EP0781003A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Generation of cryptographic signatures using hash keys
Assignee: Arris Technology Inc
•
Filing: 1996-09-11
•
Granted: —
•
Expires: 2016-09-11
Abstract
Abstract A method and apparatus are provided for generating a digital signature that authenticates information of a plurality of different information groups. Information from each group is hashed to produce a separate hash key for each group authenticating the information in that group. Particular combinations of the hash keys are hashed together to produce at least one combined hash key. Each of the hash keys is ultimately combined in a predetermined order with all other hash keys via the combined hash keys to produce the digital signature in a manner that authenticates the information of all of the information groups. The digital signature is reproducible without access to all of the information groups authenticated thereby. Instead, information from a first information group is provided together with a set of hash keys and combined hash keys embodying authenticated information from the other groups. The hash key for the first information group is produced locally and combined with the other hash keys and/or combined hash keys in order to reproduce the digital signature.
Inventors
- 👤 Eric Sprunk
- 👤 Paul Moroney
- 👤 Brant Candelore
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-24 11:07
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L9/3236; H04L9/3242; H04L9/3247; H04L2209/00; H04L2209/12; H04L2209/56; H04L9/50
Claims Analysis
Total Claims: 25
Claim 1
Independent Claim
75 words
A method for generating a digital signature that authenticates information of a plurality of different information groups, comprising the steps of: hashing information from each of said groups to produce a separate hash key for each group, each hash key authenticating the information in its respective group; hashing combinations of said hash keys together to produce at least one combined hash key; and deriving said digital signature from said at least one combined hash key.
Claim 2
Dependent Claim
16 words
A method in accordance with claim 1 wherein said hashing step comprises a bi-directional cryptographic process.
Claim 3
Dependent Claim
17 words
A method in accordance with claim 1 wherein said hashing step comprises a trapdoor one way function.
Claim 4
Independent Claim
26 words
A method in accordance with one of claims 1 to 3 wherein said digital signature is produced by hashing at least two combined hash keys together.
Claim 5
Independent Claim
31 words
A method in accordance with one of claims 1 to 3 wherein said digital signature is produced by hashing at least one combined hash key with at least one hash key.
Claim 6
Dependent Claim
29 words
A method in accordance with claim 5 wherein a plurality of hash keys and combined hash keys are hashed together in a predetermined order to produce said digital signature.
Claim 7
Independent Claim
50 words
A method in accordance with one of claims 1 to 3 wherein each of said hash keys is ultimately combined in a predetermined order with all other hash keys via said combined hash keys, thereby producing said digital signature in a manner that authenticates the information of said information groups.
Claim 8
Independent Claim
31 words
A method in accordance with one of claims 1 to 7 wherein said digital signature is used as a cryptographic key in controlling access to a service communicated to a receiver.
Claim 9
Independent Claim
24 words
A method in accordance with one of claims 1 to 8 wherein said hash keys are produced by authenticating information of different information groups.
Claim 10
Dependent Claim
28 words
A method in accordance with Claim 9 wherein said digital signature is used to determine whether or not information in any of the different information groups has changed.
Claim 11
Dependent Claim
105 words
A method for recovering the digital signature of claim 7 for use in accessing a service at a receiver, comprising the steps of: hashing a first information group at said receiver to obtain the hash key for that group; communicating to said receiver all other hash keys and combined hash keys used in producing said digital signature which are required by said receiver to recover said digital signature; and hashing the hash keys and combined hash keys communicated to the receiver as well as the hash key obtained for the first information group, all in accordance with said predetermined order, to reproduce said digital signature.
Claim 12
Dependent Claim
27 words
A method in accordance with claim 11 comprising the further step of encrypting said hash keys and combined hash keys prior to communicating them to said receiver.
Claim 13
Dependent Claim
37 words
A method in accordance with claim 12 wherein said hash keys and combined hash keys communicated to said receiver are encrypted under at least one of a hash key and combined hash key derivable at said receiver.
Claim 14
Dependent Claim
124 words
A method for reproducing the digital signature of claim 7 without access to all of the information groups authenticated thereby, comprising the steps of: obtaining the authenticated information from at least one desired information group authenticated by said digital signature; hashing the obtained information to reproduce the hash key for said desired information group; receiving a collection of hash keys and combined hash keys which are necessary to reproduce said digital signature in lieu of the actual information from which the hash keys and combined hash keys in said collection were produced; and hashing the reproduced hash key for said desired information group with said collection of hash keys and combined hash keys in accordance with said predetermined order to reproduce said digital signature.
Claim 15
Dependent Claim
94 words
A method in accordance with claim 14 wherein: said predetermined order comprises a tree structure having branches into which hash keys and combined hash keys are input for hashing and having a root from which said digital signature is output; and said information groups are prioritized in said tree structure by assigning the hash keys of those that are to be recovered with the least computation to branches nearest said root and assigning the hash keys of those that justify progressively more computation for recovery to branches that are progressively further from said root.
Claim 16
Dependent Claim
77 words
A method in accordance with claim 15 wherein: said information groups provide information for controlling access to services provided on a communication network; and the hash keys of information groups to be processed at an end user location in order to receive a service are assigned to branches close to said root, whereas the hash keys of information groups to be processed upstream of said end user location are assigned to branches further away from said root.
Claim 17
Dependent Claim
63 words
A method in accordance with claim 15 or 16 wherein the hash keys of information groups that are likely to be modified more frequently are allocated to lower branches of said tree structure than the hash keys of information groups that are likely to be modified less frequently, said lower branches being closer to said root than higher branches of said tree structure.
Claim 18
Independent Claim
57 words
A method in accordance with one of claims 1 to 3 wherein each of said hash keys is ultimately combined in a predetermined order established by a network structure with all other hash keys via said combined hash keys, thereby producing said digital signature in a manner that authenticates the information of all of said information groups.
Claim 19
Dependent Claim
15 words
A method in accordance with claim 18 wherein said network structure comprises a binary tree.
Claim 20
Dependent Claim
125 words
Receiver apparatus for recovering a digital signature that authenticates information from a plurality of information groups, without requiring the authenticated information from all of said information groups, said apparatus comprising: means for receiving the information from at least one of said information groups; means for hashing the received information to internally generate at least one first hash key; means for receiving at least one externally produced additional hash key used to authenticate information from at least one of said information groups that is not received by said apparatus; and means for combining said at least one first hash key with said at least one additional hash key according to a sequence from which said digital signature was produced; said combining means producing said digital signature.
Claim 21
Dependent Claim
24 words
Apparatus in accordance with claim 20 wherein said digital signature is a cryptographic key used to encrypt a service communicated to said receiver apparatus.
Claim 22
Dependent Claim
44 words
Apparatus in accordance with claim 20 or 21 wherein said at least one externally produced additional hash key is received encrypted, said apparatus further comprising means for decrypting said additional hash key prior to combining it with said at least one first hash key.
Claim 23
Dependent Claim
25 words
Apparatus in accordance with one of claims 20 to 22 wherein said combining means comprise hash functions for combining said first and additional hash keys.
Claim 24
Dependent Claim
17 words
Apparatus in accordance with claim 21 wherein said receiver apparatus comprises a decoder for pay television signals.
Claim 25
Dependent Claim
77 words
Receiver apparatus for recovering a previously produced digital signature from a plurality of hash keys, said apparatus comprising: means for internally generating at least one first hash key; means for receiving at least one externally produced additional hash key; and means for combining said at least one first hash key with said at least one additional hash key according to a sequence from which said digital signature was previously produced; said combining means recovering said digital signature.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.