Patent US6151676A successfully refreshed from Google Patents.
US6151676A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Administration and utilization of secret fresh random numbers in a networked environment
Assignee: Uniloc 2017 LLC
•
Filing: 1997-12-24
•
Granted: 2000-11-21
•
Expires: 2017-12-24
Abstract
Abstract In a public key cryptosystem employing the El-Gamal algorithm, secret fresh random numbers are generated at a server and private keys of users, as encrypted with a symmetric algorithm by using individual user identifying keys determined by hashing the users' respective passphrases or biometric information (fingerprint, voiceprint, retina scan, or face scan) are maintained in a store accessible to the server, and the fresh random numbers and encrypted private keys are transmitted to the user equipment when needed via a network which is not secure. In order to prevent an attacker from discovering the random numbers or employing formerly used random numbers in a block replay attack, an interchange in the nature of a challenge response protocol is employed which passes at least one secret fresh random number from the server to the user equipment while also authenticating the user to the server. In this interchange, a first random number to be distributed to the user for use in signing a document and a second random number which is to be used by the user in forming a signature of a hashing together of the first and second random numbers as part of the challenge response protocol, are supplied to the user equipment in encrypted form together with a freshness value, and a signature by the server of a hashing together of the first and second random numbers and the freshness value.
Inventors
- 👤 David Cuccia
- 👤 Michael A. Epstein
- 👤 Michael S. Pasieka
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-01 06:01
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/30; H04L9/3006; H04L9/3013; H04L9/002; H04L9/32; H04L9/3247; H04L2209/00; H04L2209/08
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
229 words
A method of administration of secret fresh random numbers for use by users in a networked environment to which a server is coupled, there being associated with each user a unique respective set including an ID, a private key, and a public key corresponding to the private key, and with the server a private key and a public key, said method comprising, at the server: receiving via the network a user's ID; generating at least a first random number; forming an encrypted component using the public key of the user, said encrypted component containing at least the first random number in encrypted form; forming a freshness value corresponding to a current date/time; hashing together items including the first random number and the freshness value to form a first hash; forming a first signature of the first hash using the private key of the server; sending to the user via the network a package including at least the encrypted component, freshness value, and first signature; receiving a second signature of a second hash which has been formed by signing data from said package, derived at least from the first random number, said second signature being formed using the private key of the user; and first verifying, using the public key of the user, whether the second signature is for the same first random number as was sent by the server.
Claim 2
Independent Claim
229 words
A method of administration of secret fresh random numbers for use by users in a networked environment to which a server is coupled, there being associated with each user a unique respective set including an ID, a private key, and a public key corresponding to the private key, and with the server a private key and a public key, said method comprising, at the server: receiving via the network a user's ID; generating at least a first random number; forming an encrypted component using the public key of the user, said encrypted component containing at least the first random number in encrypted form; forming a freshness value corresponding to a current date/time; hashing together items including the first random number and the freshness value to form a first hash; forming a first signature of the first hash using the private key of the server; sending to the user via the network a package including at least the encrypted component, freshness value, and first signature; receiving a second signature of a second hash which has been formed by signing data from said package, derived at least from the first random number, said second signature being formed using the private key of the user; and first verifying, using the public key of the user, whether the second signature is for the same first random number as was sent by the server.
Claim 3
Dependent Claim
145 words
The method as claimed in claim 1, wherein: in addition to said first random number, at least second, third, and fourth random numbers are generated; at least the first and second random numbers are encrypted using the public key of the user and the third random number; said first hash is formed by hashing together at least said first random number, another random number contained in the package in encrypted form, and said freshness value; said first signature of the first hash is formed using the private key of the server and the fourth random number; said data is formed by hashing together the first and at least another random number contained in said package in encrypted form to produce a second hash; said second signature of the second hash has been formed using the private key of the user and the second random number.
Claim 4
Dependent Claim
53 words
The method as claimed in claim 1, further comprising reading from a storage means data corresponding to the user having the received ID, which data comprises the user's private key encrypted using a key determined from identifying information of the user, and said package further includes the encrypted private key of the user.
Claim 5
Dependent Claim
51 words
The method of claim 1, further comprising reading from a storage means data corresponding to the user having the received ID, which data comprises the user's private key encrypted using a key determined from identifying information of the user, and said package further includes the encrypted private key of the user.
Claim 6
Dependent Claim
41 words
The method as claimed in claim 3, wherein the user identifying information comprises a passphrase entered by the user at the user equipment, or biometric information which is obtained from the user by suitable measurement or scanning at the user equipment.
Claim 7
Dependent Claim
41 words
The method as claimed in claim 4, wherein the user identifying information comprises a passphrase entered by the user at the user equipment, or biometric information which is obtained from the user by suitable measurement or scanning at the user equipment.
Claim 8
Dependent Claim
59 words
The method as claimed in claim 4, further comprising receiving a third signature of a third hash of a document, which third signature has been formed using the private key of the user and the first random number, and second verifying the third signature using the public key of the user and an independently computed hash of the document.
Claim 9
Dependent Claim
59 words
The method as claimed in claim 6, further comprising receiving a third signature of a third hash of a document, which third signature has been formed using the private key of the user and the first random number, and second verifying the third signature using the public key of the user and an independently computed hash of the document.
Claim 10
Independent Claim
246 words
A method for obtaining and using secret fresh random numbers at user equipment in a networked environment to which a server is coupled, there being associated with each user a unique respective set including an ID, a private key, and a public key corresponding to the private key, and with the server a private key and a public key, said method comprising, at the user equipment: transmitting an ID of a user; receiving a package including an encrypted component containing at least a first random number in encrypted form, which encrypted component has been produced using the private key of the user, a freshness value corresponding to a date/time, and a first signature of a first hash, said first hash having been formed by hashing together items including said first random number and the freshness value, and said first signature having been formed using the private key of the server; decrypting the at least first random number using the public key of the user; determining whether the current date/time is no more than a predetermined amount later than the freshness value; independently computing the first hash; verifying the first signature using the public key of the server and the independently computed first hash; and if the results of the determining and verifying are positive: forming a second signature of data from said package, derived from at least the first random number using the private key of the user; and sending the second signature via the network.
Claim 11
Independent Claim
246 words
A method for obtaining and using secret fresh random numbers at user equipment in a networked environment to which a server is coupled, there being associated with each user a unique respective set including an ID, a private key, and a public key corresponding to the private key, and with the server a private key and a public key, said method comprising, at the user equipment: transmitting an ID of a user; receiving a package including an encrypted component containing at least a first random number in encrypted form, which encrypted component has been produced using the private key of the user, a freshness value corresponding to a date/time, and a first signature of a first hash, said first hash having been formed by hashing together items including said first random number and the freshness value, and said first signature having been formed using the private key of the server; decrypting the at least first random number using the public key of the user; determining whether the current date/time is no more than a predetermined amount later than the freshness value; independently computing the first hash; verifying the first signature using the public key of the server and the independently computed first hash; and if the results of the determining and verifying are positive: forming a second signature of data from said package, derived from at least the first random number using the private key of the user; and sending the second signature via the network.
Claim 12
Dependent Claim
152 words
The method as claimed in claim 9, wherein: said encrypted component contains at least first and second random numbers which have been encrypted together using the public key of the user and a third random number; said first hash has been formed by hashing together at least said first random number, another random number contained in said package, and said freshness value; said first signature of the first hash has been formed using the private key of the server and a fourth random number; at least said first and second random numbers are decrypted from the encrypted component using the private key of the user; said data is formed by hashing together at least two of the random numbers contained in said package in encrypted form to produce a second hash; said second signature of the second hash is formed using the private key of the user and the second random number.
Claim 13
Dependent Claim
53 words
The method as claimed in claim 9, wherein said package further includes the private key of the user encrypted with a user identifying key associated with the user, and said method further comprises decrypting the encrypted private key using a user identifying key determined from interaction with the user at the user equipment.
Claim 14
Dependent Claim
53 words
The method as claimed in claim 10, wherein said package further includes the private key of the user encrypted with a user identifying key associated with the user, and said method further comprises decrypting the encrypted private key using a user identifying key determined from interaction with the user at the user equipment.
Claim 15
Dependent Claim
53 words
The method as claimed in claim 11, wherein the user identifying key determined by interaction with the user at the user equipment is determined from a passphrase entered by the user at the user equipment or biometric information which is obtained from the user by suitable measurement or scanning at the user equipment.
Claim 16
Dependent Claim
53 words
The method as claimed in claim 12, wherein the user identifying key determined by interaction with the user at the user equipment is determined from a passphrase entered by the user at the user equipment or biometric information which is obtained from the user by suitable measurement or scanning at the user equipment.
Claim 17
Dependent Claim
39 words
The method as claimed in claim 12, further comprising: computing a third hash of a document; forming a third signature of the third hash using the user's private key and the first random number; and transmitting the third signature.
Claim 18
Dependent Claim
39 words
The method as claimed in claim 14, further comprising: computing a third hash of a document; forming a third signature of the third hash using the user's private key and the first random number; and transmitting the third signature.
Claim 19
Dependent Claim
159 words
A server system for supplying items for a plurality of users for use in signature or encryption operations employing the El-Gamal algorithm, there being associated with each user a unique respective set including a private key, and a public key corresponding to the private key, and with the server a private key and a public key, said system comprising: a random number generator for generating at least first, second, third, and fourth random numbers; and means for forming a package including an encrypted component containing at least the first and second random numbers encrypted together using the public key of a user and the third random number; a freshness value; and a first signature of a first hash formed by hashing together said first random number, at least another random number contained in said package in encrypted form, and said freshness value, said first signature being formed using the private key of the server and the fourth random number.
Claim 20
Dependent Claim
159 words
A server system for supplying items for a plurality of users for use in signature or encryption operations employing the El-Gamal algorithm, there being associated with each user a unique respective set including a private key, and a public key corresponding to the private key, and with the server a private key and a public key, said system comprising: a random number generator for generating at least first, second, third, and fourth random numbers; and means for forming a package including an encrypted component containing at least the first and second random numbers encrypted together using the public key of a user and the third random number; a freshness value; and a first signature of a first hash formed by hashing together said first random number, at least another random number contained in said package in encrypted form, and said freshness value, said first signature being formed using the private key of the server and the fourth random number.
Claim 21
Dependent Claim
88 words
The system as claimed in claim 17, further comprising verification means for verifying received second and third signatures, said second signature being of a second hash which has been formed by hashing together the first and at least another random number contained in said package, and having been made using the private key of the user and the second random number, and said third signature being of a hash of a document, and having been made using the private key of the user and the first random number.
Claim 22
Dependent Claim
55 words
The system as claimed in claim 18, further comprising computer readable storage means characterized in that there is stored therein encrypted private keys for the respective users which private keys have been encrypted using respective keys determined from respective user identifying information, and wherein said package further includes the encrypted private key of the user.
Claim 23
Dependent Claim
16 words
The system of claim 19, wherein the user identifying information comprises a passphrase or biometric information.
References Cited (Backward Citations)
US4956863A
Cited
US5481720A
Cited
US5136646A
Cited
US5148479A
Cited
US5406628A
Cited
US5475763A
Cited
US5778065A
Cited
US5590199A
Cited
US5434918A
Cited
US5719940A
Cited
US5638448A
Cited
US5608801A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-11-21 | 2004-05-22 | 2004-11-21 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-11-21 | 2008-05-22 | 2008-11-21 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-11-21 | 2012-05-22 | 2012-11-21 | $7700.00 | Window Closed / Lapsed |