US4888800A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Secure messaging systems
Assignee: HP Inc
•
Filing: 1988-03-01
•
Granted: 1989-12-19
•
Expires: 2008-03-01
Abstract
Abstract A secure communication system wherein encrypted messages are passed between selected pairs of user terminals in a secure messaging system. A link is first established between the two terminals of the pair, one terminal sending a request to a key distribution center (KDC), which then provides encrypting keys to both terminals so they can communicate with each other. (Messages involving the KDC are themselves protected by encryption). The keys sent out by the KDC are key transporting keys, which are used by the terminals solely to transport data transporting keys between each other. The data transporting keys are used to transport (encrypt) the actual messages, and for security are changed after a usage count is reached; a fresh data transporting key is then generated and transferred under the key transporting key. This minimizes the load on the KDC. A hierarchy or key transporting keys can be used. The KDC (but not the user terminals) maintains a log to enable recover after a system failure. A journey key can be generated to allow a user temporary access to a link from a third terminal.
Inventors
- 👤 Alan D. Marshall
- 👤 Christopher J. Mitchell
- 👤 Graeme J. Proudler
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 07:20
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0891; H04L9/0816; H04L9/0819; H04L9/0822; H04L9/083; H04L9/0833; H04L9/0836
Claims Analysis
Total Claims: 11
Claim 1
Independent Claim
140 words
A secure messaging system comprising: at least three terminals; a key distribution center; communication means for carrying messages amongst the terminals and between the terminals and the center; and means for providing a key means, a key transport key, and a plurality of data transport keys, the center being responsive to a message requesting a communication link between first and second ones of the terminals to encrypt the key means according to the key transport key and to send the encrypted key means to both terminals, each terminal being operative to decrypt the key means, to encrypt an associated one of the data transport keys according to the key means, to send the encrypted data transport key to the other terminal, to encrypt data according to the data transport keys, and to exchange the encrypted data with the other terminal.
Claim 2
Dependent Claim
140 words
A secure messaging system comprising: at least three terminals; a key distribution center; communication means for carrying messages amongst the terminals and between the terminals and the center; and means for providing a key means, a key transport key, and a plurality of data transport keys, the center being responsive to a message requesting a communication link between first and second ones of the terminals to encrypt the key means according to the key transport key and to send the encrypted key means to both terminals, each terminal being operative to decrypt the key means, to encrypt an associated one of the data transport keys according to the key means, to send the encrypted data transport key to the other terminal, to encrypt data according to the data transport keys, and to exchange the encrypted data with the other terminal.
Claim 3
Dependent Claim
54 words
A messaging system according to claim 1 wherein the key means comprises two keys, one for use in encrypting a data transport key to be sent from the first terminal to the second and the other for use in encrypting a data transport key to be sent from the second terminal to the first.
Claim 4
Dependent Claim
43 words
A messaging system according to claim 1 wherein the means for providing data transport keys is included within the terminals whereby each terminal can generate data transport keys and wherein the data transport key associated with a terminal is generated in that terminal.
Claim 5
Dependent Claim
54 words
A messaging system according to claim 3 wherein a terminal comprises: means for measuring the usage of its associated data transport key; means for changing the key when it has been used a predetermined amount in communication with another terminal; and means for causing the changed key to be sent to the other terminal.
Claim 6
Dependent Claim
33 words
A messaging system according to claim 1 wherein a key transporting key comprises a heirarchy of keys, a key higher in the heirarchy being used for encrypting a key lower in the heirarchy.
Claim 7
Dependent Claim
75 words
A messaging system according to claim 5 wherein a terminal comprises: means for measuring the usage of each key transporting key less than the highest in the heirarchy; means for changing such key when it has been used a predetermined amount in communication with another terminal; and means for encrypting the changed key according to the next highest in the heirarchy; and means for causing the changed key to be sent to the other terminal.
Claim 8
Dependent Claim
75 words
A messaging system according to claim 1 and further comprising: link termination means in a terminal responsive to a request to terminate a communication link between that terminal and a second terminal to delete from the first terminal any keys associated with the link and to send a termination message; means in the key distribution center for logging the termination message; and means for deleting from the second terminal any keys associated with the link.
Claim 9
Dependent Claim
39 words
A messaging system according to claim 7 wherein the means for deleting the keys from the second terminal comprises means in the key distribution center for sending a message to the second terminal instructing that the keys be deleted.
Claim 10
Dependent Claim
102 words
A messaging system according to claim 1 and further comprising: means in the key distribution center responsive to a request to forward messages from a first terminal to a second terminal to provide a journey key and to send the key to both terminals; means in the first terminal for storing the journey key and any received messages; and means in the second terminal for storing the journey key, the first terminal being responsive to a message call from the second terminal to encrypt any stored messages according to the journey key and to send the encrypted messages to the second terminal.
Claim 11
Dependent Claim
87 words
A messaging system according to claim 1 and further comprising: means for keeping a log of any messages received and sent by the key distribution center; means for storing from time to time backup information indicative of the status of the center; and means, operative if there is a failure in the center, to restore the center according to the stored backup information and to cause the center to again generate and transmit any keys which were sent subsequent to the last storage of the backup information.
References Cited (Backward Citations)
US4182933A
Cited
US4193131A
Cited
US4203166A
Cited
US4386233A
Cited
US4500750A
Cited
US4578531A
Cited
US4691355A
Cited
US4649233A
Cited
US4794644A
Cited
US4771461A
Cited
US4850017A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1992-12-18 | 1993-06-19 | 1993-12-19 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1996-12-18 | 1997-06-19 | 1997-12-19 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2000-12-18 | 2001-06-19 | 2001-12-19 | $7700.00 | Window Closed / Lapsed |