Patent US5835595A successfully refreshed from Google Patents.
US5835595A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for crytographically protecting data
Assignee: Fraser Research
•
Filing: 1996-09-04
•
Granted: 1998-11-10
•
Expires: 2016-09-04
Abstract
Abstract A method and apparatus for transferring encrypted information to a database. First certification information is transferred from a first database to a second database. Second certification information is then transferred from the second database to the first database, where both the first certification information and the second certification information is authenticated. If both certifications are authenticated, the transfer of the encrypted information to the second database is enabled.
Inventors
- 👤 Alexander Gibson Fraser
- 👤 Srinivasan Keshav
- 👤 A. M. Odlyzko
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-02 21:17
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/44; G06F21/445; G06F21/10; G06F21/109; G06F2211/00; G06F2211/007; G06F2211/008; G06F2221/00; G06F2221/21; G06F2221/2107; G11; G11B; G11B20/00; G11B20/00086
Claims Analysis
Total Claims: 59
Claim 1
Independent Claim
178 words
A method for transferring selected information T to a database, the method comprising the steps of: storing a first certification information PrA(PuL) in a first database. the first certification information including a first public key PuL encrypted using a first private key PrA; storing a character string X in the first database; storing a second certification information in a second database, the second certification information including the character string X encrypted using a first secret key ρ, and the encrypted character string ρ(X) encrypted using the first private key PrA; transferring the first certification information PrA(PuL) from the first database to a second database; transferring the second certification information PrA(ρ(X)) from the second database to the first database; verifying at the first database that the character string X stored in the first database equals the character string X contained in the second certification information; and enabling the transfer of the selected information T to the second database when the character string X stored in the first database equals the character string X contained in the second certification information.
Claim 2
Independent Claim
178 words
A method for transferring selected information T to a database, the method comprising the steps of: storing a first certification information PrA(PuL) in a first database. the first certification information including a first public key PuL encrypted using a first private key PrA; storing a character string X in the first database; storing a second certification information in a second database, the second certification information including the character string X encrypted using a first secret key ρ, and the encrypted character string ρ(X) encrypted using the first private key PrA; transferring the first certification information PrA(PuL) from the first database to a second database; transferring the second certification information PrA(ρ(X)) from the second database to the first database; verifying at the first database that the character string X stored in the first database equals the character string X contained in the second certification information; and enabling the transfer of the selected information T to the second database when the character string X stored in the first database equals the character string X contained in the second certification information.
Claim 3
Dependent Claim
70 words
The method according to claim 1, further comprising the steps of: encrypting a second secret key λ T using a third secret key λ; storing a second public key PuA, the encrypted second secret key λ(λ T ), the second secret key λ and a second private key PrL in the first database; and storing the first secret key ρ and the second public key PuA in the second database.
Claim 4
Dependent Claim
114 words
The method according to claim 2, wherein the step of transferring the second certification information PrA(ρ(X)) from the second database to the first database includes the steps of: decrypting the first certification information PrA(PuL) at the second database using the second public key PuA stored in the second database; encrypting the first secret key ρ at the second database using the first public key PuL decrypted at the second database; encrypting the second certification information PrA(ρ(X)) at the second database using the first public key PuL decrypted at the second database; and transferring the encrypted first secret key PuL(ρ) and the encrypted second certification information PuL(PrA(ρ(X)) from the second database to the first database.
Claim 5
Dependent Claim
122 words
The method according to claim 3, wherein the step of verifying at the first database that the character string X stored in the first database equals the character string X contained in the second certification information includes the steps of: decrypting the encrypted first secret key PuL(ρ) at the first database using the second private key PrL stored in the first database; decrypting the encrypted second certification information at the first database using the second private key PrL stored in the first database and the first secret key p decrypted at the first database; and verifying that the character string X stored in the first database equals the character string X contained in the second certification information decrypted at the first database.
Claim 6
Dependent Claim
140 words
The method according to claim 4, wherein the step of enabling the transfer of the selected information T to the second database includes the steps of: encrypting the second secret key λ T using the first secret key ρ decrypted at the first database when the character string X stored in the first data base equals the character string X contained in the second certification information; transferring the encrypted second secret key ρ(λ T ) to the first database; enabling the transfer of the selected information T to the second database when the character string X stored in the first database equals the character string X contained in the second certification information, the transferred selected information T being encrypted using the second secret key λ T ; and receiving the encrypted selected information λ T (T) at the second database.
Claim 7
Dependent Claim
81 words
The method according to claim 5, further comprising the steps of: storing the encrypted second secret key ρ(λ T ) encrypted at the first database in the second database; storing the encrypted selected information T in the second database; decrypting the second secret key λ T at the second database using the first secret key ρ; and decrypting the encrypted selected information λ T (T) at the second database using the second secret key λ T decrypted at the second database.
Claim 8
Dependent Claim
24 words
The method according to claim 6, further comprising the step of encrypting the selected information T using the second secret key λ T .
Claim 9
Dependent Claim
18 words
The method according to claim 7, wherein the encrypted selected information T is stored in a third database.
Claim 10
Dependent Claim
15 words
The method according to claim 8, wherein the first and third databases are the same.
Claim 11
Dependent Claim
26 words
The method according to claim 7, wherein the first database is associated with a certification module, and the second database is associated with a personality module.
Claim 12
Dependent Claim
25 words
The method according to claim 10, wherein the transferred selected information T is one of audio digital data, video digital data and textual digital data.
Claim 13
Dependent Claim
41 words
The method according to claim 6, wherein the second database further includes an identification information ID, and wherein the step of decrypting the encrypted information λ T (T) includes the step of inserting the identification information ID into the decrypted information.
Claim 14
Dependent Claim
36 words
The method according to claim 5, further comprising the step of recording each occurrence of transferring from the first database to the second database the second secret key ρ(λ T ) encrypted at the first database.
Claim 15
Dependent Claim
21 words
The method according to claim 13, further comprising the step of comparing a number of recorded occurrences to a predetermined number.
Claim 16
Independent Claim
306 words
A system comprising: a certification module having an associated first database storing a first certification information PrA(PuL), a first public key PuA, an encrypted first secret key λ(λ T ), a second secret key λ, a first private key PrL and a character string X, the first certification information being formed by encrypting a second public key PuL using a second private key PrA, and the encrypted first secret key λ T being encrypted using the second secret key λ; and a personality module having an associated second database storing a third secret key ρ, the first public key PuA and second certification information PrA(ρX), the second certification information PrA(ρ(X)) being formed from the character string X being encrypted by the third secret key ρ and the encrypted character string ρ(X) being further encrypted by the second private key PrA, the personality module receiving the first certification information from the certification module, decrypting the first certification information using the first public key PuA stored in the personality module to obtain the second public key PuL, encrypting the third secret key ρ using the decrypted second public key PuL, encrypting the second certification information PrA(ρ(X)) using the decrypted second public key PuL and transferring the encrypted third secret key PuL(ρ) and the encrypted second certification information PuL(PrA(ρ(X))) to the certification module, and the certification module decrypting the encrypted third secret key PuL(ρ) using the first private key PrL, decrypting the encrypted second certification information PuL(PrA(ρ(X))) using the first private key PrL, further decrypting the second certification information using the first public key PuA to obtain the character string X contained in the second certification information, and enabling transmission of selected information T to the personality module when the character string X stored in the first database equals the character string X contained in the second certification information.
Claim 17
Independent Claim
306 words
A system comprising: a certification module having an associated first database storing a first certification information PrA(PuL), a first public key PuA, an encrypted first secret key λ(λ T ), a second secret key λ, a first private key PrL and a character string X, the first certification information being formed by encrypting a second public key PuL using a second private key PrA, and the encrypted first secret key λ T being encrypted using the second secret key λ; and a personality module having an associated second database storing a third secret key ρ, the first public key PuA and second certification information PrA(ρX), the second certification information PrA(ρ(X)) being formed from the character string X being encrypted by the third secret key ρ and the encrypted character string ρ(X) being further encrypted by the second private key PrA, the personality module receiving the first certification information from the certification module, decrypting the first certification information using the first public key PuA stored in the personality module to obtain the second public key PuL, encrypting the third secret key ρ using the decrypted second public key PuL, encrypting the second certification information PrA(ρ(X)) using the decrypted second public key PuL and transferring the encrypted third secret key PuL(ρ) and the encrypted second certification information PuL(PrA(ρ(X))) to the certification module, and the certification module decrypting the encrypted third secret key PuL(ρ) using the first private key PrL, decrypting the encrypted second certification information PuL(PrA(ρ(X))) using the first private key PrL, further decrypting the second certification information using the first public key PuA to obtain the character string X contained in the second certification information, and enabling transmission of selected information T to the personality module when the character string X stored in the first database equals the character string X contained in the second certification information.
Claim 18
Dependent Claim
19 words
The system according to claim 15, wherein the selected information T is one of audio, visual and textual information.
Claim 19
Dependent Claim
14 words
The system according to claim 16, wherein the selected information T is digital information.
Claim 20
Dependent Claim
87 words
The system according to claim 17, wherein the selected information T is encrypted using the first secret key λ T , and wherein, when the character string X contained in the second certification information equals the character string X stored in the first database, the certification module encrypts the first secret key λ T using the third secret key ρ decrypted by the certification module, and transfers the encrypted first secret key ρ(λ T ) and the encrypted selected information λ T (T) to the personality module.
Claim 21
Dependent Claim
66 words
The system according to claim 18, wherein the personality module receives the encrypted first secret key ρ(λ T ) and the encrypted selected information λ T (T), decrypts the first secret key λ T using the third secret key ρ stored in the second database; and decrypts the encrypted selected information λ T (T) using the first secret key λ T decrypted by the personality module.
Claim 22
Dependent Claim
17 words
The system according to claim 19, wherein the selected information T is stored in a third database.
Claim 23
Dependent Claim
15 words
The system according to claim 20, wherein the first and third databases are the same.
Claim 24
Dependent Claim
31 words
The system according to claim 20, wherein the second database further stores identification information ID, and wherein the personality module inserts the identification information ID into the decrypted selected information T.
Claim 25
Dependent Claim
30 words
The system according to claim 22, wherein the certification module further includes a memory recording each occurrence of enabling the selected information T to be transferred to the personality module.
Claim 26
Dependent Claim
71 words
A personality module comprising: a database storing a first secret key ρ, a first public key PuA and first certification information PrA(ρ(X)), the first certification information PrA(ρ(X)) being formed by encrypting a character string X using the first secret key ρ, and by encrypting the encrypted character string ρ(X) using a first private key PrA; and a transceiver receiving a second public key PuL encrypted using the first private key PrA.
Claim 27
Dependent Claim
71 words
A personality module comprising: a database storing a first secret key ρ, a first public key PuA and first certification information PrA(ρ(X)), the first certification information PrA(ρ(X)) being formed by encrypting a character string X using the first secret key ρ, and by encrypting the encrypted character string ρ(X) using a first private key PrA; and a transceiver receiving a second public key PuL encrypted using the first private key PrA.
Claim 28
Dependent Claim
83 words
The personality module according to claim 24, wherein the personality module decrypts the encrypted second public key PrA(PuL) using the first public key PuA stored in the database, encrypts the first secret key ρ using the second public key PuL decrypted by the personality module, and encrypts the first certification information PrA(ρ(X) using the second public key PuL decrypted by the personality module; and wherein the transceiver transmits the encrypted first secret key PuL(ρ) and the encrypted first certification information PuL(PrA(ρ(X))) for verification.
Claim 29
Dependent Claim
23 words
The personality module according to claim 25, wherein the transceiver receives selected information T when the transmitted encrypted first certification information is verified.
Claim 30
Dependent Claim
20 words
The personality module according to claim 26, wherein the selected information T is one of audio, visual and textual information.
Claim 31
Dependent Claim
15 words
The personality module according to claim 27, wherein the selected information T is digital information.
Claim 32
Dependent Claim
47 words
The personality module according to claim 27, wherein the selected information T is encrypted with a second secret key λ T , and wherein, when the first certification information is verified, the transceiver receives the second secret key λ T encrypted using the first secret key ρ.
Claim 33
Dependent Claim
60 words
The personality module according to claim 29, wherein the transceiver receives the encrypted selected information λ T (T), and wherein the database decrypts the second secret key λ T using the first secret key ρ stored in the database, and decrypts the encrypted selected information λ T (T) using the second secret key λ T decrypted by the personality module.
Claim 34
Dependent Claim
31 words
The personality module according to claim 30, wherein the database further stores identification information ID, and wherein the personality module inserts the identification information ID into the decrypted selected information T.
Claim 35
Dependent Claim
198 words
A certification module comprising: a database storing an encrypted first public key PrA(PuL), a second public key PuA, an encrypted first secret key λ(λ T ), a second secret key λ, a first private key PrL and a character string X, the first public key PuL being encrypted using a second private key PrA, and the first secret key λ T being encrypted using the second secret key λ; and a transceiver transmitting the encrypted first public key PrA(PuL) and receiving encrypted certification information PuL(PrA(ρ(X))) encrypted using the first public key PuL and a third secret key ρ encrypted by the first public key PuL, the encrypted certification information including the character string X, the certification module decrypting the encrypted certification information PuL(PrA(ρ(X))) using the first private key PrL, decrypting the encrypted third secret key PuL(ρ) to obtain the third secret key ρ, decrypting the encrypted certification information using the second public key PuA, decrypting the character string X contained in the encrypted certification information using the third secret key ρ and enabling transmission of selected information T when the character string X contained in the encrypted certification information equals the character string X stored in the database.
Claim 36
Dependent Claim
198 words
A certification module comprising: a database storing an encrypted first public key PrA(PuL), a second public key PuA, an encrypted first secret key λ(λ T ), a second secret key λ, a first private key PrL and a character string X, the first public key PuL being encrypted using a second private key PrA, and the first secret key λ T being encrypted using the second secret key λ; and a transceiver transmitting the encrypted first public key PrA(PuL) and receiving encrypted certification information PuL(PrA(ρ(X))) encrypted using the first public key PuL and a third secret key ρ encrypted by the first public key PuL, the encrypted certification information including the character string X, the certification module decrypting the encrypted certification information PuL(PrA(ρ(X))) using the first private key PrL, decrypting the encrypted third secret key PuL(ρ) to obtain the third secret key ρ, decrypting the encrypted certification information using the second public key PuA, decrypting the character string X contained in the encrypted certification information using the third secret key ρ and enabling transmission of selected information T when the character string X contained in the encrypted certification information equals the character string X stored in the database.
Claim 37
Dependent Claim
20 words
The certification module according to claim 32, wherein the selected information T is one of audio, visual and textual information.
Claim 38
Dependent Claim
15 words
The certification module according to claim 33, wherein the selected information T is digital information.
Claim 39
Dependent Claim
63 words
The certification module according to claim 34, wherein when the character string X contained in the encrypted certification information equals the character string X stored in the database, the certification module encrypts the first secret key λ T using the third secret key ρ decrypted by the certification module, and the encrypted first secret key ρ(λ T ) is transmitted by the transceiver.
Claim 40
Dependent Claim
29 words
The certification module according to claim 35, wherein the selected information T is stored in another database, the another database being different from the database of the certification module.
Claim 41
Dependent Claim
17 words
The certification module according to claim 35, wherein the selected information T is stored in the database.
Claim 42
Dependent Claim
23 words
The certification module according to claim 35, further comprising a memory recording each occurrence of enabling the selected information T to be transferred.
Claim 43
Independent Claim
79 words
A method for transferring selected information T to a database, the method comprising the steps of: storing the first secret key ρ, a first public key PuA and the first certification information PrA(ρ(X)) in a first database, the certification information including a character string X encrypted using a first secret key ρ and further encrypted using a first private key PrA; and receiving from a second database a second public key PuL encrypted using the first private key PrA.
Claim 44
Independent Claim
79 words
A method for transferring selected information T to a database, the method comprising the steps of: storing the first secret key ρ, a first public key PuA and the first certification information PrA(ρ(X)) in a first database, the certification information including a character string X encrypted using a first secret key ρ and further encrypted using a first private key PrA; and receiving from a second database a second public key PuL encrypted using the first private key PrA.
Claim 45
Dependent Claim
94 words
The method according to claim 39, further comprising the steps of: decrypting the encrypted second public key PrA(PuL) at the first database using the first public key PuA stored in the first database; encrypting the first secret key ρ at the first database using the second public key PuL decrypted at the first database; encrypting the certification information PrA(ρ(X)) at the first database using the second public key PuL decrypted at the first database; and transmitting the encrypted first secret key PuL(ρ) and the encrypted certification information PuL(PrA(ρ(X))) to the second database for verification.
Claim 46
Dependent Claim
27 words
The method according to claim 40, further comprising the step of receiving selected information T at the first database when the transmitted encrypted certification information is verified.
Claim 47
Dependent Claim
19 words
The method according to claim 41, wherein the selected information T is one of audio, visual and textual information.
Claim 48
Dependent Claim
14 words
The method according to claim 40, wherein the selected information T is digital information.
Claim 49
Dependent Claim
34 words
The method according to claim 40, the method further comprising the step of receiving the second secret key λ T encrypted using the first secret key ρ when the first certification information is verified.
Claim 50
Dependent Claim
87 words
The method according to claim 44, wherein the selected information T is encrypted with a second secret key λ T , the method further comprising the steps of: receiving the encrypted selected information λ T (T) at the first database; decrypting the second secret key λ T at the first database using the first secret key ρ stored in the first database; and decrypting the encrypted selected information λ T (T) at the first database using the second secret key λ T decrypted at the first database.
Claim 51
Dependent Claim
35 words
The method according to claim 45, further comprising the steps of: storing identification information ID at the first database; and inserting the identification information ID into the decrypted selected information T at the first database.
Claim 52
Independent Claim
260 words
A method for transferring selected information T to a database, the method comprising the steps of: storing an encrypted first public key PrA(PuL), a second public key PuA, an encrypted first secret key λ(λ T ), a second secret key λ, a first private key PrL and a character string X at a first database, the first public key PuL being encrypted by a second private key PrA, and the first secret key λ T being encrypted using the second secret key λ; transmitting the encrypted first public key PrA(PuL) to a second database; receiving an encrypted certification information PuL(PrA(ρ(X))) and a third secret key ρ encrypted by the first public key PuL from the second database at the first database, the encrypted certification information including the character string X encrypted using the third secret key ρ, the encrypted character string ρ(X) being encrypted using the first public key PuL and the encrypted character string PuL(ρ(X)) being encrypted by the first public key PuL; decrypting the encrypted third secret key PuL(ρ) at the first database using the first private key PrL to obtain the third secret key ρ; decrypting the encrypted certification information PuL(PrA(ρ(X))) at the first database using the first private key PrL; decrypting the encrypted certification information using the second public key PuA; decrypting the character string X contained in the encrypted certification information using the third secret key ρ; and enabling transmission of selected information T when the character string X contained in the encrypted certification information equals the character string X stored in the first database.
Claim 53
Independent Claim
260 words
A method for transferring selected information T to a database, the method comprising the steps of: storing an encrypted first public key PrA(PuL), a second public key PuA, an encrypted first secret key λ(λ T ), a second secret key λ, a first private key PrL and a character string X at a first database, the first public key PuL being encrypted by a second private key PrA, and the first secret key λ T being encrypted using the second secret key λ; transmitting the encrypted first public key PrA(PuL) to a second database; receiving an encrypted certification information PuL(PrA(ρ(X))) and a third secret key ρ encrypted by the first public key PuL from the second database at the first database, the encrypted certification information including the character string X encrypted using the third secret key ρ, the encrypted character string ρ(X) being encrypted using the first public key PuL and the encrypted character string PuL(ρ(X)) being encrypted by the first public key PuL; decrypting the encrypted third secret key PuL(ρ) at the first database using the first private key PrL to obtain the third secret key ρ; decrypting the encrypted certification information PuL(PrA(ρ(X))) at the first database using the first private key PrL; decrypting the encrypted certification information using the second public key PuA; decrypting the character string X contained in the encrypted certification information using the third secret key ρ; and enabling transmission of selected information T when the character string X contained in the encrypted certification information equals the character string X stored in the first database.
Claim 54
Dependent Claim
19 words
The method according to claim 47, wherein the selected information T is one of audio, visual and textual information.
Claim 55
Dependent Claim
14 words
The method according to claim 48, wherein the selected information T is digital information.
Claim 56
Dependent Claim
66 words
The method according to claim 48, the method further comprising the steps of: encrypting the first secret key λ T using the third secret key ρ decrypted at the first database when the character string X contained in the encrypted certification information equals the character string X stored in the first database; and transmitting the encrypted first secret key ρ(λ T ) to the second database.
Claim 57
Dependent Claim
26 words
The method according to claim 50, wherein the selected information T is stored in a third database, the third database being different from the first database.
Claim 58
Dependent Claim
17 words
The method according to claim 50, wherein the selected information T is stored in the first database.
Claim 59
Dependent Claim
22 words
The method according to claim 50, further comprising step of recording each occurrence of enabling the selected information T to be transferred.
References Cited (Backward Citations)
US4438824A
Cited
US4458109A
Cited
US4578531A
Cited
US4825050A
Cited
US5073933A
Cited
US5295188A
Cited
US5249230A
Cited
US5157726A
Cited
US5497421A
Cited
US5497422A
Cited
US5696827A
Cited
US5568552A
Cited
US5646999A
Cited
US5535276A
Cited
US5638446A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-11-09 | 2002-05-11 | 2002-11-10 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-11-09 | 2006-05-11 | 2006-11-10 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-11-09 | 2010-05-11 | 2010-11-10 | $7700.00 | Window Closed / Lapsed |