Patent BE618731A successfully refreshed from Google Patents.
US6072876A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and system for depositing private key used in RSA cryptosystem
Assignee: NTT Inc
•
Filing: 1997-07-25
•
Granted: 2000-06-06
•
Expires: 2017-07-25
Abstract
Abstract A scheme for depositing a private key used in the RSA cryptosystem which is capable of maintaining the private key more safely, without requiring a user to always carry around a storage medium. In this scheme, a private key of a user is divided into a first partial private key and a second partial private key at a user's entity, where the first partial private key is set to be maintained at the user's entity, while the second partial private key is deposited from the user's entity to the other entity. Then, the second partial private key is delivered from the other entity to the user's entity in response to a request from the user's entity, and the first partial private key maintained at the user's entity and the second partial private key delivered from the other entity are composed so as to obtain the private key to be used in a processing according to the RSA cryptosystem at the user's entity. This scheme can be generalized to a case of dividing the private key into a plurality of partial private keys.
Inventors
- 👤 Masanori Obata
- 👤 Hiroyuki Sugiyama
- 👤 Moribumi Okukawa
- 👤 Tatsuaki Okamoto
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-04 17:25
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/30; H04L9/3006; H04L9/302; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0822; H04L9/0825
Claims Analysis
Total Claims: 34
Claim 1
Independent Claim
135 words
A method for depositing a private key used in an RSA cryptosystem, comprising the steps of: dividing a private key of a user into a first partial private key and a second partial private key at a user's entity, where the first partial private key is set to be maintained at the user's entity; depositing the second partial private key from the user's entity to another entity; delivering the second partial private key from said another entity to the user's entity in response to a request from the user's entity; and composing the first partial private key maintained at the user's entity and the second partial private key delivered from said another entity so as to obtain the private key to be used in a processing according to the RSA cryptosystem at the user's entity.
Claim 2
Independent Claim
135 words
A method for depositing a private key used in an RSA cryptosystem, comprising the steps of: dividing a private key of a user into a first partial private key and a second partial private key at a user's entity, where the first partial private key is set to be maintained at the user's entity; depositing the second partial private key from the user's entity to another entity; delivering the second partial private key from said another entity to the user's entity in response to a request from the user's entity; and composing the first partial private key maintained at the user's entity and the second partial private key delivered from said another entity so as to obtain the private key to be used in a processing according to the RSA cryptosystem at the user's entity.
Claim 3
Dependent Claim
100 words
The method of claim 1, wherein at the depositing step, the user's entity encrypts the second partial private key by using an encryption key so as to obtain an encrypted second partial private key that can be decrypted by using a key decryption key known only to the user's entity, and deposits the encrypted second partial private key; at the delivering step, said another entity delivers the encrypted second partial private key; and at the composing step, the user's entity obtains the second partial private key by decrypting the encrypted second partial private key by using the key encryption key.
Claim 4
Dependent Claim
23 words
The method of claim 2, wherein the encryption key and the key decryption key are a symmetric key generated at the user's entity.
Claim 5
Dependent Claim
36 words
The method of claim 3, wherein the symmetric key is given in a form of a hash value obtained from the first partial private key by using a one-way random hash function at the user's entity.
Claim 6
Dependent Claim
36 words
The method of claim 2, wherein the encryption key is the second partial private key itself, and the key decryption key is formed by the first partial private key and a public key of the user.
Claim 7
Dependent Claim
68 words
The method of claim 5, wherein said another entity maintains the second partial private key along with the public key, and delivers the second partial private key and the public key at the delivering step; and at the composing step, the user's entity forms the key decryption key from the first partial private key maintained at the user's entity and the public key delivered from said another entity.
Claim 8
Dependent Claim
123 words
The method of claim 1, wherein at the depositing step, the user's entity encrypts the second partial private key by using the second partial private key itself, further encrypts an encrypted second partial private key by using a symmetric key known only to the user's entity so as to obtain a deposit key, and deposits the deposit key; at the delivering step, said another entity delivers the deposit key; and at the composing step, the user's entity obtains the encrypted second partial private key by decrypting the deposit key by using the symmetric key, and obtains the second partial private key by decrypting the encrypted second partial private key by using the first partial private key and a public key of the user.
Claim 9
Dependent Claim
36 words
The method of claim 7, wherein the symmetric key is given in a form of a hash value obtained from the first partial private key by using a one-way random hash function at the user's entity.
Claim 10
Dependent Claim
71 words
The method of claim 7, wherein said another entity maintains the second partial private key along with the public key, and delivers the second partial private key and the public key at the delivering step; and at the composing step, the user's entity decrypts the encrypted second partial private key by using the first partial private key maintained at the user's entity and the public key delivered from said another entity.
Claim 11
Dependent Claim
24 words
The method of claim 1, wherein the first partial private key is maintained at the user's entity as a password memorized by the user.
Claim 12
Dependent Claim
34 words
The method of claim 10, wherein the user's entity requests a delivery of the second partial private key to said another entity when the password is entered into the user's entity by the user.
Claim 13
Dependent Claim
38 words
The method of claim 1, wherein the user's entity requests a delivery of the second partial private key to said another entity when the user carries out the processing according to the RSA cryptosystem at the user's entity.
Claim 14
Dependent Claim
117 words
The method of claim 1, wherein at the depositing step, the user's entity also deposits prime numbers p and q that are used in generating the private key; at the delivering step, said another entity also delivers the prime numbers p and q along with the second partial private key; and the method further comprising the step of generating a new first partial private key and a new second partial private key which are different from the first partial private key and the second partial private key, without changing a public key of the user, by using the private key obtained at the composing step and the prime numbers p and q delivered at the delivering step.
Claim 15
Independent Claim
156 words
A method for depositing a private key used in an RSA cryptosystem, comprising the steps of: dividing a private key of a user into a plurality of partial private keys at a user's entity, where one of said plurality of partial private keys is set to be maintained at the user's entity; depositing remaining ones of said plurality of partial private keys from the user's entity to mutually different ones of other entities respectively; delivering the remaining ones of said plurality of partial private keys from the other entities to the user's entity in response to a request from the user's entity; and composing said one of said plurality of partial private keys maintained at the user's entity and the remaining ones of said plurality of partial private keys delivered from the other entities so as to obtain the private key to be used in a processing according to the RSA cryptosystem at the user's entity.
Claim 16
Independent Claim
156 words
A method for depositing a private key used in an RSA cryptosystem, comprising the steps of: dividing a private key of a user into a plurality of partial private keys at a user's entity, where one of said plurality of partial private keys is set to be maintained at the user's entity; depositing remaining ones of said plurality of partial private keys from the user's entity to mutually different ones of other entities respectively; delivering the remaining ones of said plurality of partial private keys from the other entities to the user's entity in response to a request from the user's entity; and composing said one of said plurality of partial private keys maintained at the user's entity and the remaining ones of said plurality of partial private keys delivered from the other entities so as to obtain the private key to be used in a processing according to the RSA cryptosystem at the user's entity.
Claim 17
Dependent Claim
122 words
The method of claim 14, wherein at the depositing step, the user's entity also deposits prime numbers p and q that are used in generating the private key to one of the other entities; at the delivering step, said one of the other entities also delivers the prime numbers p and q along with one of the remaining ones of said plurality of partial private keys; and the method further comprising the step of generating a plurality of new partial private keys which are different from said plurality of partial private keys, without changing a public key of the user, by using the private key obtained at the composing step and the prime numbers p and q delivered at the delivering step.
Claim 18
Independent Claim
158 words
A system for depositing a private key used in an RSA cryptosystem, comprising a user's entity and another entity, wherein the user's entity includes: a private key dividing unit for dividing a private key of a user into a first partial private key and a second partial private key, where the first partial private key is set to be maintained at the user's entity; a key depositing unit for depositing the second partial private key to said another entity; a partial private key acquisition unit for requesting a delivery of the second partial private key to said another entity and receiving the second partial private key delivered from said another entity; and a private key composition unit for composing the first partial private key maintained at the user's entity and the second partial private key delivered from said another entity so as to obtain the private key to be used in a processing according to the RSA cryptosystem.
Claim 19
Independent Claim
158 words
A system for depositing a private key used in an RSA cryptosystem, comprising a user's entity and another entity, wherein the user's entity includes: a private key dividing unit for dividing a private key of a user into a first partial private key and a second partial private key, where the first partial private key is set to be maintained at the user's entity; a key depositing unit for depositing the second partial private key to said another entity; a partial private key acquisition unit for requesting a delivery of the second partial private key to said another entity and receiving the second partial private key delivered from said another entity; and a private key composition unit for composing the first partial private key maintained at the user's entity and the second partial private key delivered from said another entity so as to obtain the private key to be used in a processing according to the RSA cryptosystem.
Claim 20
Dependent Claim
100 words
The system of claim 16, wherein the key depositing unit encrypts the second partial private key by using an encryption key so as to obtain an encrypted second partial private key that can be decrypted by using a key decryption key known only to the user's entity, and deposits the encrypted second partial private key; said another entity delivers the encrypted second partial private key in response to a request from the user's entity; and the private key composition unit obtains the second partial private key by decrypting the encrypted second partial private key by using the key encryption key.
Claim 21
Dependent Claim
23 words
The system of claim 17, wherein the encryption key and the key decryption key are a symmetric key generated at the user's entity.
Claim 22
Dependent Claim
36 words
The system of claim 18, wherein the symmetric key is given in a form of a hash value obtained from the first partial private key by using a one-way random hash function at the user's entity.
Claim 23
Dependent Claim
36 words
The system of claim 17, wherein the encryption key is the second partial private key itself, and the key decryption key is formed by the first partial private key and a public key of the user.
Claim 24
Dependent Claim
71 words
The system of claim 20, wherein said another entity maintains the second partial private key along with the public key, and delivers the second partial private key and the public key in response to a request from the user's entity; and the private key composition unit forms the key decryption key from the first partial private key maintained at the user's entity and the public key delivered from said another entity.
Claim 25
Dependent Claim
123 words
The system of claim 16, wherein the key depositing unit encrypts the second partial private key by using the second partial private key itself, further encrypts an encrypted second partial private key by using a symmetric key known only to the user's entity so as to obtain a deposit key, and deposits the deposit key; said another entity delivers the deposit key in response to a request from the user's entity; and the private key composition unit obtains the encrypted second partial private key by decrypting the deposit key by using the symmetric key, and obtains the second partial private key by decrypting the encrypted second partial private key by using the first partial private key and a public key of the user.
Claim 26
Dependent Claim
36 words
The system of claim 22, wherein the symmetric key is given in a form of a hash value obtained from the first partial private key by using a one-way random hash function at the user's entity.
Claim 27
Dependent Claim
74 words
The system of claim 23, wherein said another entity maintains the second partial private key along with the public key, and delivers the second partial private key and the public key in response to a request from the user's entity; and the private key composition unit decrypts the encrypted second partial private key by using the first partial private key maintained at the user's entity and the public key delivered from said another entity.
Claim 28
Dependent Claim
24 words
The system of claim 16, wherein the first partial private key is maintained at the user's entity as a password memorized by the user.
Claim 29
Dependent Claim
37 words
The system of claim 25, wherein the partial private key acquisition unit requests a delivery of the second partial private key to said another entity when the password is entered into the user's entity by the user.
Claim 30
Dependent Claim
41 words
The system of claim 16, wherein the partial private key acquisition unit requests a delivery of the second partial private key to said another entity when the user carries out the processing according to the RSA cryptosystem at the user's entity.
Claim 31
Dependent Claim
126 words
The system of claim 16, wherein the key depositing unit also deposits prime numbers p and q that are used in generating the private key; said another entity also delivers the prime numbers p and q along with the second partial private key in response to a request from the user's entity; and the private key composition unit also generates a new first partial private key and a new second partial private key which are different from the first partial private key and the second partial private key, without changing a public key of the user, by using the private key obtained from the first partial private key and the second partial private key and the prime numbers p and q delivered from said another entity.
Claim 32
Independent Claim
184 words
A system for depositing a private key used in an RSA cryptosystem, comprising a user's entity and other entities, wherein the user's entity includes: a private key dividing unit for dividing a private key of a user into a plurality of partial private keys, where one of said plurality of partial private keys is set to be maintained at the user's entity; a key depositing unit for depositing remaining ones of said plurality of partial private keys to mutually different ones of the other entities respectively; a partial private key acquisition unit for requesting a delivery of the remaining ones of said plurality of partial private keys to the other entities and receiving the remaining ones of said plurality of partial private keys delivered from the other entities; and a private key composition unit for composing said one of said plurality of partial private keys maintained at the user's entity and the remaining ones of said plurality of partial private keys delivered from the other entities so as to obtain the private key to be used in a processing according to the RSA cryptosystem.
Claim 33
Independent Claim
184 words
A system for depositing a private key used in an RSA cryptosystem, comprising a user's entity and other entities, wherein the user's entity includes: a private key dividing unit for dividing a private key of a user into a plurality of partial private keys, where one of said plurality of partial private keys is set to be maintained at the user's entity; a key depositing unit for depositing remaining ones of said plurality of partial private keys to mutually different ones of the other entities respectively; a partial private key acquisition unit for requesting a delivery of the remaining ones of said plurality of partial private keys to the other entities and receiving the remaining ones of said plurality of partial private keys delivered from the other entities; and a private key composition unit for composing said one of said plurality of partial private keys maintained at the user's entity and the remaining ones of said plurality of partial private keys delivered from the other entities so as to obtain the private key to be used in a processing according to the RSA cryptosystem.
Claim 34
Dependent Claim
132 words
The system of claim 29, wherein the key depositing unit also deposits prime numbers p and q that are used in generating the private key to one of the other entities; said one of the other entities also delivers the prime numbers p and q along with one of the remaining ones of said plurality of partial private keys in response to a request from the user's entity; and the private key composition unit generates a plurality of new partial private keys which are different from said plurality of partial private keys, without changing a public key of the user, by using the private key obtained from said one and the remaining ones of said plurality of partial private keys and the prime numbers p and q delivered from the other entities.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-06-06 | 2003-12-06 | 2004-06-06 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-06-06 | 2007-12-06 | 2008-06-06 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-06-06 | 2011-12-06 | 2012-06-06 | $7700.00 | Window Closed / Lapsed |