US5850443A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Key management system for mixed-trust environments
Assignee: Nortel Networks Ltd
•
Filing: 1996-08-15
•
Granted: 1998-12-15
•
Expires: 2016-08-15
Abstract
Abstract The invention allows for transporting, in different degrees of security strength, a symmetric key encrypted using an asymmetric encryption technique, and along with this transporting ciphertext derived from plaintext encrypted under this symmetric key. The encryptor encrypts the plaintext using a symmetric whose strength is commensurate with the trust level of the environment in which the encryptor is located. The encryptor encrypts this symmetric key for one or more intended recipients using an asymmetric technique commensurate with a high-trust environment. In the case of the encryptor residing in the low-trust environment, the encryptor additionally encrypts this symmetric key using an asymmetric encryption public key of the originator itself (or alternatively, that of a third party). Decryption equipment in all environments uses the decryption process corresponding to an algorithm identifier included by the originator. In all cases, the asymmetric encryption/decryption process used for each specific recipient is of a strength commensurate with the trust level of that recipient's own environment.
Inventors
- 👤 Paul C. Van Oorschot
- 👤 Michael James Wiener
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 13:18
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/06; H04L9/0618; H04L9/0625; H04L9/08; H04L9/0816; H04L9/0838; H04L9/088; H04L9/30; H04L9/3006; H04L9/302
Claims Analysis
Total Claims: 26
Claim 1
Independent Claim
122 words
A method of managing cryptographic keys between first and second parties in communication environments of different degrees of trust comprising the steps of: the first party encrypting a cryptographic key by using a low trust encryption public key of the first party having a first key length, to generate a first party encrypted cryptographic key, encrypting the cryptographic key using a higher trust encryption public key of the second party having a second key length longer than the first key length to generate a second party encrypted cryptographic key, and concatenating the first party and second party encrypted cryptographic keys, and the second party, upon reception of the concatenated data, decrypting the second party encrypted cryptographic key to recover the cryptographic key.
Claim 2
Independent Claim
122 words
A method of managing cryptographic keys between first and second parties in communication environments of different degrees of trust comprising the steps of: the first party encrypting a cryptographic key by using a low trust encryption public key of the first party having a first key length, to generate a first party encrypted cryptographic key, encrypting the cryptographic key using a higher trust encryption public key of the second party having a second key length longer than the first key length to generate a second party encrypted cryptographic key, and concatenating the first party and second party encrypted cryptographic keys, and the second party, upon reception of the concatenated data, decrypting the second party encrypted cryptographic key to recover the cryptographic key.
Claim 3
Dependent Claim
58 words
The method according to claim 1, wherein the cryptographic key is an encryption key, and comprising further steps of: the first party encrypting plaintext into ciphertext using the cryptographic key, concatenating the ciphertext to the first party and second party encrypted cryptographic keys, the second party decrypting the ciphertext into the plaintext using the thus recovered cryptographic key.
Claim 4
Dependent Claim
34 words
The method according to claim 2 wherein the cryptographic key is a symmetric encryption key and the first and second parties use a symmetric encryption process for encrypting the plaintext or decrypting the ciphertext.
Claim 5
Dependent Claim
23 words
The method according to claim 3 wherein the symmetric encryption process is a block cipher from the group of DES, CAST and RC2.
Claim 6
Dependent Claim
28 words
The method according to claim 1 wherein the first and second parties use distinct asymmetric encryption processes to generate the first party and second party encrypted cryptographic keys.
Claim 7
Dependent Claim
19 words
The method according to claim 5 wherein the asymmetric encryption processes are any of RSA encryption and ElGamal encryption.
Claim 8
Dependent Claim
91 words
The method according to claim 1 wherein there are three or more parties in communication environments of different degrees of trust comprising steps of: for the third, and other remaining parties separately encrypting the cryptographic key using an encryption public key of each of these parties to generate a second party, third party and additional encrypted cryptographic keys, and concatenating the first, second, and additional encrypted cryptographic keys, the second and subsequent parties each, upon reception of the concatenated data, decrypting the corresponding encrypted cryptographic key to recover the cryptographic key.
Claim 9
Independent Claim
164 words
A method of managing cryptographic keys between first and second parties in communication environments of different degrees of trust comprising the steps of: the first party selecting a cryptographic key, creating a data field consisting in part of the cryptographic key, encrypted under a low trust encryption public key of the first party having a first key length, combining, using a reversible function, the cryptographic key with additional data derived in part or in whole from the data field to generate a levelled key, encrypting the levelled key using a high trust encryption public key of the second party having a second key length longer than the first key length to generate a second party encrypted levelled key, concatenating the data field, and second party encrypted levelled key, the second party, upon reception of the concatenated data, decrypting the second party encrypted levelled key to recover the levelled key, and recovering the cryptographic key using the received data field and the recovered levelled key.
Claim 10
Independent Claim
164 words
A method of managing cryptographic keys between first and second parties in communication environments of different degrees of trust comprising the steps of: the first party selecting a cryptographic key, creating a data field consisting in part of the cryptographic key, encrypted under a low trust encryption public key of the first party having a first key length, combining, using a reversible function, the cryptographic key with additional data derived in part or in whole from the data field to generate a levelled key, encrypting the levelled key using a high trust encryption public key of the second party having a second key length longer than the first key length to generate a second party encrypted levelled key, concatenating the data field, and second party encrypted levelled key, the second party, upon reception of the concatenated data, decrypting the second party encrypted levelled key to recover the levelled key, and recovering the cryptographic key using the received data field and the recovered levelled key.
Claim 11
Dependent Claim
67 words
The method according to claim 8, wherein the cryptographic key is an encryption key, and comprising further steps of: the first party encrypting a plaintext into a ciphertext using the cryptographic key, concatenating the ciphertext to the data field and the second party encrypted levelled key, the second party, upon reception of the concatenated data, decrypting the ciphertext into the plaintext using the thus recovered cryptographic key.
Claim 12
Dependent Claim
34 words
The method according to claim 9 wherein the cryptographic key is a symmetric encryption key and the first and second parties use a symmetric encryption process for encrypting the plaintext or decrypting the ciphertext.
Claim 13
Dependent Claim
23 words
The method according to claim 10 wherein the symmetric encryption process is a block cipher from the group of DES, CAST and RC2.
Claim 14
Dependent Claim
40 words
The method according to claim 8 wherein the first party uses distinct asymmetric encryption processes to generate the second party encrypted levelled key and the second party uses an asymmetric decryption process to decrypt the second party encrytped levelled key.
Claim 15
Dependent Claim
19 words
The method according to claim 12 wherein the asymmetric encryption processes are any of RSA encryption, and ElGamal encryption.
Claim 16
Dependent Claim
91 words
The method according to claim 8 wherein the step of combining using a reversible process to generate a levelled key comprises further steps of: encrypting the cryptographic key using the low trust encryption public key of the first party having the first key length, concatenating the resulting data to said low trust encryption public key itself, hashing a resulting data string using a cryptographic hash function, resulting in a hash value, combining a subset of the hash value, using an exclusive-OR operation, with said cryptographic key, to generate the levelled key.
Claim 17
Dependent Claim
21 words
The method according to claim 14 where the hash function used is from the group of SHA-1 and MD5, hash functions.
Claim 18
Dependent Claim
96 words
The method according to claim 8 wherein there are three or more parties in communication environments of different degrees of trust, comprising steps of: for third, and other remaining parties separately encrypting the levelled key using an encryption public key of each of these parties to generate a third party and additional encrypted levelled keys, and concatenating the second party, third party, and additional encrypted levelled keys, the second and subsequent parities each, upon reception of the concatenated data, decrypting the corresponding encrypted levelled key, and recovering the corresponding cryptographic key using the decrypted levelled key.
Claim 19
Dependent Claim
54 words
The method according to claim 8 wherein the data field consists of a low trust encryption public key of the first party having a key length shorter than a key length of a high trust encryption public key, concatenated to the encrypted value of the cryptographic key under the low trust encryption public key.
Claim 20
Dependent Claim
61 words
The method according to claim 8 comprising further steps of the first party encrypting the levelled key by using a high trust encryption public key of the first party having a key length larger than the low trust encryption public key to generate a first party encrypted levelled key, and inserting the first party encrypted levelled key into the concatenated data.
Claim 21
Independent Claim
125 words
An apparatus for complementary cryptographic operations, in different degrees of security strength comprising: first encryption means for encrypting a cryptographic key by using a low trust encryption public key of the first party having a first key length, to generate a first party encrypted cryptographic key, second encryption means for encrypting the cryptographic key using a higher trust encryption public key of the second party having a second key length longer than the first key length to generate a second party encrypted cryptographic key, and means, responsive to the first and second encryption means, for concatenating the first party and second party encrypted cryptographic keys, and means, responsive to the concatenated data, for decrypting the second party encrypted cryptographic key to recover the cryptographic key.
Claim 22
Independent Claim
125 words
An apparatus for complementary cryptographic operations, in different degrees of security strength comprising: first encryption means for encrypting a cryptographic key by using a low trust encryption public key of the first party having a first key length, to generate a first party encrypted cryptographic key, second encryption means for encrypting the cryptographic key using a higher trust encryption public key of the second party having a second key length longer than the first key length to generate a second party encrypted cryptographic key, and means, responsive to the first and second encryption means, for concatenating the first party and second party encrypted cryptographic keys, and means, responsive to the concatenated data, for decrypting the second party encrypted cryptographic key to recover the cryptographic key.
Claim 23
Independent Claim
164 words
A method of managing cryptographic keys between first and second parties in communication environments of different degrees of trust comprising the steps of: the first party selecting a cryptographic key, creating a data field consisting in part of the cryptographic key, encrypted under a low trust encryption public key of the first party having a first key length, combining, using a reversible function, the cryptographic key with additional data derived in part or in whole from the data field to generate a levelled key, encrypting the levelled key using a high trust encryption public key of the second party having a second key length longer than the first key length to generate a second party encrypted levelled key, concatenating the data field, and second party encrypted levelled key, the second party, upon reception of the concatenated data, decrypting the second party encrypted levelled key to recover the levelled key, and recovering the cryptographic key using the received data field and the recovered levelled key.
Claim 24
Independent Claim
164 words
A method of managing cryptographic keys between first and second parties in communication environments of different degrees of trust comprising the steps of: the first party selecting a cryptographic key, creating a data field consisting in part of the cryptographic key, encrypted under a low trust encryption public key of the first party having a first key length, combining, using a reversible function, the cryptographic key with additional data derived in part or in whole from the data field to generate a levelled key, encrypting the levelled key using a high trust encryption public key of the second party having a second key length longer than the first key length to generate a second party encrypted levelled key, concatenating the data field, and second party encrypted levelled key, the second party, upon reception of the concatenated data, decrypting the second party encrypted levelled key to recover the levelled key, and recovering the cryptographic key using the received data field and the recovered levelled key.
Claim 25
Independent Claim
125 words
An apparatus for complementary cryptographic operations in different degrees of security strength comprising: first encryption means for encrypting a cryptographic key by using a low trust encryption public key of the first party having a first key length, to generate a first party encrypted cryptographic key, second encryption means for encrypting the cryptographic key using a higher trust encryption public key of the second party having a second key length longer than the first key length to generate a second party encrypted cryptographic key, and means, responsive to the first and second encryption means, for concatenating the first party and second party encrypted cryptographic keys, and means, responsive to the concatenated data, for decrypting the second party encrypted cryptographic key to recover the cryptographic key.
Claim 26
Independent Claim
125 words
An apparatus for complementary cryptographic operations in different degrees of security strength comprising: first encryption means for encrypting a cryptographic key by using a low trust encryption public key of the first party having a first key length, to generate a first party encrypted cryptographic key, second encryption means for encrypting the cryptographic key using a higher trust encryption public key of the second party having a second key length longer than the first key length to generate a second party encrypted cryptographic key, and means, responsive to the first and second encryption means, for concatenating the first party and second party encrypted cryptographic keys, and means, responsive to the concatenated data, for decrypting the second party encrypted cryptographic key to recover the cryptographic key.
References Cited (Backward Citations)
US3962539A
Cited
US4200770A
Cited
US4405829A
Cited
US4882779A
Cited
US4716588A
Cited
US4914697A
Cited
US5199069A
Cited
US5222136A
Cited
US5416841A
Cited
US5511123A
Cited
US5659618A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-12-14 | 2002-06-15 | 2002-12-15 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-12-14 | 2006-06-15 | 2006-12-15 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-12-14 | 2010-06-15 | 2010-12-15 | $7700.00 | Window Closed / Lapsed |