US5982898A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Certification process
Assignee: AT&T Inc
•
Filing: 1997-03-07
•
Granted: 1999-11-09
•
Expires: 2017-03-07
Abstract
Abstract An improved secure communication arrangement separates the tasks of identity verification and certificate issuing, which allows a disassociating of the long-term binding between Alice and her public/private key pair. This is accomplished by a registration authority issuing a password to Alice once it is satisfied of Alice's bona fide. Thereafter, whenever Alice wishes to communicate with Bob, she contacts a certification authority, identifies herself with the password and obtains a private key and a corresponding short-lived certificate. The certificate typically includes Alice's name and a public key in plaintext, and a signature. The signature is derived by hashing the plaintext portion of the certificate to obtain a value, and encrypting the value with the CA's private key. She then contacts Bob, submits her certificate, Bob performs the same hashing function to obtain a value, decrypts the signature with CA's public key to obtain a decrypted value, and compares the value Bob created with the decrypted value. If the two match, Bob is assured that the person submitting the certificate may be communicated with by using the public key included in the certificate.
Inventors
- 👤 Yung-Kao Hsu
- 👤 Stephen Seymour
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 23:21
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L9/321; H04L9/3226; H04L9/3263
Claims Analysis
Total Claims: 39
Claim 1
Independent Claim
130 words
A method comprising the steps of: a certification authority interacting with a user to receive a password from the user; receiving a user password from said user; receiving and storing a password from a third party to form a stored password; determining whether said user password is valid by comparing said user password to said stored password; when said user password is concluded to be valid by said step of determining, developing a certificate core that comprises information that results from encryption of first data with a private key of the certification authority (CA-PrKey), which first data comprises a public key of the user and a short-lived expiration time of the certificate, and delivering the certificate core to the user to be used at least as part of the certificate.
Claim 2
Independent Claim
130 words
A method comprising the steps of: a certification authority interacting with a user to receive a password from the user; receiving a user password from said user; receiving and storing a password from a third party to form a stored password; determining whether said user password is valid by comparing said user password to said stored password; when said user password is concluded to be valid by said step of determining, developing a certificate core that comprises information that results from encryption of first data with a private key of the certification authority (CA-PrKey), which first data comprises a public key of the user and a short-lived expiration time of the certificate, and delivering the certificate core to the user to be used at least as part of the certificate.
Claim 3
Dependent Claim
21 words
The method of claim 1 where the expiration time is less than one month from the date the certificate is issued.
Claim 4
Dependent Claim
19 words
The method of claim 1 where the expiration time is the day after the day the certificate is issued.
Claim 5
Dependent Claim
15 words
The method of claim 1 where the expiration time explicitly includes the time of day.
Claim 6
Dependent Claim
38 words
The method of claim 1 further comprising the step of employing at least a part of the certificate core as a certificate or appending information to at least a part of the certificate core to form a certificate.
Claim 7
Dependent Claim
20 words
The method of claim 5 where a portion of the certificate core is not used as part of the certificate.
Claim 8
Dependent Claim
21 words
The method of claim 5 where the appending of information to form a certificate is carried out by the certification authority.
Claim 9
Dependent Claim
20 words
The method of claim 5 where the appending of information to form a certificate is carried out by the user.
Claim 10
Dependent Claim
24 words
The method of claim 1 where said first data also includes name of a user to whom the certificate is intended to be delivered.
Claim 11
Dependent Claim
89 words
The method of claim 1 where the first data also includes one or more from the set containing identity of the certification authority, name of a user to whom the certificate is intended to be delivered, other information about the user, a field that identifies the certificate to the certification authority, a service for which the certificate is valid, a purpose for which the certificate is valid, an authorization code, a server for which the certificate is intended, and a number of uses of the certificate in a server.
Claim 12
Dependent Claim
34 words
The method of claim 10 where a decision whether to include in said first data the identity of the certification authority is based on information provided by the user in the step of interacting.
Claim 13
Dependent Claim
25 words
The method of claim 1 where the first data further comprises information provided by the user, or information provided by the certification authority, or both.
Claim 14
Dependent Claim
49 words
The method of claim 1 where said encryption with CA-PrKey comprises encryption of a value which is derived from a hashing of the first data, and the certificate core further comprises second data which comprises the public key of the user and the short-lived expiration time of the certificate.
Claim 15
Dependent Claim
21 words
The method of claim 13 where the appending of information to form a certificate is carried out by the certification authority.
Claim 16
Dependent Claim
20 words
The method of claim 13 where the appending of information to form a certificate is carried out by the user.
Claim 17
Dependent Claim
60 words
The method of claim 13 where the second data further comprises one or more from a set comprising the name of the user, other information about the user, service for which the certificate is intended, service for which the certificate is valid, authorization code, expiration time of the certificate, or a number of uses of the certificate in a server.
Claim 18
Dependent Claim
23 words
The method of claim 16 where the information appended to the certificate core to form a certificate is included in the first data.
Claim 19
Dependent Claim
23 words
The method of claim 13 where the public key of the user is either provided by the user or by the certification authority.
Claim 20
Dependent Claim
25 words
The method of claim 13 where the second data further comprises information provided by the user, or information provided by the certification authority, or both.
Claim 21
Dependent Claim
31 words
The method of claim 13 where the information provided by the certification authority in the second data includes a public key that is associated with the private key of the user.
Claim 22
Dependent Claim
15 words
The method of claim 13 where the first data is identical to the second data.
Claim 23
Dependent Claim
59 words
The method of claim 1 further comprising the steps of: said user providing specified information to a registration authority, based on said specified information, said registration authority ascertaining whether said user deserves to possess said password, and when said step of ascertaining concludes that said user deserves a password, said registration authority communicates said password to said certification authority.
Claim 24
Dependent Claim
12 words
The method of claim 22 where said registration authority creates said password.
Claim 25
Dependent Claim
13 words
The method of claim 22 where said password includes name of said user.
Claim 26
Dependent Claim
50 words
The method of claim 22 where in said step of said certification authority receiving said password from said user, said certification authority also receives name of said user, and where said registration authority communicates said user name to said certification authority when it communicates said password to said certification authority.
Claim 27
Dependent Claim
24 words
The method of claim 1 where said first data also includes name of a user to whom the certificate is intended to be delivered.
Claim 28
Dependent Claim
19 words
The method of claim 1 where said first data also includes a service for which the certificate is valid.
Claim 29
Dependent Claim
19 words
The method of claim 1 where said first data also includes a purpose for which the certificate is valid.
Claim 30
Dependent Claim
19 words
The method of claim 1 where said first data also includes a server for which the certificate is intended.
Claim 31
Dependent Claim
21 words
The method of claim 1 where said first data also includes a number of uses of the certificate in a server.
Claim 32
Independent Claim
117 words
A method for responding to a connection request from a user comprising the steps of: a certification authority receiving a password from a third party; said user receiving a certificate from said certification authority in response to a user password presented to said certification authority by said user; receiving said certificate, which contains information, including an expiration time; determining the certificate's bona fide; refusing to continue the connection either when the certificate is not bona fide or when the expiration time has passed; and carrying on the connection with aid from a public key contained in the certificate, without reference to information regarding revocation of certificates, when the expiration time of the certificate has not yet arrived.
Claim 33
Independent Claim
117 words
A method for responding to a connection request from a user comprising the steps of: a certification authority receiving a password from a third party; said user receiving a certificate from said certification authority in response to a user password presented to said certification authority by said user; receiving said certificate, which contains information, including an expiration time; determining the certificate's bona fide; refusing to continue the connection either when the certificate is not bona fide or when the expiration time has passed; and carrying on the connection with aid from a public key contained in the certificate, without reference to information regarding revocation of certificates, when the expiration time of the certificate has not yet arrived.
Claim 34
Dependent Claim
90 words
The method of claim 31 where the step of determining the certificate's bona fide comprises: processing at least some plaintext information included in the certificate to obtain a value; encrypting the value with a public key of a known certification authority to obtain a signature; comparing the obtained signature with a signature contained in the certificate; and accepting a first field of information contained in the certificate as a bona fide expiration time and a second field of information contained in the certificate as a bona fide user public key.
Claim 35
Dependent Claim
45 words
The method of claim 32 where the first field is either plaintext, encrypted with a private key of the certification authority that corresponds to the public key of the certification authority, or encrypted with a user private key that corresponds to the user public key.
Claim 36
Dependent Claim
32 words
The method of claim 32 where the second field is either plaintext or encrypted with a private key of the certification authority that corresponds to the public key of the certification authority.
Claim 37
Dependent Claim
60 words
The method of claim 31 where the step of determining the certificate's bona fide comprises: obtaining a public key of a certification authority; decrypting the certificate; and accepting a first field of information contained in the certificate as a bona fide expiration time and a second field of information contained in the certificate as a bona fide user public key.
Claim 38
Dependent Claim
72 words
The method of claim 31 further comprising, prior to the step of refusing the connection, a step of determining from other information contained in the certificate, and without reference to information received by the processor with respect to the received certificate, whether the processor should respond to the connection request, where the step of refusing to continue the connection is executed when the step of determining concludes that communication should be refused.
Claim 39
Dependent Claim
47 words
The method of claim 31 where the information contained in the certificate which is utilized in the step of determining is a purpose for which the certificate is to be employed, a service for which the certificate is employed, an application server identity, or number of uses.
References Cited (Backward Citations)
US5005200A
Cited
US5224163A
Cited
US5261002A
Cited
US5455953A
Cited
US5659616A
Cited
US5745574A
Cited
US5604804A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-11-08 | 2003-05-10 | 2003-11-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-11-08 | 2007-05-10 | 2007-11-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-11-08 | 2011-05-10 | 2011-11-09 | $7700.00 | Window Closed / Lapsed |