US6085320A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Client/server protocol for proving authenticity
Assignee: EMC Corp
•
Filing: 1997-04-21
•
Granted: 2000-07-04
•
Expires: 2017-04-21
Abstract
Abstract A protocol for establishing the authenticity of a client to a server in an electronic transaction by encrypting a certificate with a key known only to the client and the server. The trust of the server, if necessary, can be established by a public key protocol. The client generates and sends over a communications channel a message containing at least a part of a certificate encrypted with the server's public key or a secret session key. The server receives and processes the message to recover at least part of the certificate, verifies and accepts it as proof of the client's authenticity.
Inventors
- 👤 Burton S. Kaliski, Jr.
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-01 13:15
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/33; G06Q; G06Q20/00; G06Q20/04; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/382; G06Q20/3821; G06Q20/38215; G06Q20/40; G06Q20/409; G06Q20/4097; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; H04L63/08; H04L63/0823; H04L9/00; H04L9/08; H04L9/0816; H04L9/0838; H04L9/0841; H04L9/32; H04L9/3247; H04L9/3263; H04L9/3268; H04L9/3297; G06F2211/00; G06F2211/007; G06F2211/008; G06F2211/009; H04L2209/00; H04L2209/30; H04L2209/56; H04L9/50
Claims Analysis
Total Claims: 44
Claim 1
Independent Claim
69 words
A method for authenticating a user with a verifier, comprising the steps of: (a) receiving by a user from a credential issuer a credential comprising the credential issuer's digital signature; (b) transmitting from the user to the verifier over an encrypted communications channel credential verification information; and (c) authenticating the user based on the validity of the credential issuer's digital signature and in response to the credential verification information.
Claim 2
Independent Claim
69 words
A method for authenticating a user with a verifier, comprising the steps of: (a) receiving by a user from a credential issuer a credential comprising the credential issuer's digital signature; (b) transmitting from the user to the verifier over an encrypted communications channel credential verification information; and (c) authenticating the user based on the validity of the credential issuer's digital signature and in response to the credential verification information.
Claim 3
Dependent Claim
20 words
The method of claim 1, further comprising the step of transmitting unencrypted a portion of the credential to the verifier.
Claim 4
Dependent Claim
22 words
The method of claim 1 wherein step (b) comprises transmitting at least a portion of the credential over the encrypted communications channel.
Claim 5
Dependent Claim
18 words
The method of claim 1, wherein step (b) comprises transmitting a time-varying message over the encrypted communications channel.
Claim 6
Dependent Claim
75 words
The method of claim 1, wherein: step (a) comprises receiving a credential comprising the result of a one-way function computed on a secret value; step (b) comprises encrypting and transmitting the secret value; and step (c) comprises: (i) computing the result of the one-way function computed on the secret value; (ii) comparing the computed result with the one-way function result contained in the credential; and (iii) verifying the validity of the credential issuer's digital signature.
Claim 7
Dependent Claim
38 words
The method of claim 5, further comprising, before step (a), the steps of: calculating a one-way function on a secret value; and transmitting the result of the one-way function computed on the secret value to the credential issuer.
Claim 8
Dependent Claim
83 words
The method of claim 1, wherein: step (a) comprises receiving a credential comprising a root of a hash tree; and step (b) comprises encrypting and transmitting at least a portion of a path through the hash tree; and step (c) comprises: (i) verifying the path through the hash tree using the root contained in the credential; (ii) comparing the computed hash tree root with the hash tree root contained in the credential; and (iii) verifying the validity of the credential issuer's digital signature.
Claim 9
Dependent Claim
29 words
The method of claim 7, further comprising, before step (a), the steps of: constructing a hash tree; and transmitting the root of the hash tree to the credential issuer.
Claim 10
Dependent Claim
35 words
The method of claim 1, wherein: step (b) comprises encrypting and transmitting at least a portion of the credential issuer's digital signature; and step (c) comprises verifying the validity of the credential issuer's digital signature.
Claim 11
Dependent Claim
21 words
The method of claim 1 wherein step (c) comprises verifying the credential issuer's digital signature using the credential issuer's public key.
Claim 12
Dependent Claim
26 words
The method of claim 1, wherein step (b) comprises transmitting over a communications channel encrypted with a secret key shared by the user and the verifier.
Claim 13
Dependent Claim
24 words
The method of claim 1, wherein step (b) comprises transmitting over a communications channel encrypted with a key established with a key agreement technique.
Claim 14
Dependent Claim
20 words
The method of claim 1, wherein step (b) comprises transmitting over a communications channel encrypted with the verifier's public key.
Claim 15
Dependent Claim
26 words
The method of claim 1, wherein step (b) comprises transmitting over a communications channel encrypted with a key established by encryption with the verifier's public key.
Claim 16
Dependent Claim
33 words
The method of claim 1 further comprising the steps of: receiving, by the user, a certificate comprising the verifier's public key; and verifying, by the user, the certificate comprising the verifier's public key.
Claim 17
Dependent Claim
12 words
The method of claim 1, wherein the credential issuer comprises the verifier.
Claim 18
Dependent Claim
20 words
The method of claim 1, further comprising, before step (a), the step of authenticating the user to the credential issuer.
Claim 19
Dependent Claim
21 words
The method of claim 1, wherein step (c) comprises determining that the credential is not included in a credential revocation list.
Claim 20
Dependent Claim
82 words
The method of claim 1, wherein step (a) comprises receiving a credential comprising at least one of: (i) operations that the user is allowed to perform; (ii) systems that the user is allowed to access; (iii) locations that the user is allowed to access; (iv) files or directories that the user is allowed to access; (v) a valid time for the credential; (vi) an expiration time for the credential; and (vii) a list of verifiers with which the credential may be used.
Claim 21
Dependent Claim
20 words
The method of claim 1, wherein step (c) depends on an operation other than validation with the user's public key.
Claim 22
Dependent Claim
30 words
The method of claim 1 wherein step (a) comprises receiving a credential comprising the user's public key, and wherein step (c) is accomplished without operations involving the user's public key.
Claim 23
Independent Claim
64 words
A system for authenticating a user, comprising: a credential issuer issuing a credential comprising the credential issuer's digital signature; a user element receiving the credential from the credential issuer and transmitting credential verification information over an encrypted communications channel; and a verifier authenticating the user in response to the validity of the credential issuer's digital signature and in response to the credential verification information.
Claim 24
Independent Claim
64 words
A system for authenticating a user, comprising: a credential issuer issuing a credential comprising the credential issuer's digital signature; a user element receiving the credential from the credential issuer and transmitting credential verification information over an encrypted communications channel; and a verifier authenticating the user in response to the validity of the credential issuer's digital signature and in response to the credential verification information.
Claim 25
Dependent Claim
19 words
The system of claim 22 wherein the user element transmits unencrypted a portion of the credential to the verifier.
Claim 26
Dependent Claim
22 words
The system of claim 22, wherein the user element transmits credential verification information comprising a time-varying message over the encrypted communications channel.
Claim 27
Dependent Claim
22 words
The system of claim 22 wherein the user element transmits at least a portion of the credential over the encrypted communications channel.
Claim 28
Dependent Claim
64 words
The system of claim 22, wherein: the credential issuer issues a credential comprising the result of a one-way function computed on a secret value; the receiver encrypts and transmits the secret value; and the verifier calculates a one-way function on the secret value, compares the calculated one-way function result to result in the credential, and verifies the validity of the credential issuer's digital signature.
Claim 29
Dependent Claim
34 words
The system of claim 26, wherein the user element calculates a one-way function on a secret value, and transmits the result of the one-way function computed on the secret value to the credential issuer.
Claim 30
Dependent Claim
76 words
The system of claim 22, wherein: the credential issuer issues a credential comprising the root of a hash tree that is digitally signed by the credential issuer; the receiver encrypts and transmits at least a portion of a path through the hash tree; and the verifier verifies the at least a portion of a path through the hash tree using the root contained in the credential, and verifies the validity of the credential issuer's digital signature.
Claim 31
Dependent Claim
25 words
The system of claim 28, wherein the user element constructs a hash tree, and transmits the root of the hash tree to the credential issuer.
Claim 32
Dependent Claim
33 words
The system of claim 22, wherein the receiver encrypts and transmits at least a portion of the credential issuer's digital signature, and the verifier verifies the validity of the credential issuer's digital signature.
Claim 33
Dependent Claim
20 words
The system of claim 22, wherein the verifier verifies the credential isuer's digital signature using the credential issuer's public key.
Claim 34
Dependent Claim
26 words
The system of claim 22, wherein the user element transmits over a communications channel encrypted with a secret key shared by the user and the verifier.
Claim 35
Dependent Claim
24 words
The system of claim 22, wherein the user element transmits over a communications channel encrypted with a key established with a key agreement technique.
Claim 36
Dependent Claim
20 words
The system of claim 22, wherein the user element transmits over a communications channel encrypted with the verifier's public key.
Claim 37
Dependent Claim
26 words
The system of claim 22, wherein the user element transmits over a communications channel encrypted with a key established by encryption with the verifier's public key.
Claim 38
Dependent Claim
29 words
The system of claim 22 wherein: the certificate issuer issues a certificate comprising the verifier's public key; and the user element verifies the certificate comprising the verifier's public key.
Claim 39
Dependent Claim
12 words
The system of claim 22 wherein the credential issuer comprises the verifier.
Claim 40
Dependent Claim
14 words
The system of claim 22, wherein the user element authenticates to the credential issuer.
Claim 41
Dependent Claim
20 words
The system of claim 22, wherein the verifier determines that the credential is not included in a credential revocation list.
Claim 42
Dependent Claim
78 words
The system of claim 22, wherein the credential comprises at least one of: (i) operations that the user is allowed to perform; (ii) systems that the user is allowed to access; (iii) locations that the user is allowed to access; (iv) files or directories that the user is allowed to access; (v) a valid time for the credential; (vi) an expiration time for the credential; and (vii) a list of verifiers with which the credential may be used.
Claim 43
Dependent Claim
25 words
The system of claim 22, wherein the verifier depends on an operation other than the validation with the user's public key to authorize the user.
Claim 44
Dependent Claim
31 words
The system of claim 22 wherein the credential issuer issues a credential comprising the user's public key, and wherein the verifier authorizes the user without operations involving the user's public key.
References Cited (Backward Citations)
US4309569A
Cited
US4885778A
Cited
US5005200A
Cited
US5224163A
Cited
US5261002A
Cited
US5367573A
Cited
US5444780A
Cited
US5625693A
Cited
US5757914A
Cited
US5970145A
Cited
US5963649A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-07-04 | 2004-01-03 | 2004-07-04 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-07-04 | 2008-01-03 | 2008-07-04 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-07-04 | 2012-01-03 | 2012-07-04 | $7700.00 | Window Closed / Lapsed |