US6049612A
Expired / Lapsed
US
⏱️ 0.0 years remaining
File encryption method and system
Assignee: RPX Corp
•
Filing: 1998-12-28
•
Granted: 2000-04-11
•
Expires: 2018-12-28
Abstract
Abstract A file security system is disclosed in which both a deterministic, non-predictable, pseudo-random, symmetric encryption key and an encrypted information file are highly resistant to cryptographic analysis or brute force trial-and-error attacks. The encryption key is formed by first combining a constant value and a secret E-Key Seed in accordance with a logic, algebraic, and/or encryption function to shuffle bits and perform a first many-to-few bit mapping to provide a first pseudo-random result, and by operating upon the result with a secure one-way hash algorithm to perform a second many-to-few bit mapping and thereby provide a pseudo-random message digest. The message digest may be truncated to provide a deterministic encryption key. The information file to be protected is then encrypted with the encryption key, and thereafter the encryption key is destroyed by the file manager of the host system. The encrypted information file and the constant value then are concatenated, and the result is operated upon by a secure hash algorithm to provide a message integrity code. The constant value and a constant value checksum are inserted as headers at the beginning of the encrypted file, and the message integrity code, a redundant constant value, and a redundant constant value checksum are added as trailers at the end of the encrypted file. Any alteration of the encrypted file is reflected by the message integrity code. If a comparison of the constant value and redundant constant value indicates a match, the encryption key may be regenerated. If no match occurs, the checksums are tested to determine which of the constant value and redundant constant value is correct in order to regenerate the encryption key.
Inventors
- 👤 Guy L. Fielder
- 👤 Paul N. Alito
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 17:59
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L9/3236; G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6209; H04L9/08; H04L9/0861; H04L9/0869; H04L9/0891; G06F2221/00; G06F2221/21; G06F2221/2107
Claims Analysis
Total Claims: 21
Claim 1
Independent Claim
111 words
A method of protecting an information file from unauthorized access, which comprises the following steps: combining a constant value and a secret plural bit sequence in accordance with an algebraic function to shuffle bits, perform a first many-to-few bit mapping, and produce a first pseudo-random result; performing a secure hash operation on said first pseudo-random result to effect a second many-to-few bit mapping and produce a second pseudo-random result; extracting a pseudo-random, symmetric encryption key from said second pseudo-random result; encrypting said information file in accordance with said pseudo-random, symmetric encryption key to form an encrypted information file; and concatenating said constant value to a beginning of said encrypted information file.
Claim 2
Independent Claim
111 words
A method of protecting an information file from unauthorized access, which comprises the following steps: combining a constant value and a secret plural bit sequence in accordance with an algebraic function to shuffle bits, perform a first many-to-few bit mapping, and produce a first pseudo-random result; performing a secure hash operation on said first pseudo-random result to effect a second many-to-few bit mapping and produce a second pseudo-random result; extracting a pseudo-random, symmetric encryption key from said second pseudo-random result; encrypting said information file in accordance with said pseudo-random, symmetric encryption key to form an encrypted information file; and concatenating said constant value to a beginning of said encrypted information file.
Claim 3
Dependent Claim
89 words
The method set forth in claim 1 above further including the steps of: combining said encrypted information file and said constant value to form a concatenation; performing a secure hash operation on said concatenation to form a message integrity code; performing a checksum bit sequence operation on said constant value to form a checksum; interjecting said checksum between said constant value and said encrypted information file; and adding as a trailer at the end of said encrypted information file said message integrity code, said constant value, and said checksum.
Claim 4
Dependent Claim
16 words
The method of claim 1 wherein said step of combining includes a plurality of algebraic functions.
Claim 5
Dependent Claim
16 words
The method of claim 1 wherein said step of combining includes one or more logic functions.
Claim 6
Dependent Claim
16 words
The method of claim 1 wherein said step of combining includes one or more cryptographic functions.
Claim 7
Dependent Claim
224 words
The method of claim 1 further including the steps of: combining said encrypted information file and said constant value to form a concatenation; performing said secure hash operation on said concatenation to form a message integrity code; adding said message integrity code as a trailer after said encrypted information file; performing a checksum bit sequence operation on said constant value to form a checksum; adding said checksum after said constant value at said beginning of said encrypted information file; adding said constant value as a redundant constant value to said trailer at an end of said encrypted information file after said message integrity code; adding said checksum as a redundant checksum to said trailer at said end of said encryption information file after said redundant constant value; testing said message integrity code to determine whether information file integrity has been lost; if information file integrity has not been lost, comparing said constant value with said redundant constant value to determine whether a match occurs to indicate that said pseudo-random symmetric, encryption key may be regenerated; if information file integrity has been lost, testing said checksum and said redundant checksum to determine which of said constant value and said redundant constant value is correct; and regenerating said pseudo-random, symmetric encryption key by using a correct one of said constant value and said redundant constant value.
Claim 8
Dependent Claim
24 words
The method of claim 1, wherein said secret plural bit sequence has a binary length that is larger than that of said constant value.
Claim 9
Dependent Claim
16 words
The method of claim 2, wherein said checksum bit sequence operation is a CRC-16 checksum operation.
Claim 10
Dependent Claim
16 words
The method of claim 2, wherein said checksum bit sequence operation is a CRC-32 checksum operation.
Claim 11
Dependent Claim
53 words
The method set forth in claim 1, wherein said constant value is a data file having plural bit fields including a length byte field, an E-Key Seed ID field, an encryption algorithm field, an original file extension field, an author-owner field, a summary information field, an audit entry field, and a checksum field.
Claim 12
Dependent Claim
16 words
The method of claim 1, wherein said pseudo-random, symmetric encryption key also is deterministic and non-predictable.
Claim 13
Dependent Claim
16 words
The method of claim 6, wherein said pseudo-random, symmetric encryption key also is deterministic and non-predictable.
Claim 14
Dependent Claim
16 words
The method of claim 1, wherein any hash function is substituted for said secure hash function.
Claim 15
Dependent Claim
42 words
The method of claim 1, wherein the steps of combining and performing are executed n times, and each said second pseudo-random result is concatenated to a previous said second pseudo-random result for an increased bit length of said pseudo-random, symmetric encryption key.
Claim 16
Dependent Claim
21 words
The method of claim 2, wherein said checksum bit sequence operation is any error correction algorithm for reconstructing said constant value.
Claim 17
Dependent Claim
15 words
The method of claim 1, wherein said algebraic function is replaced by plural bit-shuffling functions.
Claim 18
Dependent Claim
19 words
The method of claim 1, wherein said pseudo-random, symmetric encryption key is destroyed after said information file is encrypted.
Claim 19
Dependent Claim
165 words
An information file structure stored on a memory system for protecting information exchanged between communication stations, which comprises: an encrypted information file area for storing an encrypted information file which has been formed through use of an encryption key generated by combining a constant value and a secret E-Key Seed in accordance with an algebraic function and performing a secure hash operation on an output of said algebraic function; a plural bit trailer having a message integrity code field for storing a message integrity code which is generated by forming a concatenation of said constant value and said encrypted information file and operating upon said concatenation with said secure hash operation; and a plural bit header having a constant value field concatenated to a beginning of said encrypted information file for storing a constant value, and a checksum field concatenated to said beginning next to said constant value field for storing a checksum generated by performing a checksum bit sequence operation on said constant value.
Claim 20
Dependent Claim
165 words
An information file structure stored on a memory system for protecting information exchanged between communication stations, which comprises: an encrypted information file area for storing an encrypted information file which has been formed through use of an encryption key generated by combining a constant value and a secret E-Key Seed in accordance with an algebraic function and performing a secure hash operation on an output of said algebraic function; a plural bit trailer having a message integrity code field for storing a message integrity code which is generated by forming a concatenation of said constant value and said encrypted information file and operating upon said concatenation with said secure hash operation; and a plural bit header having a constant value field concatenated to a beginning of said encrypted information file for storing a constant value, and a checksum field concatenated to said beginning next to said constant value field for storing a checksum generated by performing a checksum bit sequence operation on said constant value.
Claim 21
Dependent Claim
58 words
The information file structure of claim 18, further including: a redundant constant value field having stored therein said constant value, and located next to said message integrity code field in said plural bit trailer; and a redundant checksum field having stored therein said checksum, and located next to said redundant constant value field in said plural bit trailer.
References Cited (Backward Citations)
US4193115A
Cited
US5699427A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-04-11 | 2003-10-11 | 2004-04-11 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-04-11 | 2007-10-11 | 2008-04-11 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-04-11 | 2011-10-11 | 2012-04-11 | $7700.00 | Window Closed / Lapsed |