US5850451A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Enhanced cryptographic system and method with key escrow feature
Assignee: Certco Inc
•
Filing: 1997-02-19
•
Granted: 1998-12-15
•
Expires: 2017-02-19
Abstract
Abstract The invention provides a cryptographic system and method with a key escrow feature that uses a method for verifiably splitting users' private encryption keys into components and for sending those components to trusted agents chosen by the particular users, and provides a system that uses modern public key certificate management, enforced by a chip device that also self-certifies. In a preferred embodiment of this invention, the chip encrypts or decrypts only if certain conditions are met, namely, (1) if a valid "sender certificate" and a valid "recipient certificate" are input, where "valid" means that the particular user's private decryption key is provably escrowed with a specified number of escrow agents and that the master escrow center is registered and certified by the chip manufacturer, and (2) if a valid Message Control Header is generated by the sender and validated by the recipient, thereby giving authorized investigators sufficient information with which to request and obtain the escrowed keys. A preferred embodiment provides for encryption of stream-oriented data.
Inventors
- 👤 Frank Wells Sudia
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 23:03
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/02; G06Q20/38; G06Q20/382; G06Q20/3821; G06Q20/3829; H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0825; H04L9/0838; H04L9/0841; H04L9/0844; H04L9/085; H04L9/088; H04L9/0894; H04L9/32; H04L9/3247; H04L9/3263; G06F; G06F7/00; G06F7/60; G06F7/72; G06F7/724; G06F7/725
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
126 words
A method for generating verifiably trusted, stream-oriented communications among a plurality of users, comprising the steps of: escrowing at a trusted escrow center an asymmetric cryptographic key associated with each of a plurality of users; verifying each of the keys at the escrow center; certifying each of the keys upon verification; and generating an encrypted stream-oriented communication from an initiating user to a receiving user using said initiating user's cryptographic key, said communication comprising (a) an initial packet having access information to allow an outside party to decrypt the stream, and (b) a stream of subsequent packets, each subsequent packet containing information identifying the subsequent packet as associated with the stream, and wherein at least one of said subsequent packets does not include said access information.
Claim 2
Independent Claim
126 words
A method for generating verifiably trusted, stream-oriented communications among a plurality of users, comprising the steps of: escrowing at a trusted escrow center an asymmetric cryptographic key associated with each of a plurality of users; verifying each of the keys at the escrow center; certifying each of the keys upon verification; and generating an encrypted stream-oriented communication from an initiating user to a receiving user using said initiating user's cryptographic key, said communication comprising (a) an initial packet having access information to allow an outside party to decrypt the stream, and (b) a stream of subsequent packets, each subsequent packet containing information identifying the subsequent packet as associated with the stream, and wherein at least one of said subsequent packets does not include said access information.
Claim 3
Dependent Claim
21 words
The method of claim 1 wherein the communication further comprises a terminal packet having information indicating an end of the communication.
Claim 4
Dependent Claim
22 words
The method of claim 1 wherein each subsequent packet further includes unique information indicating a position of the packet within the sequence.
Claim 5
Dependent Claim
13 words
The method of claim 1 wherein each subsequent packet further includes timestamp information.
Claim 6
Dependent Claim
16 words
The method of claim 1, wherein the access information includes a hash of the initial packet.
Claim 7
Dependent Claim
20 words
The method of claim 5, wherein said hash of said initial packet is signed with the initiating user's cryptographic key.
Claim 8
Dependent Claim
14 words
The method of claim 4, wherein said access information further includes message identifying information.
Claim 9
Dependent Claim
18 words
The method of claim 7, wherein at least one of the subsequent packets includes the message identifying information.
Claim 10
Dependent Claim
22 words
The method of claim 8, wherein said information identifying the subsequent packet as associated with the stream is a packet sequence number.
Claim 11
Dependent Claim
46 words
The method of claim 1, further comprising the steps of: receiving, at the initiating user, information relating to a quality of a channel carrying the stream-oriented communication; and selectively including message identifying information in subsequent packets at a rate determined by the quality of the channel.
Claim 12
Dependent Claim
15 words
The method of claim 1, wherein packets include information associating them with the initiating user.
Claim 13
Independent Claim
135 words
A method for generating verifiably trusted, stream-oriented communications among a plurality of users, comprising the steps of: escrowing at a trusted escrow center an asymmetric cryptographic key associated with each of a plurality of users; verifying each of the keys at the escrow center; certifying each of the keys upon verification; and receiving, at a receiving user, a first encrypted stream-oriented communication from an initiating user, said communication having been encrypted using said initiating user's cryptographic key, said first communication comprising (a) an initial packet having access information to allow an outside party to decrypt the stream, and (b) a stream of subsequent packets, each subsequent packet containing information identifying the subsequent packet as associated with the stream, and wherein at least one subsequent packet of the first stream does not include said access information.
Claim 14
Independent Claim
135 words
A method for generating verifiably trusted, stream-oriented communications among a plurality of users, comprising the steps of: escrowing at a trusted escrow center an asymmetric cryptographic key associated with each of a plurality of users; verifying each of the keys at the escrow center; certifying each of the keys upon verification; and receiving, at a receiving user, a first encrypted stream-oriented communication from an initiating user, said communication having been encrypted using said initiating user's cryptographic key, said first communication comprising (a) an initial packet having access information to allow an outside party to decrypt the stream, and (b) a stream of subsequent packets, each subsequent packet containing information identifying the subsequent packet as associated with the stream, and wherein at least one subsequent packet of the first stream does not include said access information.
Claim 15
Dependent Claim
77 words
The method of claim 12 further comprising the steps of: generating a second encrypted stream-oriented communication from the receiving user to an initiating user using a cryptographic key of the receiving user, said second communication comprising (a) an initial packet having access information to allow an outside party to decrypt the second encrypted stream, and (b) a stream of subsequent packets, each subsequent packet containing information identifying the subsequent packet as associated with the second encrypted stream.
Claim 16
Dependent Claim
33 words
The method of claim 13, wherein the access information of the second encrypted stream includes a hash of the initial packet of the second encrypted stream signed with the receiving user's cryptographic key.
Claim 17
Dependent Claim
23 words
The method of claim 14, wherein the access information of the second encrypted stream includes message identifying information received from the initiating user.
Claim 18
Dependent Claim
22 words
The method of claim 15, wherein at least one of the subsequent packets of the second encrypted stream includes message identifying information.
Claim 19
Dependent Claim
29 words
The method of claim 16, wherein the information identifying a subsequent packet of the second encrypted stream as associated with the second encrypted stream is a packet sequence number.
Claim 20
Dependent Claim
20 words
The method of claim 17, wherein packets of the second encrypted stream include information associating them with the initiating user.
Claim 21
Dependent Claim
46 words
The method of claim 13, further comprising the steps of: receiving, at the receiving user, information relating to a quality of a channel carrying the stream-oriented communication; and selectively including message identifying information in subsequent packets at a rate determined by the quality of the channel.
Claim 22
Dependent Claim
39 words
The method of claim 19, wherein the information relating to a quality of the channel is continuously received and the rate at which identifying information is selectively included in subsequent packets is dynamically adjusted based upon the received information.
References Cited (Backward Citations)
US4200770A
Cited
US4218582A
Cited
US4405829A
Cited
US4748620A
Cited
US4868877A
Cited
US5005200A
Cited
US5214702A
Cited
US4995082A
Cited
US5175765A
Cited
US5001752A
Cited
US5136643A
Cited
US5214700A
Cited
US5070528A
Cited
US5150411A
Cited
US5199070A
Cited
US5164988A
Cited
US5222140A
Cited
US5261002A
Cited
US5313521A
Cited
US5276737A
Cited
US5315658A
Cited
US5276737B1
Cited
US5315658B1
Cited
US5349642A
Cited
US5557346A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-12-14 | 2002-06-15 | 2002-12-15 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-12-14 | 2006-06-15 | 2006-12-15 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-12-14 | 2010-06-15 | 2010-12-15 | $7700.00 | Window Closed / Lapsed |