Patent US6490680B1 successfully refreshed from Google Patents.
← Back to Patent Explorer
US6490680B1 Expired / Lapsed US ⏱️ 0.0 years remaining

Access control and authorization system

Assignee: Tecsec Inc
•
Filing: 1998-12-04
•
Granted: 2002-12-03
•
Expires: 2018-12-04
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A process of encrypting an object includes applying a hash algorithm to the object, generating a random number, combining a first plurality of splits including the random number to form a working split, encrypting the object using the working split, combining a second plurality of splits not including the random number to form a value, encrypting the random number using the value, encrypting the hashed object according to a signature algorithm using a user private key, encrypting the hashed object according to a selected algorithm using the working split as a key, forming a header including information that can be used to decrypt the object, encrypting the header, and adding the encrypted header to the encrypted object. The pluralities of splits include a fixed split, a variable split, and a label split corresponding to a selected label. The header includes the encrypted random number, a label, and a digital signature.

Inventors

  • 👤 Edward M. Scheidt
  • 👤 Ersin L. Domangue

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-09 17:30
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0442; H04L63/08; H04L63/0853; H04L63/0861; H04L63/10; H04L63/102; H04L63/12; H04L9/00; H04L9/14; H04L9/32; H04L9/3226; H04L9/3231; H04L9/3234; H04L9/3247; H04L2209/00; H04L2209/80; H04L2209/805

Claims Analysis

Total Claims: 11
Claim 1
Independent Claim 178 words
A process of securing an object, comprising: applying a cryptographic hash algorithm to the object to provide a hash value; storing the hash value on a token; generating a random key component; combining a first plurality of key components to form a first key; encrypting the object using the first key; combining a second plurality of key components to form a second key; encrypting the random key component using the second key to form an encrypted key component; encrypting the hash value according to a digital signature algorithm using a user private key, to provide a digital signature; encrypting the hash value according to a user algorithm using the first key; forming a header including information that can be used to decrypt the encrypted object, wherein the information includes the user algorithm, the encrypted key component, and decrypt read credentials; encrypting the header; and adding the encrypted header to the encrypted object; wherein the first plurality of key components includes the random key component, and the second plurality of key components does not include the random key component.
Claim 2
Dependent Claim 178 words
A process of securing an object, comprising: applying a cryptographic hash algorithm to the object to provide a hash value; storing the hash value on a token; generating a random key component; combining a first plurality of key components to form a first key; encrypting the object using the first key; combining a second plurality of key components to form a second key; encrypting the random key component using the second key to form an encrypted key component; encrypting the hash value according to a digital signature algorithm using a user private key, to provide a digital signature; encrypting the hash value according to a user algorithm using the first key; forming a header including information that can be used to decrypt the encrypted object, wherein the information includes the user algorithm, the encrypted key component, and decrypt read credentials; encrypting the header; and adding the encrypted header to the encrypted object; wherein the first plurality of key components includes the random key component, and the second plurality of key components does not include the random key component.
Claim 3
Dependent Claim 19 words
The process of claim 1 , wherein the user algorithm is selected from among a plurality of user algorithms.
Claim 4
Dependent Claim 19 words
The process of claim 1 , wherein the first plurality of key components includes a fixed organization key component.
Claim 5
Dependent Claim 19 words
The process of claim 1 , wherein the first plurality of key components includes a variable maintenance key component.
Claim 6
Dependent Claim 41 words
The process of claim 1 , further comprising: selecting at least one permission instance from a plurality of permission instances; wherein the first plurality of key components includes a label key component corresponding to the at least one selected permission instance.
Claim 7
Dependent Claim 16 words
The process of claim 1 , wherein the random key component is generated on the token.
Claim 8
Dependent Claim 14 words
The process of claim 1 , wherein the header is encrypted on the token.
Claim 9
Dependent Claim 29 words
The process of claim 5 , wherein the second plurality of key components includes a fixed organization key component, a variable maintenance key component, and the label key component.
Claim 10
Dependent Claim 26 words
The process of claim 5 , wherein the header further includes the encrypted key component, the at least one selected permission instance, and the digital signature.
Claim 11
Dependent Claim 106 words
A process of decrypting an object secured according to the process of claim 1 , comprising: decrypting the header to recover the information that can be used to decrypt the encrypted object, wherein the information includes the encrypted key component, the user algorithm, and the decrypt read credentials; checking at least some of the information that can be used to decrypt the encrypted object against the decrypt read credentials; using the second plurality of key components to recover the random key component; using the first plurality of key components to recover the first key; and decrypting the encrypted object using the algorithm and the first key.

References Cited (Backward Citations)

US5499297A Cited
US5694472A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2005-12-02 2006-06-03 2006-12-03 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2009-12-02 2010-06-03 2010-12-03 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2013-12-02 2014-06-03 2014-12-03 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag