Patent US5907620A successfully refreshed from Google Patents.
US5907620A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for enforcing the use of cryptography in an international cryptography framework
Assignee: Cheyenne Property Trust
•
Filing: 1996-08-23
•
Granted: 1999-05-25
•
Expires: 2016-08-23
Abstract
Abstract A cryptographic framework consists of four basic service elements that include a national flag card, a cryptographic unit, a host system, and a network security server. Three of the four service elements have a fundamentally hierarchical relationship. The National Flag Card (NFC) is installed into the Cryptographic Unit (CU) which, in turn, is installed into a Host System (HS). Cryptographic functions on the Host System cannot be executed without a Cryptographic Unit, which itself requires the presence of a valid National Flag Card before it's services are available. The fourth service element, a Network Security Server (NSS), can provide a range of different security services including verification of the other three service elements. Several different configurations that support policy within a cryptographic system allow the framework to be adapted to various connection schemes involving, at least, the cryptographic unit and the policy, including dedicated applications, e.g. a policy provided in a cryptographic unit having either a built-in or local smart card reader, or a policy in a remote smart card reader; and shared applications, e.g. a policy provided in a host system local smart card reader.
Inventors
- 👤 Keith Klemba
- 👤 Roger Merkling
- 👤 Helmut Fieres
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 15:46
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/6236; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3234; G06F2211/00; G06F2211/007; G06F2221/00; G06F2221/21; G06F2221/2113; Y; Y04; Y04S; Y04S40/00; Y04S40/20
Claims Analysis
Total Claims: 40
Claim 1
Independent Claim
126 words
A cryptographic apparatus for an international cryptography framework, said cryptographic apparatus providing a uniform cryptographic function that operates in a manner consistent with diverse national, regional, industry, or agency cryptographic policies, said cryptographic apparatus comprising: a policy element for enabling execution of any cryptographic scheme required by a particular national, regional, industry, or agency cryptographic policy of the domain in which said international cryptography framework is used; a cryptographic unit including a cryptographic engine, said cryptographic unit executing said cryptographic scheme, wherein said policy element is in communication with said cryptographic unit, and wherein cryptographic functions cannot be executed by said cryptographic unit in the absence of said policy element; and at least one reader for placing said policy element in communication with said cryptographic unit.
Claim 2
Dependent Claim
126 words
A cryptographic apparatus for an international cryptography framework, said cryptographic apparatus providing a uniform cryptographic function that operates in a manner consistent with diverse national, regional, industry, or agency cryptographic policies, said cryptographic apparatus comprising: a policy element for enabling execution of any cryptographic scheme required by a particular national, regional, industry, or agency cryptographic policy of the domain in which said international cryptography framework is used; a cryptographic unit including a cryptographic engine, said cryptographic unit executing said cryptographic scheme, wherein said policy element is in communication with said cryptographic unit, and wherein cryptographic functions cannot be executed by said cryptographic unit in the absence of said policy element; and at least one reader for placing said policy element in communication with said cryptographic unit.
Claim 3
Dependent Claim
16 words
The apparatus of claim 1, wherein said reader is dedicated to reading only the policy element.
Claim 4
Dependent Claim
26 words
The apparatus of claim 1, wherein said reader is a shared reader that both activates said cryptographic unit and that performs at least one other function.
Claim 5
Dependent Claim
14 words
The apparatus of claim 1, wherein said reader is built into said cryptographic unit.
Claim 6
Dependent Claim
15 words
The apparatus of claim 1, wherein said reader is located proximate to said cryptographic unit.
Claim 7
Dependent Claim
26 words
The apparatus of claim 1, wherein said reader is remote from said cryptographic unit, said cryptographic unit being activated by said policy element across a network.
Claim 8
Dependent Claim
24 words
The apparatus of claim 1, wherein said policy element is a tamper-resistant smart card to which unauthorized entry, or duplication thereof, is substantially prevented.
Claim 9
Dependent Claim
22 words
The apparatus of claim 1, wherein said policy element implements at least one additional cryptography engine in combination with said cryptographic unit.
Claim 10
Dependent Claim
124 words
A cryptographic apparatus for an international cryptography framework, said cryptographic apparatus comprising: a policy element for enabling execution of any cryptographic scheme required by a particular application, wherein said cryptographic scheme implements a cryptographic standard; a cryptographic unit including a cryptographic engine, said cryptographic unit implementing said cryptographic scheme if and only if said cryptographic unit is used in combination with a valid policy element; and a host system for executing an information technology application, said host system being in communication with said cryptographic unit and implementing said cryptographic scheme if and only if said host system is used with combination with a cryptographic unit and a valid policy element; and a reader for placing said policy element in communication with said cryptographic unit.
Claim 11
Dependent Claim
124 words
A cryptographic apparatus for an international cryptography framework, said cryptographic apparatus comprising: a policy element for enabling execution of any cryptographic scheme required by a particular application, wherein said cryptographic scheme implements a cryptographic standard; a cryptographic unit including a cryptographic engine, said cryptographic unit implementing said cryptographic scheme if and only if said cryptographic unit is used in combination with a valid policy element; and a host system for executing an information technology application, said host system being in communication with said cryptographic unit and implementing said cryptographic scheme if and only if said host system is used with combination with a cryptographic unit and a valid policy element; and a reader for placing said policy element in communication with said cryptographic unit.
Claim 12
Dependent Claim
16 words
The apparatus of claim 9, wherein said reader is dedicated to reading only the policy element.
Claim 13
Dependent Claim
26 words
The apparatus of claim 9, wherein said reader is a shared reader that both activates said cryptographic unit and that performs at least one other function.
Claim 14
Dependent Claim
14 words
The apparatus of claim 9, wherein said reader is built into said cryptographic unit.
Claim 15
Dependent Claim
15 words
The apparatus of claim 9, wherein said reader is located proximate to said cryptographic unit.
Claim 16
Dependent Claim
26 words
The apparatus of claim 9, wherein said reader is remote from said cryptographic unit, said cryptographic unit being activated by said policy element across a network.
Claim 17
Dependent Claim
24 words
The apparatus of claim 9, wherein said policy element is a tamper-resistant smart card to which unauthorized entry, or duplication thereof, is substantially prevented.
Claim 18
Dependent Claim
21 words
The apparatus claim 9, wherein said policy element implements at least one additional cryptography engine in combination with said cryptographic unit.
Claim 19
Dependent Claim
32 words
The apparatus of claim 9, wherein said cryptographic scheme may comprise any of a cryptographic algorithm, a specified level of cryptography, a national policy, information personalization, and system and network access metering.
Claim 20
Dependent Claim
133 words
In a cryptographic apparatus for an international cryptography framework a method for providing a uniform cryptographic function that operates in a manner consistent with diverse national, regional, industry, or agency cryptography policies, said method comprising the steps of: providing a policy element for enabling operation of a cryptographic scheme required by a particular national, regional, industry, or agency cryptographic policy of the domain in which the cryptographic function is used; using a reader to place said policy element in communication with a cryptographic unit; operating said policy element in combination with said cryptographic unit, said cryptographic unit including a cryptographic engine, said cryptographic unit executing said encryption scheme; and executing an information technology application with said host system, said host system being in communication with said cryptographic unit via an application programming interface.
Claim 21
Dependent Claim
133 words
In a cryptographic apparatus for an international cryptography framework a method for providing a uniform cryptographic function that operates in a manner consistent with diverse national, regional, industry, or agency cryptography policies, said method comprising the steps of: providing a policy element for enabling operation of a cryptographic scheme required by a particular national, regional, industry, or agency cryptographic policy of the domain in which the cryptographic function is used; using a reader to place said policy element in communication with a cryptographic unit; operating said policy element in combination with said cryptographic unit, said cryptographic unit including a cryptographic engine, said cryptographic unit executing said encryption scheme; and executing an information technology application with said host system, said host system being in communication with said cryptographic unit via an application programming interface.
Claim 22
Dependent Claim
16 words
The method of claim 18, wherein said reader is dedicated to reading only the policy element.
Claim 23
Dependent Claim
26 words
The method of claim 18, wherein said reader is a shared reader that both activates said cryptographic unit and that performs at least one other function.
Claim 24
Dependent Claim
14 words
The method of claim 18, wherein said reader is built into said cryptographic unit.
Claim 25
Dependent Claim
15 words
The method of claim 18, wherein said reader is located proximate to said cryptographic unit.
Claim 26
Dependent Claim
26 words
The method of claim 18, wherein said reader is remote from said cryptographic unit, said cryptographic unit being activated by said policy element across a network.
Claim 27
Dependent Claim
24 words
The method of claim 18, wherein said policy element is a tamper-resistant smart card to which unauthorized entry or duplication thereof, is substantially prevented.
Claim 28
Dependent Claim
70 words
In a cryptographic apparatus for an international cryptography framework, a policy mechanism for controlling operation of a cryptographic unit, said policy element comprising: a policy element; and at least one reader for connecting said policy element to said cryptographic unit, wherein said policy mechanism is placed in communication with said cryptographic unit, and wherein cryptographic functions cannot be executed by said cryptographic unit in the absence of said policy element.
Claim 29
Dependent Claim
70 words
In a cryptographic apparatus for an international cryptography framework, a policy mechanism for controlling operation of a cryptographic unit, said policy element comprising: a policy element; and at least one reader for connecting said policy element to said cryptographic unit, wherein said policy mechanism is placed in communication with said cryptographic unit, and wherein cryptographic functions cannot be executed by said cryptographic unit in the absence of said policy element.
Claim 30
Dependent Claim
17 words
The policy mechanism of claim 25, wherein said reader is dedicated to reading only the policy element.
Claim 31
Dependent Claim
27 words
The policy mechanism of claim 25, wherein said reader is a shared reader that both activates said cryptographic unit and that performs at least one other function.
Claim 32
Dependent Claim
15 words
The policy mechanism of claim 25, wherein said reader is built into said cryptographic unit.
Claim 33
Dependent Claim
16 words
The policy mechanism of claim 25, wherein said reader is located proximate to said cryptographic unit.
Claim 34
Dependent Claim
27 words
The policy mechanism of claim 25, wherein said reader is remote from said cryptographic unit, said cryptographic unit being activated by said policy element across a network.
Claim 35
Dependent Claim
25 words
The policy mechanism of claim 25, wherein said policy element is a tamper-resistant smart card to which unauthorized entry or duplication thereof, is substantially impossible.
Claim 36
Dependent Claim
22 words
The policy mechanism of claim 25, wherein said policy element implements at least one cryptographic engine in combination with said cryptographic unit.
Claim 37
Dependent Claim
20 words
The policy mechanism of claim 25, wherein said policy element includes a cryptographic function and at least one other function.
Claim 38
Dependent Claim
28 words
The policy mechanism of claim 33, said at least one other function including any of establishing identity, establishing privileges, establishing rights, enabling capabilities, and creating an audit trail.
Claim 39
Dependent Claim
19 words
The policy mechanism of claim 25, wherein said policy element controls the operation of more than one cryptographic unit.
Claim 40
Dependent Claim
33 words
The policy mechanism of claim 25, wherein said policy element controls the operation of a prime cryptographic unit which, in turn, activates and controls the operation or one or more other cryptographic units.
References Cited (Backward Citations)
US5164988A
Cited
US5651068A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-05-24 | 2002-11-23 | 2003-05-25 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-05-24 | 2006-11-23 | 2007-05-25 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-05-24 | 2010-11-23 | 2011-05-25 | $7700.00 | Window Closed / Lapsed |