← Back to Patent Explorer
US6009173A Expired / Lapsed US ⏱️ 0.0 years remaining

Encryption and decryption method and apparatus

Assignee: Google Technology Holdings LLC
•
Filing: 1997-01-31
•
Granted: 1999-12-28
•
Expires: 2017-01-31
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A method for efficient encryption and decryption (100) comprises the steps of encrypting a message (104) at a sending unit which is to be sent to a receiving unit using a message key (106) and appending to the message at the sending unit the message key encrypted (108 and 109) using a receiver's public key (110). Subsequently, a sender's certificate (116) is appended at a first server (302) and extracted at a second server (310). The message key is then decrypted at the receiving unit using a receiver's private key (140) to provide a decrypted message key. Subsequently the message is decrypted using the decrypted message key (142 & 143) and authenticated by comparing a pair of digest (152 and 156).

Inventors

  • 👤 Terence Edward Sumner

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-10-31 04:34
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L9/00; H04L9/32; H04L63/045; H04L63/08; H04L63/0823; H04L63/12; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0825; H04L2209/00; H04L2209/80

Claims Analysis

Total Claims: 30
Claim 1
Independent Claim 93 words
A method for efficient encryption and decryption, comprising the steps of: encrypting a message at a sending unit which is to be sent to a receiving unit using a message key; appending to the message at the sending unit the message key encrypted using a receiver's public key; subsequently appending a sender's certificate at a first server; extracting the sender's certificate at a second server; decrypting the message key at the receiving unit using a receiver's private key to provide a decrypted message key; subsequently decrypting the message using the decrypted message key.
Claim 2
Independent Claim 93 words
A method for efficient encryption and decryption, comprising the steps of: encrypting a message at a sending unit which is to be sent to a receiving unit using a message key; appending to the message at the sending unit the message key encrypted using a receiver's public key; subsequently appending a sender's certificate at a first server; extracting the sender's certificate at a second server; decrypting the message key at the receiving unit using a receiver's private key to provide a decrypted message key; subsequently decrypting the message using the decrypted message key.
Claim 3
Dependent Claim 63 words
A method for efficient encryption and decryption of claim 1, wherein the step of encrypting a message further comprises the step of adding a signature by generating a digest of the message using a one-way function and encrypting the digest using a private key to create a encrypted signed message, the private key corresponding to a public key embedded in the sender's certificate.
Claim 4
Independent Claim 129 words
A method for efficient encryption and decryption, comprising the steps of: encrypting a message at a sending unit which is to be sent to a receiving unit using a message key; appending to the message at the sending unit the message key encrypted using a receiver's public key; subsequently appending a sender's certificate at a first server; encrypting the message and the sender's certificate using a server session key to provide an encrypted message with certificate, decrypting the encrypted message and sender's certificate at a second server using the server session key extracting the sender's certificate at the second server; decrypting the message key at the receiving unit using a receiver's private key to provide a decrypted message key; and subsequently decrypting the message using the decrypted message key.
Claim 5
Independent Claim 129 words
A method for efficient encryption and decryption, comprising the steps of: encrypting a message at a sending unit which is to be sent to a receiving unit using a message key; appending to the message at the sending unit the message key encrypted using a receiver's public key; subsequently appending a sender's certificate at a first server; encrypting the message and the sender's certificate using a server session key to provide an encrypted message with certificate, decrypting the encrypted message and sender's certificate at a second server using the server session key extracting the sender's certificate at the second server; decrypting the message key at the receiving unit using a receiver's private key to provide a decrypted message key; and subsequently decrypting the message using the decrypted message key.
Claim 6
Dependent Claim 35 words
The method of claim 3, wherein the server session key is encrypted using a receiving server's public key retrieved from the first server and catenated to the encrypted signed message with certificate as an envelope.
Claim 7
Dependent Claim 49 words
The method of claim 2, wherein the method further comprises the steps of encrypting the message with the sender's certificate using a server session key providing an encrypted signed message with certificate, and decrypting the encrypted signed message with certificate at the second server using the server session key.
Claim 8
Dependent Claim 35 words
The method of claim 5, wherein the server session key is encrypted using a receiving server's public key retrieved from the first server and catenated to the encrypted signed message with certificate as an envelope.
Claim 9
Independent Claim 96 words
A method of efficiently transporting an encrypted signed message with envelope from a sender to a receiver using a sending server and a receiving server, the receiving server using an asymmetric public-private pair of keys, the method comprising the steps of: encrypting a certificate using a server-to-server session key to create an encrypted certificate and catenating the encrypted certificate with an envelope containing the server-to-server session key encrypted with a receiving server's asymmetric public key to create an encrypted certificate with envelope; and catenating the encrypted signed message with envelope to the encrypted certificate with envelope.
Claim 10
Independent Claim 96 words
A method of efficiently transporting an encrypted signed message with envelope from a sender to a receiver using a sending server and a receiving server, the receiving server using an asymmetric public-private pair of keys, the method comprising the steps of: encrypting a certificate using a server-to-server session key to create an encrypted certificate and catenating the encrypted certificate with an envelope containing the server-to-server session key encrypted with a receiving server's asymmetric public key to create an encrypted certificate with envelope; and catenating the encrypted signed message with envelope to the encrypted certificate with envelope.
Claim 11
Dependent Claim 24 words
The method of claim 7, wherein the method further comprises the steps of decrypting the server-to-server session key using the receiving server's private key.
Claim 12
Dependent Claim 35 words
The method of claim 8, wherein the method further comprises the step of separating the certificate from the encrypted signed message with envelope and further decrypting the certificate using the server to server session key.
Claim 13
Dependent Claim 25 words
The method of claim 9, wherein the method further comprises the step of extracting the sender's public key from a certificate at the receiving server.
Claim 14
Dependent Claim 34 words
The method of claim 10, wherein the method further comprises the step at a receiver of separating the envelope from the encrypted signed message and decrypting the envelope to provide a sender-receiver session key.
Claim 15
Dependent Claim 28 words
The method of claim 11, wherein the method further comprises the step at the receiver of decrypting the encrypted signed message and signature using the sender-receiver session key.
Claim 16
Dependent Claim 27 words
The method of claim 12, wherein the method further comprises the step at the receiver of decrypting the signature into a digest using the sender's public key.
Claim 17
Dependent Claim 56 words
The method of claim 13, wherein the method further comprises the step at the receiver of authenticating the signature associated with the message by separating the message by passing the message through a hash function and obtaining an actual digest which is compared with the digest found by decrypting the signature using the sender's public key.
Claim 18
Dependent Claim 120 words
A remote certificate server for use in wireless communication, comprising: a sender server portion for receiving an encrypted wireless message with envelope, comprising: a memory for storing the encrypted wireless message; and a processor for encrypting a certificate with a server to server session key to provided an encrypted certificate and for appending the encrypted certificate with the encrypted wireless message with envelope to provide an encrypted certificate and wireless message with envelope, the processor further encrypting the server to server session key by using a receiver server portion's asymmetric public key to provide an encrypted server to server session key, wherein the encrypted server to server session key is appended to the encrypted certificate and wireless message with envelope.
Claim 19
Dependent Claim 120 words
A remote certificate server for use in wireless communication, comprising: a sender server portion for receiving an encrypted wireless message with envelope, comprising: a memory for storing the encrypted wireless message; and a processor for encrypting a certificate with a server to server session key to provided an encrypted certificate and for appending the encrypted certificate with the encrypted wireless message with envelope to provide an encrypted certificate and wireless message with envelope, the processor further encrypting the server to server session key by using a receiver server portion's asymmetric public key to provide an encrypted server to server session key, wherein the encrypted server to server session key is appended to the encrypted certificate and wireless message with envelope.
Claim 20
Dependent Claim 108 words
The remote certificate server of claim 15, wherein the remote certificate server further comprises a receiver server portion for receiving the encrypted server to server session key appended to the encrypted certificate and wireless message with envelope, wherein the receiver server portion comprises: a memory for storing the encrypted server to server session key appended to the encrypted certificate and wireless message with envelope; and a processor for recovering the server to server session key using an asymmetric private key corresponding to the receiver server portion's asymmetric public key and for separating the encrypted certificate from the encrypted wireless message with envelope and for decrypting the encrypted certificate.
Claim 21
Dependent Claim 22 words
The remote certificate server of claim 16, wherein sender server portion and the receiver server portion are coupled via a wireline network.
Claim 22
Independent Claim 225 words
A method of efficiently transporting an encrypted signed message with envelope from a sender to a receiver using a sending server and a receiving server, the receiving server using an asymmetric public-private pair of keys, the method comprising the steps of: sending the encrypted signed message to the receiver from the sender which triggers an inquiry between the sending server and the receiving server as to whether a certificate needs to be delivered to the receiver; sending the certificate to the receiver if there is no prior receipt of a certificate or if the certificate is expired or otherwise invalid, otherwise sending portions of the certificate as needed as determined by the inquiry between the sending server and the receiving server, wherein if the inquiry between the sending server and the receiving server determines that the certificate or portions thereof needs to be sent to the receiver, the method then further comprises the steps of: encrypting the certificate or portions thereof using a server-to-server session key to create an encrypted certificate and catenating the encrypted certificate with an envelope containing the server-to-server session key encrypted with a receiving server's asymmetric public key to create an encrypted certificate with envelope; catenating the encrypted signed message with envelope to the encrypted certificate with envelope; and decrypting the encrypted certificate or portions thereof as needed by the receiver.
Claim 23
Independent Claim 225 words
A method of efficiently transporting an encrypted signed message with envelope from a sender to a receiver using a sending server and a receiving server, the receiving server using an asymmetric public-private pair of keys, the method comprising the steps of: sending the encrypted signed message to the receiver from the sender which triggers an inquiry between the sending server and the receiving server as to whether a certificate needs to be delivered to the receiver; sending the certificate to the receiver if there is no prior receipt of a certificate or if the certificate is expired or otherwise invalid, otherwise sending portions of the certificate as needed as determined by the inquiry between the sending server and the receiving server, wherein if the inquiry between the sending server and the receiving server determines that the certificate or portions thereof needs to be sent to the receiver, the method then further comprises the steps of: encrypting the certificate or portions thereof using a server-to-server session key to create an encrypted certificate and catenating the encrypted certificate with an envelope containing the server-to-server session key encrypted with a receiving server's asymmetric public key to create an encrypted certificate with envelope; catenating the encrypted signed message with envelope to the encrypted certificate with envelope; and decrypting the encrypted certificate or portions thereof as needed by the receiver.
Claim 24
Dependent Claim 23 words
The method of claim 18, wherein the method further comprises the steps of decrypting the server-to-server session key using a receiving server'private key.
Claim 25
Dependent Claim 35 words
The method of claim 19, wherein the method further comprises the step of separating the certificate from the encrypted signed message with envelope and further decrypting the certificate using the server to server session key.
Claim 26
Dependent Claim 25 words
The method of claim 20, wherein the method further comprises the step of extracting the sender's public key from the certificate at the receiving server.
Claim 27
Independent Claim 93 words
A method of efficiently transporting a signed message from a sender to a receiver using a sending server and a receiving server, the method comprising the steps of: sending a signed message from a sending unit for receipt at a receiving unit; subsequently encrypting and appending a sender's certificate as encrypted at a first server to the signed message; extracting the sender's certificate at a second server; and receiving the signed message at the receiving unit and reading the message at the receiving unit using a set of information from the sender's certificate.
Claim 28
Independent Claim 93 words
A method of efficiently transporting a signed message from a sender to a receiver using a sending server and a receiving server, the method comprising the steps of: sending a signed message from a sending unit for receipt at a receiving unit; subsequently encrypting and appending a sender's certificate as encrypted at a first server to the signed message; extracting the sender's certificate at a second server; and receiving the signed message at the receiving unit and reading the message at the receiving unit using a set of information from the sender's certificate.
Claim 29
Dependent Claim 42 words
The method of claim 22, wherein the step of receiving the signed message includes the step of using the set of information selected from the group of name, public key, signature authority, expiration date, validity period, date of issued, and control numbers.
Claim 30
Dependent Claim 23 words
The method of claim 22, wherein the step of sending a signed message further comprises the step of sending an encrypted signed message.

References Cited (Backward Citations)

US5283832A Cited
US5532920A Cited
US5475758A Cited
US5420927A Cited
US5420927B1 Cited
US5588060A Cited
US5606617A Cited
US5604804A Cited
US5751813A Cited
US5812671A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2002-12-27 2003-06-28 2003-12-28 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2006-12-27 2007-06-28 2007-12-28 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2010-12-27 2011-06-28 2011-12-28 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag