Method to establish and enforce a network cryptographic security policy in a public key cryptosystem
October 31, 2011. Estimated Expiration Date is calculated based on simple USPTO term provisions. It does not account for terminal disclaimers, term adjustments, failure to pay maintenance fees, or other factors which might affect the term of a patent.Patent ReferencesCryptographic apparatus and method Public key cryptographic apparatus and method High security system for electronic signature verification Method and apparatus incorporating a one-way sequence for transaction and identity verification Cryptographic communications system and method Controlled use of cryptographic keys via generating station established control values Reliable document authentication system Electronic transaction system System for conveying information for the reliable authentification of a plurality of documents Data authentication using modification detection codes based on a public one way encryption function Inventors
ApplicationNo. 786227 filed on 10/31/1991US Classes:713/156, By certificate380/30, Public key380/279Key distribution centerExaminersPrimary: Tarcza, Thomas H.Assistant: Cain, David Attorney, Agent or FirmInternational ClassH04K 001/00AbstractDevice A in a public key cryptographic network will be constrained to continue to faithfully practice a security policy dictated by a network certification center, long after device A's public key PUMa has been certified. If device A alters its operations from the limits encoded in its configuration vector, for example by loading a new configuration vector, device A will be denied participation in the network. To accomplish this enforcement of the network security policy dictated by the certification center, it is necessary for the certification center to verify at the time device A requests certification of its public key PUMa, that device A is configured with the currently authorized configuration vector. Device A is required to transmit to the certification center a copy of device A's current configuration vector, in an audit record. the certification center then compares device A's copy of the configuration vector with the authorized configuration vector for device A stored at the certification center. If the comparison is satisfactory, then the certification center will issue the requested certificate and will produce a digital signiture dSigPRC on a representation of device A's public key PUMa, using the certification center's private certification key PRC. Thereafter, if device A attempts to change its configuration vector, device A's privacy key PRMa corresponding to the certified public key PUMa, will automatically become unavailable for use in communicating in the network.Other References
Field of SearchPublic key | |
