US6009177A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Enhanced cryptographic system and method with key escrow feature
Assignee: Certco Inc
•
Filing: 1997-02-19
•
Granted: 1999-12-28
•
Expires: 2017-02-19
Abstract
Abstract The invention provides a cryptographic system and method with a key escrow feature that uses a method for verifiably splitting users' private encryption keys into components and for sending those components to trusted agents chosen by the particular users, and provides a system that uses modern public key certificate management, enforced by a chip device that also self-certifies. The methods for key escrow and receiving an escrow certificate are also applied herein to a more generalized case of registering a trusted device with a trusted third party and receiving authorization from that party enabling the device to communicate with other trusted devices. Further preferred embodiments provide for rekeying and upgrading of device firmware using a certificate system, and encryption of stream-oriented data.
Inventors
- 👤 Frank Wells Sudia
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 07:59
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/02; G06Q20/38; G06Q20/382; G06Q20/3821; G06Q20/3829; H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0825; H04L9/0838; H04L9/0841; H04L9/0844; H04L9/085; H04L9/088; H04L9/0894; H04L9/32; H04L9/3247; H04L9/3263; G06F; G06F7/00; G06F7/60; G06F7/72; G06F7/724; G06F7/725
Claims Analysis
Total Claims: 21
Claim 1
Independent Claim
130 words
A method of upgrading firmware of a trusted device, comprising the steps of: receiving a communication of firmware at a trusted device; confirming the source of said communication using a key embedded in said trusted device, said key being a key associated with a firmware source; and incorporating the firmware into the trusted device contingent upon the firmware source being confirmed; wherein the key embedded in the trusted device is a public signature verification key of a trusted entity and wherein said confirming step includes a step of: verifying, using the public signature verification key of the trusted entity, that the communication includes an upgrade certificate signed using a private signature key of the trusted entity; and wherein the upgrade certificate includes a public signature key of the firmware source.
Claim 2
Independent Claim
130 words
A method of upgrading firmware of a trusted device, comprising the steps of: receiving a communication of firmware at a trusted device; confirming the source of said communication using a key embedded in said trusted device, said key being a key associated with a firmware source; and incorporating the firmware into the trusted device contingent upon the firmware source being confirmed; wherein the key embedded in the trusted device is a public signature verification key of a trusted entity and wherein said confirming step includes a step of: verifying, using the public signature verification key of the trusted entity, that the communication includes an upgrade certificate signed using a private signature key of the trusted entity; and wherein the upgrade certificate includes a public signature key of the firmware source.
Claim 3
Dependent Claim
40 words
The method of claim 1, wherein said confirming step further includes a step of verifying, using the public signature verification key of the firmware source, that the communication has been signed using the private signature key of the firmware source.
Claim 4
Dependent Claim
26 words
The method of claim 2, wherein the trusted entity is a manufacturer of the trusted device and wherein the firmware source is a trusted third party.
Claim 5
Dependent Claim
24 words
The method of claim 3, wherein the communication of firmware includes a public signature verification key to be embedded in the trusted device's firmware.
Claim 6
Dependent Claim
21 words
The method of claim 1, wherein the communication of firmware includes a public signature verification key for a trusted third party.
Claim 7
Dependent Claim
24 words
The method of claim 5, wherein the communication of firmware further includes information identifying transactions that may be performed by the trusted third party.
Claim 8
Dependent Claim
23 words
The method of claim 6, wherein the trusted third party is authorized to replace a public signature verification key of the firmware source.
Claim 9
Dependent Claim
16 words
The method of claim 7, wherein the firmware source is a manufacturer of the trusted device.
Claim 10
Independent Claim
127 words
A method of upgrading firmware of a trusted device, comprising the steps of: receiving a communication of firmware at a trusted device; and confirming the source of said communication using a key embedded in said trusted device, said key being a key associated with a trusted entity; wherein said confirming step includes the steps of: verifying that the communication includes an upgrade certificate signed using the private signature key of the trusted entity, wherein the upgrade certificate includes the public signature key of the firmware source; and verifying, using a public signature verification key of the firmware source, that the communication has been signed using a private signature key of the firmware source; incorporating the firmware into the trusted device contingent upon the firmware source being confirmed.
Claim 11
Independent Claim
127 words
A method of upgrading firmware of a trusted device, comprising the steps of: receiving a communication of firmware at a trusted device; and confirming the source of said communication using a key embedded in said trusted device, said key being a key associated with a trusted entity; wherein said confirming step includes the steps of: verifying that the communication includes an upgrade certificate signed using the private signature key of the trusted entity, wherein the upgrade certificate includes the public signature key of the firmware source; and verifying, using a public signature verification key of the firmware source, that the communication has been signed using a private signature key of the firmware source; incorporating the firmware into the trusted device contingent upon the firmware source being confirmed.
Claim 12
Dependent Claim
20 words
The method of claim 9, wherein the communication of firmware includes a public signature verification key for the trusted entity.
Claim 13
Dependent Claim
16 words
The method of claim 10, wherein the trusted entity is a manufacturer of the trusted device.
Claim 14
Independent Claim
91 words
A method of upgrading firmware of a trusted device, comprising the steps of: embedding a public signature verification key of a trusted entity in the trusted device; issuing a certificate for a cryptographic key of a third-party firmware source; receiving a communication of firmware of the firmware source at the trusted device; using the public signature verification key of the trusted entity to authenticate the certificate; authenticating the firmware source using the key of the certificate; and incorporating the firmware into the trusted device contingent upon the firmware source being confirmed.
Claim 15
Independent Claim
91 words
A method of upgrading firmware of a trusted device, comprising the steps of: embedding a public signature verification key of a trusted entity in the trusted device; issuing a certificate for a cryptographic key of a third-party firmware source; receiving a communication of firmware of the firmware source at the trusted device; using the public signature verification key of the trusted entity to authenticate the certificate; authenticating the firmware source using the key of the certificate; and incorporating the firmware into the trusted device contingent upon the firmware source being confirmed.
Claim 16
Dependent Claim
26 words
The method of claim 12, wherein the trusted entity is a manufacturer of the trusted device and wherein the firmware source is a trusted third party.
Claim 17
Dependent Claim
24 words
The method of claim 13, wherein the communication of firmware includes a public signature verification key to be embedded in the trusted device's firmware.
Claim 18
Dependent Claim
21 words
The method of claim 12, wherein the communication of firmware includes a public signature verification key for a trusted third party.
Claim 19
Dependent Claim
24 words
The method of claim 15, wherein the communication of firmware further includes information identifying transactions that may be performed by the trusted third party.
Claim 20
Dependent Claim
23 words
The method of claim 16, wherein the trusted third party is authorized to replace a public signature verification key of the firmware source.
Claim 21
Dependent Claim
16 words
The method of claim 17, wherein the firmware source is a manufacturer of the trusted device.
References Cited (Backward Citations)
US4200770A
Cited
US4218582A
Cited
US4405829A
Cited
US4558176A
Cited
US4771461A
Cited
US5005200A
Cited
US4868877A
Cited
US5214702A
Cited
US4995082A
Cited
US5136643A
Cited
US5001752A
Cited
US5214700A
Cited
US5150411A
Cited
US5199070A
Cited
US5164988A
Cited
US5222140A
Cited
US5261002A
Cited
US5313521A
Cited
US5276737A
Cited
US5315658A
Cited
US5276737B1
Cited
US5315658B1
Cited
US5499295A
Cited
US5787172A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-12-27 | 2003-06-28 | 2003-12-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-12-27 | 2007-06-28 | 2007-12-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-12-27 | 2011-06-28 | 2011-12-28 | $7700.00 | Window Closed / Lapsed |