US6988198B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for initializing operation for an information security operation
Assignee: Entrust Corp
•
Filing: 1999-11-01
•
Granted: 2006-01-17
•
Expires: 2019-11-01
Abstract
Abstract A method and apparatus for initializing operation for information security operation for an entity utilizes shared information, such as shared secret information, that may be shared between the entity and other applications or operations within a system to initialize an entity. Prestored shared information that can be used as entity identification data (RV) and authentication data (IAK) that is associated with the entity identification data is encrypted and sent in clear text fashion to an initialization authentication unit, such as a server or other processing unit. The initialization authentication unit requests stored shared data from another processing unit that maintains a database. The other processing system then responds to the request by providing prestored shared data that can be used to, for example, decrypt the encrypted information sent in a clear text fashion to determine whether an entity is a proper user of the information security operation. Accordingly, no secure session is required, and no new generation of identification data or authentication data is required.
Inventors
- 👤 Robert Zuccherato
- 👤 Adrian Mancini
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 22:26
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/33; H; H04; H04L; H04L63/00; H04L63/08; H04L9/00; H04L9/32
Claims Analysis
Total Claims: 39
Claim 1
Independent Claim
126 words
A method for initializing operation for an information security operation for an entity comprising the steps of: obtaining data representing entity identification data; obtaining data representing shared data associated with the entity identification data; encrypting data, based on the shared data; communicating in a clear text fashion, the entity identification data and the encrypted data for evaluation by an initialization authentication unit; comparing prestored shared data to shared data derived from the encrypted data to obtain the entity identification data; and using the obtained entity identification data and the shared data as initialization registration data to register the entity as a proper user of the information security operation, in response to the step of comparing prestored shared data to shared data derived from the encrypted data.
Claim 2
Independent Claim
126 words
A method for initializing operation for an information security operation for an entity comprising the steps of: obtaining data representing entity identification data; obtaining data representing shared data associated with the entity identification data; encrypting data, based on the shared data; communicating in a clear text fashion, the entity identification data and the encrypted data for evaluation by an initialization authentication unit; comparing prestored shared data to shared data derived from the encrypted data to obtain the entity identification data; and using the obtained entity identification data and the shared data as initialization registration data to register the entity as a proper user of the information security operation, in response to the step of comparing prestored shared data to shared data derived from the encrypted data.
Claim 3
Dependent Claim
18 words
The method of claim 1 wherein the data that is encrypted includes data representing the entity identification data.
Claim 4
Dependent Claim
14 words
The method of claim 1 wherein the data that is encrypted includes temporal data.
Claim 5
Dependent Claim
38 words
The method of claim 2 including the step of generating first data that is a function of the entity identification data, and wherein the step of encrypting data includes encrypting the first data based on the shared data.
Claim 6
Dependent Claim
37 words
The method of claim 4 including the step of generating second data that is a function of the shared data, and wherein the step of encrypting data includes encrypting the first data based on the second data.
Claim 7
Dependent Claim
29 words
The method of claim 5 wherein the first data and second data are generated using a function from the group consisting of: a one way hash function and PAKE.
Claim 8
Dependent Claim
28 words
The method of claim 1 including the step of: pre-storing the data representing the entity identification data and pre-storing the shared data, prior to the steps of obtaining.
Claim 9
Dependent Claim
75 words
The method of claim 7 including the steps of: generating first data that is a function of the prestored data representing the entity identification data; storing the first data with the prestored shared data as database entries; extracting from a database entry, the prestored shared data based on the first data; generating second data as a function of the extracted prestored shared data; and providing the second data for use in the step of comparing.
Claim 10
Dependent Claim
13 words
The method of claim 1 wherein the shared data is shared secret data.
Claim 11
Dependent Claim
28 words
The method of claim 8 including the step of: prior to the step of comparing, decrypting, by the initialization authentication unit, the encrypted data using the second data.
Claim 12
Dependent Claim
36 words
The method of claim 1 wherein steps of comparing prestored shared data to shared data derived from the encrypted data includes comparing data derived from the prestored shared data to data derived from the shared data.
Claim 13
Independent Claim
242 words
A method for initializing operation for an information security operation for an entity comprising the steps of: obtaining pre-stored data representing entity identification data; obtaining pre-stored data representing shared secret data associated with the entity identification data; generating first data that is a function of the entity identification data, generating second data that is a function of the shared secret data, encrypting the first data based on the second data; communicating in a clear text fashion, the entity identification data and the encrypted first data for evaluation by an initialization authentication unit; generating a copy of the first data as a function of the prestored data representing the entity identification data; storing the copy of the first data with the prestored shared secret data as database entries; extracting from a database entry, the prestored shared secret data based on communicated first data; generating a copy of the second data as a function of the extracted prestored shared secret data; providing the copy of the second data for use in comparing pre-stored shared secret data to shared secret data derived from the encrypted first data to obtain the entity identification data; and using the obtained entity identification data and the shared secret data as initialization registration data to register the entity as a proper user of the information security operation, in response to the step of comparing data derived from pre-stored shared secret data to shared secret data derived from the encrypted data.
Claim 14
Independent Claim
242 words
A method for initializing operation for an information security operation for an entity comprising the steps of: obtaining pre-stored data representing entity identification data; obtaining pre-stored data representing shared secret data associated with the entity identification data; generating first data that is a function of the entity identification data, generating second data that is a function of the shared secret data, encrypting the first data based on the second data; communicating in a clear text fashion, the entity identification data and the encrypted first data for evaluation by an initialization authentication unit; generating a copy of the first data as a function of the prestored data representing the entity identification data; storing the copy of the first data with the prestored shared secret data as database entries; extracting from a database entry, the prestored shared secret data based on communicated first data; generating a copy of the second data as a function of the extracted prestored shared secret data; providing the copy of the second data for use in comparing pre-stored shared secret data to shared secret data derived from the encrypted first data to obtain the entity identification data; and using the obtained entity identification data and the shared secret data as initialization registration data to register the entity as a proper user of the information security operation, in response to the step of comparing data derived from pre-stored shared secret data to shared secret data derived from the encrypted data.
Claim 15
Dependent Claim
16 words
The method of claim 12 wherein the pre-stored data representing entity identification data includes temporal data.
Claim 16
Dependent Claim
42 words
The method of claim 12 wherein the first data and second data are generated using a function from the group consisting of: a one way hash function, SPEKE, a block cipher encryption, a MAC, a public key encryption, or the identity function.
Claim 17
Dependent Claim
34 words
The method of claim 12 including the step of: prior to the step of comparing, decrypting, by the initialization authentication unit, the encrypted first data using the second data based on the database entry.
Claim 18
Independent Claim
161 words
A system for initializing operation for an information security operation for an entity comprising: memory containing data representing entity identification data and data representing shared data associated with the entity identification data; a first processing unit, operatively coupled to receive the data representing entity identification data and the shared data, having an encryptor that encrypts data based on the shared data and communicates in a clear text fashion, the entity identification data and the encrypted data; an initialization authentication unit, operatively coupled to received the communicated entity identification data and the encrypted data and operatively coupled to the memory, that compares prestored shared data to shared data derived from the encrypted data to obtain the entity identification data; and uses the obtained entity identification data and the shared data as initialization registration data to register the entity as a proper user of the information security operation, in response to comparing prestored shared data to shared data derived from the encrypted data.
Claim 19
Independent Claim
161 words
A system for initializing operation for an information security operation for an entity comprising: memory containing data representing entity identification data and data representing shared data associated with the entity identification data; a first processing unit, operatively coupled to receive the data representing entity identification data and the shared data, having an encryptor that encrypts data based on the shared data and communicates in a clear text fashion, the entity identification data and the encrypted data; an initialization authentication unit, operatively coupled to received the communicated entity identification data and the encrypted data and operatively coupled to the memory, that compares prestored shared data to shared data derived from the encrypted data to obtain the entity identification data; and uses the obtained entity identification data and the shared data as initialization registration data to register the entity as a proper user of the information security operation, in response to comparing prestored shared data to shared data derived from the encrypted data.
Claim 20
Dependent Claim
18 words
The system of claim 16 wherein the data that is encrypted includes data representing the entity identification data.
Claim 21
Dependent Claim
14 words
The system of claim 16 wherein the data that is encrypted includes temporal data.
Claim 22
Dependent Claim
31 words
The system of claim 17 wherein the first processor generates first data that is a function of the entity identification data, and encrypts the first data based on the shared data.
Claim 23
Dependent Claim
30 words
The system of claim 19 wherein the first processor generates second data that is a function of the shared data, and encrypts the first data based on the second data.
Claim 24
Dependent Claim
40 words
The system of claim 19 wherein the first data and second data are generated using a function from the group consisting of: a one way hash function, SPEKE, block cipher encryption, a MAC, public key encryption, or the identity function.
Claim 25
Dependent Claim
78 words
The system of claim 20 including a second processor operatively coupled to the memory, that generates first data that is a function of the prestored data representing the entity identification data, stores the first data with the prestored shared data as database entries, extracts from a database entry, the prestored shared data based on the first data, generates second data as a function of the extracted prestored shared data; and provides the second data for use in comparing.
Claim 26
Dependent Claim
13 words
The system of claim 16 wherein the shared data is shared secret data.
Claim 27
Dependent Claim
14 words
The system of claim 22 wherein the initialization authentication unit includes the second processor.
Claim 28
Dependent Claim
21 words
The system of claim 22 wherein the initialization authentication unit, prior to comparing, decrypts the encrypted data using the second data.
Claim 29
Dependent Claim
26 words
The system of claim 22 wherein the initialization authentication unit, prior to comparing, encrypts shared data and compares the encrypted shared data with received encrypted data.
Claim 30
Dependent Claim
131 words
A storage medium comprising: memory containing executable instruction that when read by one or more processing units, causes the one or more processing units to: obtain data representing entity identification data; obtain data representing shared data associated with the entity identification data; encrypt data, based on the shared data; communicate in a clear text fashion, the entity identification data and the encrypted data for evaluation by an initialization authentication unit; compare prestored shared data to shared data derived from the encrypted data to obtain the entity identification data; and use the obtained entity identification data and the shared data as initialization registration data to register the entity as a proper user of the information security operation, in response to comparing prestored shared data to shared data derived from the encrypted data.
Claim 31
Dependent Claim
131 words
A storage medium comprising: memory containing executable instruction that when read by one or more processing units, causes the one or more processing units to: obtain data representing entity identification data; obtain data representing shared data associated with the entity identification data; encrypt data, based on the shared data; communicate in a clear text fashion, the entity identification data and the encrypted data for evaluation by an initialization authentication unit; compare prestored shared data to shared data derived from the encrypted data to obtain the entity identification data; and use the obtained entity identification data and the shared data as initialization registration data to register the entity as a proper user of the information security operation, in response to comparing prestored shared data to shared data derived from the encrypted data.
Claim 32
Dependent Claim
19 words
The storage medium of claim 27 wherein the data that is encrypted includes data representing the entity identification data.
Claim 33
Dependent Claim
15 words
The storage medium of claim 27 wherein the data that is encrypted includes temporal data.
Claim 34
Dependent Claim
51 words
The storage medium of claim 28 including memory containing executable instruction that when read by the one or more processing units, causes the one or more processing units to generate first data that is a function of the entity identification data, and encrypt the first data based on the shared data.
Claim 35
Dependent Claim
50 words
The storage medium of claim 30 including memory containing executable instruction that when read by the one or more processing units, causes the one or more processing units to generate second data that is a function of the shared data, and encrypt the first data based on the second data.
Claim 36
Dependent Claim
30 words
The storage medium of claim 31 wherein the first data and second data are generated using a function from the group consisting of: a one way hash function and PAKE.
Claim 37
Dependent Claim
50 words
The storage medium of claim 27 including memory containing executable instructions that when read by the one or more processing units, causes the one or more processing units to pre-store the data representing the entity identification data and pre-storing the shared data, prior to obtaining data representing entity identification data.
Claim 38
Dependent Claim
107 words
The storage medium of claim 33 including executable instructions that when read by the one or more processing units, causes the one or more processing units to: generate first data that is a function of the prestored data representing the entity identification data; store the first data with the prestored shared data as database entries; extract from a database entry, the prestored shared data based on the first data; generate second data as a function of the extracted prestored shared data; and provide the second data for use in comparing prestored shared data to shared data derived from the encrypted data to obtain the entity identification data.
Claim 39
Dependent Claim
14 words
The storage medium of claim 27 wherein the shared data is shared secret data.
References Cited (Backward Citations)
US4783798A
Cited
US4771461A
Cited
US6226383B1
Cited
US6378072B1
Cited
US6038319A
Cited
US6609198B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2009-01-16 | 2009-07-18 | 2010-01-17 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2013-01-16 | 2013-07-18 | 2014-01-17 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2017-01-16 | 2017-07-18 | 2018-01-17 | $7700.00 | Window Closed / Lapsed |