Patent US5432849A successfully refreshed from Google Patents.
US5432849A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Secure cryptographic operations using control vectors generated inside a cryptographic facility
Assignee: International Business Machines Corp
•
Filing: 1993-08-10
•
Granted: 1995-07-11
•
Expires: 2013-08-10
Abstract
Abstract The invention described herein suggests methods of cryptographic key management based on control vectors in which the control vectors are generated or derived internal to a cryptographic facility implementing a set of cryptographic operations. The methods of alternate control vector enforcement described in the present application provide a high-integrity facility to ensure that cryptographic keys are used in a manner consistent with the type and usage attributes assigned to the keys by the originator of those keys. Since the control vectors are generated or derived internal to the cryptographic facility on the basis of data contained in each cryptographic service request to the cryptographic facility, control vectors need not be stored or managed outside the cryptographic facility.
Inventors
- 👤 Donald B. Johnson
- 👤 An V. Le
- 👤 Stephen M. Matyas
- 👤 Rostislaw Prymak
- 👤 John D. Wilkins
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-23 15:44
CPC Classifications
G; G06; G06F; G06F12/00; G06F12/14; G06F12/1408
Claims Analysis
Total Claims: 17
Claim 1
Independent Claim
170 words
In a data processing system executing a program which outputs cryptographic service requests to a cryptographic facility for operations with cryptographic keys which are associated with control vectors, each of said control vectors comprising one or more fields of predefined values which define the functions which the associated key is allowed by its originator to perform, apparatus for performing cryptographic operations within said cryptographic facility, comprising: control vector production means, having an input channel for receiving input information comprising a cryptographic service request, for generating a control vector internally within said cryptographic facility and for providing said control vector at an output channel thereof in response to said cryptographic service request, said control vector having an associated key value; and cryptographic transformation means, having a first input channel for receiving said input information and a second input channel for receiving said control vector from said output channel of said control vector production means, for transforming said input information into output information using said control vector and said associated key value.
Claim 2
Dependent Claim
170 words
In a data processing system executing a program which outputs cryptographic service requests to a cryptographic facility for operations with cryptographic keys which are associated with control vectors, each of said control vectors comprising one or more fields of predefined values which define the functions which the associated key is allowed by its originator to perform, apparatus for performing cryptographic operations within said cryptographic facility, comprising: control vector production means, having an input channel for receiving input information comprising a cryptographic service request, for generating a control vector internally within said cryptographic facility and for providing said control vector at an output channel thereof in response to said cryptographic service request, said control vector having an associated key value; and cryptographic transformation means, having a first input channel for receiving said input information and a second input channel for receiving said control vector from said output channel of said control vector production means, for transforming said input information into output information using said control vector and said associated key value.
Claim 3
Dependent Claim
29 words
The apparatus of claim 1 wherein said input information includes a value encrypted under a key formed by a logical combination of a master key and said control vector.
Claim 4
Dependent Claim
47 words
The apparatus of claim 1 wherein said control vector production means further comprises: means for storing said control vector and for outputting said control vector over said output channel of said control vector production means to said cryptographic transformation means in response to said cryptographic service request.
Claim 5
Dependent Claim
57 words
The apparatus of claim 1 wherein said control vector production means further comprises: means for storing a table of control vectors accessible by an index value associated with said cryptographic service request, an accessed control vector therefrom being output from said control vector production means to said cryptographic transformation means in response to said cryptographic service request.
Claim 6
Dependent Claim
57 words
The apparatus of claim 1 wherein said control vector production means further comprises: an instruction store for storing instructions to be output to said cryptographic transformation means for the execution of a requested cryptographic service, said instruction store including said control vector which is output to said cryptographic transformation means in response to said cryptographic service request.
Claim 7
Dependent Claim
63 words
The apparatus of claim 1 wherein said control vector production means further comprises: service request transformation means, having an input channel for receiving the cryptographic service request supplied to said input channel of said control vector production means, for changing said cryptographic service request into a control vector which is output to said cryptographic transformation means in response to said cryptographic service request.
Claim 8
Dependent Claim
63 words
The apparatus of claim 1 wherein said cryptographic service request includes a first portion having fields with predetermined values and a second portion having fields with variable values, said control vector production means forming a control vector from said first portion and from said second portion and outputting the control vector to said cryptographic transformation means in response to said cryptographic service request.
Claim 9
Dependent Claim
21 words
The apparatus of claim 1 wherein said control vector includes a plurality of fields, each field having a respective predefined value.
Claim 10
Dependent Claim
38 words
The apparatus of claim 1 wherein said control vector production means selects a control vector from a set of defined control vectors and provides the selected control vector over said output channel in response to said service request.
Claim 11
Dependent Claim
22 words
The apparatus of claim 9 wherein said control vector production means stores said set of defined control vectors in a lookup table.
Claim 12
Dependent Claim
16 words
The apparatus of claim 9 wherein said control vector production means generates said control vector algorithmically.
Claim 13
Dependent Claim
19 words
The apparatus of claim 1, further comprising: means responsive to said input information for generating said associated key value.
Claim 14
Dependent Claim
128 words
In a system in which a cryptographic facility receives cryptographic service requests originating from outside of said facility for operations with cryptographic keys which are associated with control vectors, each of said control vectors comprising one or more fields of predefined values which define the functions which the associated key is allowed by its originator to perform, apparatus for performing cryptographic operations within said cryptographic facility, comprising: control vector production means for generating a control vector internally within said cryptographic facility as a function of input information comprising a cryptographic service request; and key source means for generating an associated key value as a function of said input information; and cryptographic transformation means for cryptographically transforming said input information using said generated control vector and associated key value.
Claim 15
Dependent Claim
128 words
In a system in which a cryptographic facility receives cryptographic service requests originating from outside of said facility for operations with cryptographic keys which are associated with control vectors, each of said control vectors comprising one or more fields of predefined values which define the functions which the associated key is allowed by its originator to perform, apparatus for performing cryptographic operations within said cryptographic facility, comprising: control vector production means for generating a control vector internally within said cryptographic facility as a function of input information comprising a cryptographic service request; and key source means for generating an associated key value as a function of said input information; and cryptographic transformation means for cryptographically transforming said input information using said generated control vector and associated key value.
Claim 16
Dependent Claim
118 words
In a system in which a cryptographic facility receives cryptographic service requests originating from outside of said facility for operations with cryptographic keys which are associated with control vectors, each of said control vectors comprising one or more fields of predefined values which define the functions which the associated key is allowed by its originator to perform, a method of performing cryptographic operations within said cryptographic facility, comprising the steps of: generating a control vector internally within said cryptographic facility as a function of input information comprising a cryptographic service request; generating an associated key value as a function of said input information; and cryptographically transforming said input information using said generated control vector and associated key value.
Claim 17
Dependent Claim
118 words
In a system in which a cryptographic facility receives cryptographic service requests originating from outside of said facility for operations with cryptographic keys which are associated with control vectors, each of said control vectors comprising one or more fields of predefined values which define the functions which the associated key is allowed by its originator to perform, a method of performing cryptographic operations within said cryptographic facility, comprising the steps of: generating a control vector internally within said cryptographic facility as a function of input information comprising a cryptographic service request; generating an associated key value as a function of said input information; and cryptographically transforming said input information using said generated control vector and associated key value.
References Cited (Backward Citations)
US4850017A
Cited
US4941176A
Cited
US4924514A
Cited
US4924515A
Cited
US5103478A
Cited
US4918728A
Cited
US4993069A
Cited
US5007089A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1998-07-10 | 1999-01-09 | 1999-07-11 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2002-07-10 | 2003-01-09 | 2003-07-11 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2006-07-10 | 2007-01-09 | 2007-07-11 | $7700.00 | Window Closed / Lapsed |