow center issuing a certificate including information designating a geographic region associated with the escrow center.
Claim 53
Dependent Claim
12 words
The method of claim 41 wherein the recipient is a storage device.
Claim 54
Independent Claim
89 words
A method for generating verifiably trusted communications among a plurality of users, comprising the steps of: escrowing, at trusted escrows centers, asymmetric cryptographic keys associated with a plurality of users, ones of said escrow centers belonging to a first group, others of said escrow centers belonging to a second group; verifying the keys at the escrow centers; certifying each of the keys upon verification; and communicating between a first user and a second user contingent upon the groups to which the escrow centers of sending and receiving users belong.
Claim 55
Independent Claim
89 words
A method for generating verifiably trusted communications among a plurality of users, comprising the steps of: escrowing, at trusted escrows centers, asymmetric cryptographic keys associated with a plurality of users, ones of said escrow centers belonging to a first group, others of said escrow centers belonging to a second group; verifying the keys at the escrow centers; certifying each of the keys upon verification; and communicating between a first user and a second user contingent upon the groups to which the escrow centers of sending and receiving users belong.
Claim 56
Dependent Claim
20 words
A method as in claim 47 wherein an escrow center designates its group in a certificate containing a user's key.
Claim 57
Dependent Claim
31 words
A method as in claim 47 wherein a first user initiates a communication to the second user contingent upon an escrow center's group designation in a certificate of the second user.
Claim 58
Dependent Claim
31 words
A method as in claim 47 wherein a second user completes a communication from a first user contingent upon an escrow center's group designation in a certificate of the first user.
References Cited (Backward Citations)
US4200770A
Cited
US4218582A
Cited
US4405829A
Cited
US4868877A
Cited
US5214702A
Cited
US5005200A
Cited
US4888801A
Cited
US4995082A
Cited
US5001752A
Cited
US5136643A
Cited
US5214700A
Cited
US5150411A
Cited
US5199070A
Cited
US5164988A
Cited
US5222140A
Cited
US5261002A
Cited
US5313521A
Cited
US5276737A
Cited
US5315658A
Cited
US5276737B1
Cited
US5315658B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-11-23 | 2002-05-25 | 2002-11-24 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-11-23 | 2006-05-25 | 2006-11-24 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-11-23 | 2010-05-25 | 2010-11-24 | $7700.00 | Window Closed / Lapsed |