Patent · US Expired

Method for securely creating, storing and using encryption keys in a computer system

US6581162B1 · kind B1 · utility

82Cited by
25References
16Claims
0Family size

Assignee

Inventors

Key dates

Filing dateDec 31, 1996
Grant dateJun 17, 2003
Priority date
Expiry dateDec 31, 2016

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG06F21/83
  • WIPO fieldComputer technology
  • WIPO sectorElectrical engineering

Abstract

A secure environment for entering and storing information necessary to conduct encryption processes. In a computer system according to the invention, session keys, passwords, and encryption algorithms are maintained in a secure memory space such as System Management Mode (SMM) memory. In one disclosed embodiment of the invention, a user password is entered via a secure keyboard channel. The password is maintained in a secure memory space that is not accessible during normal computer operation. In addition to the user password, optional node identification information is stored in secure memory. The node identification information is appended to the user password, and both are subsequently encrypted by an encryption algorithm and encryption keys that are also stored in secure memory. Following the encryption process, the encrypted password and node identification information are communicated directly from secure memory to network interface circuitry for communication over a network. In another disclosed embodiment of the invention, data entered in a secure manner is utilized as an encryption key (or to generate an encryption key) for securely encrypting packets of data prior to comm…

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.