Patent · US Expired

Unified end-to-end security methods and systems for operating on insecure networks

US5960086A · kind A · utility

68Cited by
7References
70Claims
0Family size

Assignee

Inventor

Key dates

Filing dateNov 2, 1995
Grant dateSep 28, 1999
Priority date
Expiry dateNov 2, 2015

Classification

  • Technology area (CPC H)Electricity
  • CPC primaryH04L2209/56
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

Secure transmission of a message is achieved by using a one-time encryption key derived at the receiver and the sender from information present at both the sender and the receiver, but wherein the information from which the encryption key is derived is not transmitted between the sender and the receiver. A plurality of bytes, known as a master signature, is randomly generated and stored at the sender, wherein each byte is uniquely identified by an address. A first random subset of this plurality of bytes, called an access signature, and the addresses in the master signature of the bytes in this access signature, are stored at the receiver. To generate an encryption key, the receiver selects a second random subset of bytes, known as a session signature, from the access signature and sends the addresses in the master signature of the bytes in this session signature to the sender. The sender uses these addresses to identify the bytes in this session signature which bytes are used at both the sender and the receiver to derive the encryption key. If desired, these bytes can be used directly as the encryption key but preferably, these bytes are passed through a session signature-to-sessi…

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.