US6424718B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Data communications system using public key cryptography in a web environment
Assignee: International Business Machines Corp
•
Filing: 1997-06-11
•
Granted: 2002-07-23
•
Expires: 2017-06-11
Abstract
Abstract Described is a communications system in which messages may be processed using public key cryptography with a private key (SKu) unique to one or more users ( 150 ). The system comprises a server means ( 130 ) adapted for data communication with a client ( 110 ) via a network ( 100 ), the server means ( 130 ) comprising first data storage means in which is stored in a secure manner a private key for the or each user, the private key being encrypted with a key encrypting key. The server means further comprises second data storage means in which is stored applet code executable on the client. The server provides the applet code to the client via the network in response to connection of the client to the server via the network. The applet code comprises secure processing means operable, when executed in the client, to receive a message to be processed from the user, to retrieve the encrypted private key for the user from the server means via the network, to receive the key encrypting key from the user, to decrypt the private key using the key encrypting key, and to perform the public key processing for the message using the decrypted private key. The applet code and the associated keys are removed from the client on termination of the applet code.
Inventors
- 👤 Christopher James Holloway
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 15:13
CPC Classifications
G; G06; G06F; G06F15/00; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3263; G06F21/00; G06F21/60; G06F21/606; H04L9/08; H04L9/0816; H04L9/0819; H04L9/0822; H04L9/3247; G06F2211/00; G06F2211/007; G06F2211/008; G06F2221/00; G06F2221/21; G06F2221/2103; G06F2221/2107
Claims Analysis
Total Claims: 6
Claim 1
Independent Claim
303 words
A communications system for processing messages using public key cryptography with a private key (SKu) unique to one or more users ( 150 ), the system comprising: server means ( 130 ) adapted for data communication with a client ( 110 ) via a network ( 100 ), the server means ( 130 ) comprising first data storage means for storing in a secure manner a private key for the or each user, the private key being encrypted with a key encrypting key; characterised in that the server means further comprises second data storage means in which is stored applet code executable on the client, the server providing the applet code to the client via the network in response to connection of the client to the server via the network; the applet code comprising secure processing means operable, when executed in the client during initial registration of a registering user, to generate the private key and an associated public key, to receive a key encrypting key from the registering user, to encrypt the private key using the key encrypting key received from the registering user, and to send the encrypted private key and public key from the client to the server means 130 for storage in the first data storage means; the secure processing means being further operable, when executed in the client, to receive a message to be processed from the user, to retrieve the encrypted private key for the user from the server means via the network, to receive the key encrypting key from the or each user, to decrypt the private key using the key encrypting key, and to perform the cryptographic key processing for the message using the decrypted private key; the applet code and the associated keys being removed from the client on termination of the applet code.
Claim 2
Dependent Claim
303 words
A communications system for processing messages using public key cryptography with a private key (SKu) unique to one or more users ( 150 ), the system comprising: server means ( 130 ) adapted for data communication with a client ( 110 ) via a network ( 100 ), the server means ( 130 ) comprising first data storage means for storing in a secure manner a private key for the or each user, the private key being encrypted with a key encrypting key; characterised in that the server means further comprises second data storage means in which is stored applet code executable on the client, the server providing the applet code to the client via the network in response to connection of the client to the server via the network; the applet code comprising secure processing means operable, when executed in the client during initial registration of a registering user, to generate the private key and an associated public key, to receive a key encrypting key from the registering user, to encrypt the private key using the key encrypting key received from the registering user, and to send the encrypted private key and public key from the client to the server means 130 for storage in the first data storage means; the secure processing means being further operable, when executed in the client, to receive a message to be processed from the user, to retrieve the encrypted private key for the user from the server means via the network, to receive the key encrypting key from the or each user, to decrypt the private key using the key encrypting key, and to perform the cryptographic key processing for the message using the decrypted private key; the applet code and the associated keys being removed from the client on termination of the applet code.
Claim 3
Dependent Claim
56 words
A communication system as claimed in claim 1 , wherein the server means comprises a key server for storing the encrypted private key, a web server connected to the network, and a fire-wall connecting the web server to the key server, the key server supplying the encrypted private key to the client via the web server.
Claim 4
Independent Claim
323 words
A method for processing messages using public key cryptography with a private key (SKu) unique to one or more users ( 150 ), the method comprising: storing, in a server means ( 130 ) adapted for data communication with a client ( 110 ) via a network ( 100 ), in which is stored in a secure manner a private key for the or each user, the private key being encrypted with a key encrypting key; storing in the server means applet code executable on the client; transmitting the applet code from the server to the client via the network in response to connection of the client to the server via the network; supplying secure processing means to the client via the applet code; generating, in the client via the secure processing means during initial registration of a registering user, the private key and an associated public key; receiving a key encrypting key from the registering user; encrypting, in the client via the secure processing means during initial registration of a registering user, the private key using the key encrypting key received from the registering user; sending the encrypted private key and public key from the client to the server means for storage in the first data storage means; receiving by the client via the secure processing means, a message to be processed from the user; retrieving by the client via the secure processing means, the encrypted private key for the user from the server means via the network; receiving by the client via the secure processing means, the key encrypting key from the user; decrypting in the client via the secure processing means, the private key using the key encrypting key; performing in the client via the secure processing means the cryptographic key processing for the message using the decrypted private key; and, removing from the client the applet code and the associated keys and algorithms on termination of the applet code.
Claim 5
Independent Claim
323 words
A method for processing messages using public key cryptography with a private key (SKu) unique to one or more users ( 150 ), the method comprising: storing, in a server means ( 130 ) adapted for data communication with a client ( 110 ) via a network ( 100 ), in which is stored in a secure manner a private key for the or each user, the private key being encrypted with a key encrypting key; storing in the server means applet code executable on the client; transmitting the applet code from the server to the client via the network in response to connection of the client to the server via the network; supplying secure processing means to the client via the applet code; generating, in the client via the secure processing means during initial registration of a registering user, the private key and an associated public key; receiving a key encrypting key from the registering user; encrypting, in the client via the secure processing means during initial registration of a registering user, the private key using the key encrypting key received from the registering user; sending the encrypted private key and public key from the client to the server means for storage in the first data storage means; receiving by the client via the secure processing means, a message to be processed from the user; retrieving by the client via the secure processing means, the encrypted private key for the user from the server means via the network; receiving by the client via the secure processing means, the key encrypting key from the user; decrypting in the client via the secure processing means, the private key using the key encrypting key; performing in the client via the secure processing means the cryptographic key processing for the message using the decrypted private key; and, removing from the client the applet code and the associated keys and algorithms on termination of the applet code.
Claim 6
Dependent Claim
51 words
A server system as claimed in claim 1 , comprising a key server for storing the encrypted private key, a web server connected to the network, and a fire-wall connecting the web server to the key server, the key server supplying the private key to the client via the web server.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-07-22 | 2006-01-21 | 2006-07-23 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-07-22 | 2010-01-21 | 2010-07-23 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-07-22 | 2014-01-21 | 2014-07-23 | $7700.00 | Window Closed / Lapsed |