Method and apparatus for creating a secure autonomous network entity of a network component system

Claim 3

The method of claim 1 farther comprising the step of reversing the cryptographically-transformed information to recover the sensitive information using the inputs of the key encapsulated within the autonomous network entity.

Claim 4

The method of claim 2 further comprising the step of storing the autonomous network entity as a visual object on the computer.

Claim 5

The method of claim 3 further comprising the step of manipulating the visual object with a pointing device to display contents of the autonomous network entity on a screen of the computer.

Claim 6

The method of claim 4 further comprising the step of transferring the autonomous network entity among computer platforms and their processes without compromising the security of the sensitive information.

Claim 7

The method of claim 1 wherein the step of cryptographically-transforming comprises the step of generating a first random number using a random number generator.

Claim 8

The method of claim 6 wherein the step of cryptographically-transforming further comprises the step of generating a second random number using the first random number as a seed into a random number generator mechanism.

Claim 9

The method of claim 7 wherein the step of cryptographically-transforming further comprises the step of digesting the second random number using a cryptographically-secure message digest function to produce the key.

Claim 10

The method of claim 7 wherein the step of cryptographically-transforming further comprises the step of digesting the second random number in addition to other inputs using a cryptographically-secure message digest function to produce the key.

Claim 11

The method of claim 9 wherein the other inputs comprise non-encrypted information.

Claim 12

The method of claim 10 wherein the step of cryptographically-transforming further comprises the step of encrypting the sensitive information using the key in connection with a secret key algorithm.

Claim 13

The method of claim 11 wherein the inputs of the key include the first random number and wherein the step of encapsulating comprises the step of storing the encrypted information and the first random number in various fields of the network entity.

Claim 14

A computer coupled to a network, the computer comprising: a memory for storing data and programs, including an operating system; a processing unit responsive to the programs for controlling and coordinating the operation of the computer; a software component layer coupled in cooperating relation with the operating system; and a data structure created by the software component layer, the data structure containing a reference to a location of a network resource on the computer network, the data structure further encapsulating cryptographically-transformed information along with inputs of a key used to reverse the transformation.

Claim 15

A computer coupled to a network, the computer comprising: a memory for storing data and programs, including an operating system; a processing unit responsive to the programs for controlling and coordinating the operation of the computer; a software component layer coupled in cooperating relation with the operating system; and a data structure created by the software component layer, the data structure containing a reference to a location of a network resource on the computer network, the data structure further encapsulating cryptographically-transformed information along with inputs of a key used to reverse the transformation.

Claim 16

Apparatus for creating an autonomous network entity configured to securely store sensitive information provided by a user of a computer coupled to a network having at least one network resource, the apparatus comprising: means for creating an encapsulated entity component containing a reference to a location of the at least one network resource on the computer network; means for cryptographically-transforming the sensitive information using a key generated in accordance with inputs used in a multi-stage key generation process; and means for encapsulating the cryptographically-transformed information, along with the inputs of the key within the encapsulated entity to create the autonomous network entity, wherein the kev is retrievable solely by subjecting the inputs contained within the encapsulated entity to the multi-stage key generation process, thereby allowing the sensitive information to be recovered.

Claim 17

Apparatus for creating an autonomous network entity configured to securely store sensitive information provided by a user of a computer coupled to a network having at least one network resource, the apparatus comprising: means for creating an encapsulated entity component containing a reference to a location of the at least one network resource on the computer network; means for cryptographically-transforming the sensitive information using a key generated in accordance with inputs used in a multi-stage key generation process; and means for encapsulating the cryptographically-transformed information, along with the inputs of the key within the encapsulated entity to create the autonomous network entity, wherein the kev is retrievable solely by subjecting the inputs contained within the encapsulated entity to the multi-stage key generation process, thereby allowing the sensitive information to be recovered.

Claim 18

The apparatus of claim 14 further comprising means for reversing the cryptographically-transformed information to recover the sensitive information using the inputs of the key encapsulated within the autonomous network entity.

Claim 19

The apparatus of claim 15 wherein the cryptographically-transforming means comprises means for generating a first random number using a random number generator.

Claim 20

The apparatus of claim 16 wherein the cryptographically-transforming means further comprises means for generating a second random number using the first random number as a seed into a random number generator mechanism.

Claim 21

The apparatus of claim 17 wherein the cryptographically-transforming means further comprises means for digesting the second random number using a cryptographically-secure message digest function to produce the key.

Claim 22

The apparatus of claim 17 wherein the cryptographically-transforming means further comprises means for encrypting the sensitive information using the key in connection with a secret key algorithm.

Claim 23

The apparatus of claim 19 wherein the inputs of the key include the first random number and wherein the encapsulating means comprises means for storing the encrypted information and the first random number in various fields of the network entity.