BR9809272A - Estabelecimento de chave secreta inicial incluindo instalações para verificação de identidade - Google Patents
Estabelecimento de chave secreta inicial incluindo instalações para verificação de identidadeInfo
- Publication number
- BR9809272A BR9809272A BR9809272-3A BR9809272A BR9809272A BR 9809272 A BR9809272 A BR 9809272A BR 9809272 A BR9809272 A BR 9809272A BR 9809272 A BR9809272 A BR 9809272A
- Authority
- BR
- Brazil
- Prior art keywords
- applicant
- secret key
- key
- issuer
- registration
- Prior art date
Links
- 238000012795 verification Methods 0.000 title abstract 2
- 238000000034 method Methods 0.000 abstract 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0838—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these
- H04L9/0841—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these involving Diffie-Hellman or related key agreement protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Storage Device Security (AREA)
Abstract
Patente de Invenção: <B>"ESTABELECIMENTO DE CHAVE SECRETA INICIAL INCLUINDO INSTALAçõES PARA VERIFICAçãO DE IDENTIDADE"<D>. Um emissor oferece qualquer tipo de serviço seguro com uma chave secreta criptográfica atribuída a uma requerente de acordo com a presente invenção, o qual inclui um processo de registro de chave secreta. Usualmente, a chave secreta será carregada em um dispositivo de memória portátil ou outro armazenamento de chave secreta da requerente. Como etapas preliminares, o emissor estabelece sua chave pública para o criptosistema de Troca de chave de Encriptação Probabilística (PEKE), e a requerente obtém uma cópia de um software de registro de chave secreta, uma cópia da chave pública de emissor, e um dispositivo de memória portátil não inicializado. Uma vez iniciado pela requerente, o software de registro gera uma chave secreta interna de PEKE. A requerente escolhe uma consulta de senha e uma resposta de senha de registro que o software de registro MACs e encripta com uma chave derivada da chave secreta de PEKE. O software de registro deriva a chave atribuída à requerente requerente a partir da chave secreta de PEKE, e a carrega no armazenamento de chave secreta. Uma mensagem é enviada para o centro de processamento de dados de emissor, onde o processamento criptográfico (PEKE, MAC, encriptação) é revertido. Usando-se um canal aternativo (por exemplo, uma conversação telefónica), um agente do emissor verifica a identidade da requerente: o agente formula a consulta de senha, a requerente replica com a resposta de senha, e o emissor verifica o conhecimento da requerente de algum dado pessoal relevante. O agente do emissor pode aprovar o registro da requerente no banco de dados do emissor. Não há necessidade de personalizar o software ou o armazenamento de chave secreta antes do envio para a requerente, e há um único contato pessoal entre a requerente e o agente do emissor.
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US4604797P | 1997-05-09 | 1997-05-09 | |
| PCT/CA1998/000431 WO1998052316A1 (en) | 1997-05-09 | 1998-05-07 | Initial secret key establishment including facilities for verification of identity |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| BR9809272A true BR9809272A (pt) | 2000-06-27 |
Family
ID=21941295
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| BR9809272-3A BR9809272A (pt) | 1997-05-09 | 1998-05-07 | Estabelecimento de chave secreta inicial incluindo instalações para verificação de identidade |
Country Status (6)
| Country | Link |
|---|---|
| US (1) | US6061791A (pt) |
| EP (1) | EP1000481A1 (pt) |
| AU (1) | AU733803B2 (pt) |
| BR (1) | BR9809272A (pt) |
| CA (1) | CA2289452C (pt) |
| WO (1) | WO1998052316A1 (pt) |
Families Citing this family (71)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US10361802B1 (en) | 1999-02-01 | 2019-07-23 | Blanding Hovenweep, Llc | Adaptive pattern recognition based control system and method |
| WO1998039875A2 (de) * | 1997-03-04 | 1998-09-11 | Mannesmann Ag | Verfahren zur einbringung eines diensteschlüssels in ein endgerät und vorrichtungen zur durchführung des verfahrens |
| US7403922B1 (en) * | 1997-07-28 | 2008-07-22 | Cybersource Corporation | Method and apparatus for evaluating fraud risk in an electronic commerce transaction |
| DE59803145D1 (de) * | 1997-10-28 | 2002-03-28 | Brokat Infosystems Ag | Verfahren zum digitalen signieren einer nachricht |
| US6374355B1 (en) * | 1998-07-31 | 2002-04-16 | Lucent Technologies Inc. | Method for securing over-the-air communication in a wireless system |
| US7386727B1 (en) | 1998-10-24 | 2008-06-10 | Encorus Holdings Limited | Method for digital signing of a message |
| US6938154B1 (en) | 2000-06-19 | 2005-08-30 | Xerox Corporation | System, method and article of manufacture for a cryptographic key infrastructure for networked devices |
| KR100505103B1 (ko) * | 1999-10-11 | 2005-07-29 | 삼성전자주식회사 | 범용 직렬 버스용 메모리 스틱 |
| US6895391B1 (en) * | 1999-11-09 | 2005-05-17 | Arcot Systems, Inc. | Method and system for secure authenticated payment on a computer network |
| US7024557B1 (en) * | 1999-12-30 | 2006-04-04 | Samsung Electronics Co., Ltd. | System and method for secure provisioning of a mobile station from a provisioning server using encryption |
| GB0004178D0 (en) * | 2000-02-22 | 2000-04-12 | Nokia Networks Oy | Integrity check in a communication system |
| FI111207B (fi) * | 2000-03-24 | 2003-06-13 | Smarttrust Systems Oy | Viestin käsittely |
| FR2810139B1 (fr) * | 2000-06-08 | 2002-08-23 | Bull Cp8 | Procede de securisation de la phase de pre-initialisation d'un systeme embarque a puce electronique, notamment d'une carte a puce, et systeme embarque mettant en oeuvre le procede |
| US7421583B1 (en) | 2000-06-19 | 2008-09-02 | Xerox Corp | System, method and article of manufacture for determining a price of cryptograph IC services based on a computational burden thereof |
| US7051199B1 (en) | 2000-06-19 | 2006-05-23 | Xerox Corporation | System, method and article of manufacture for providing cryptographic services utilizing a network |
| US6990468B1 (en) * | 2000-06-19 | 2006-01-24 | Xerox Corporation | System, method and article of manufacture for cryptoserver-based auction |
| US6754821B1 (en) | 2000-06-19 | 2004-06-22 | Xerox Corporation | System, method and article of manufacture for transition state-based cryptography |
| WO2002005061A2 (en) | 2000-07-06 | 2002-01-17 | David Paul Felsher | Information record infrastructure, system and method |
| KR20010016233A (ko) * | 2000-11-24 | 2001-03-05 | 김동균 | 암호화 채팅시스템 |
| US20020106085A1 (en) * | 2001-01-05 | 2002-08-08 | Sandeep Jain | Security breach management |
| US6934389B2 (en) * | 2001-03-02 | 2005-08-23 | Ati International Srl | Method and apparatus for providing bus-encrypted copy protection key to an unsecured bus |
| US7181017B1 (en) | 2001-03-23 | 2007-02-20 | David Felsher | System and method for secure three-party communications |
| US7676430B2 (en) * | 2001-05-09 | 2010-03-09 | Lenovo (Singapore) Ptd. Ltd. | System and method for installing a remote credit card authorization on a system with a TCPA complaint chipset |
| US7995603B2 (en) * | 2001-05-22 | 2011-08-09 | Nds Limited | Secure digital content delivery system and method over a broadcast network |
| FI114062B (fi) * | 2001-06-08 | 2004-07-30 | Nokia Corp | Menetelmä tiedonsiirron turvallisuuden varmistamiseksi, tiedonsiirtojärjestelmä ja tiedonsiirtolaite |
| JP2003101523A (ja) * | 2001-09-21 | 2003-04-04 | Fujitsu Ltd | 秘匿機能を有する通信ネットワーク・システムおよび通信方法 |
| EP1436938B1 (en) * | 2001-10-12 | 2016-09-07 | Geo Trust, Inc. | Method for automated identification, processing and issuance of digital certificates |
| NO314379B1 (no) * | 2001-11-28 | 2003-03-10 | Telenor Asa | Registrering og aktivering av elektroniske sertifikater |
| US7937089B2 (en) * | 2002-02-06 | 2011-05-03 | Palo Alto Research Center Incorporated | Method, apparatus, and program product for provisioning secure wireless sensors |
| FR2837336B1 (fr) * | 2002-03-15 | 2006-03-03 | Oberthur Card Syst Sa | Procede d'echange d'informations d'authentification entre une entite de communication et un serveur-operateur |
| JP4474845B2 (ja) * | 2002-06-12 | 2010-06-09 | 株式会社日立製作所 | Crl発行通知機能付き認証基盤システム |
| US6837425B2 (en) | 2002-09-13 | 2005-01-04 | Visa U.S.A. Inc. | Compact protocol and solution for substantially offline messaging between portable consumer device and based device |
| US9818136B1 (en) | 2003-02-05 | 2017-11-14 | Steven M. Hoffberg | System and method for determining contingent relevance |
| US20040225709A1 (en) * | 2003-05-06 | 2004-11-11 | Joseph Kubler | Automatically configuring security system |
| US20050039057A1 (en) * | 2003-07-24 | 2005-02-17 | Amit Bagga | Method and apparatus for authenticating a user using query directed passwords |
| US7353468B2 (en) * | 2003-09-26 | 2008-04-01 | Ferguson John G | Secure exchange of information in electronic design automation |
| US7222312B2 (en) * | 2003-09-26 | 2007-05-22 | Ferguson John G | Secure exchange of information in electronic design automation |
| US20060259978A1 (en) * | 2003-09-26 | 2006-11-16 | Pikus Fedor G | Secure exchange of information in electronic design automation with license-related key generation |
| US7440982B2 (en) * | 2003-11-13 | 2008-10-21 | Commvault Systems, Inc. | System and method for stored data archive verification |
| JP3761557B2 (ja) * | 2004-04-08 | 2006-03-29 | 株式会社日立製作所 | 暗号化通信のための鍵配付方法及びシステム |
| US7464267B2 (en) * | 2004-11-01 | 2008-12-09 | Innomedia Pte Ltd. | System and method for secure transmission of RTP packets |
| CA2586816C (en) * | 2004-11-11 | 2013-03-26 | Blackberry Limited | Secure interface for versatile key derivation function support |
| DE602005022978D1 (de) * | 2005-02-14 | 2010-09-30 | Irdeto Access Bv | Verfahren zur Steuerung der Kommunikation zwischen einem Kopfendstellensystem und mehreren Kundensystemen |
| US8291224B2 (en) | 2005-03-30 | 2012-10-16 | Wells Fargo Bank, N.A. | Distributed cryptographic management for computer systems |
| US7779456B2 (en) * | 2005-04-27 | 2010-08-17 | Gary M Dennis | System and method for enhanced protection and control over the use of identity |
| CA2511366A1 (en) * | 2005-06-30 | 2005-10-16 | Thierry Moreau | Trust anchor key cryptogram and cryptoperiod management method |
| FR2890267B1 (fr) * | 2005-08-26 | 2007-10-05 | Viaccess Sa | Procede d'etablissement d'une cle de session et unites pour la mise en oeuvre du procede |
| DE102005046353A1 (de) * | 2005-09-28 | 2007-03-29 | Giesecke & Devrient Gmbh | Verfahren zur sicheren Übertragung wenigstens eines kryptographischen Produktionsschlüssels |
| US8874477B2 (en) | 2005-10-04 | 2014-10-28 | Steven Mark Hoffberg | Multifactorial optimization system and method |
| GB2431250A (en) * | 2005-10-11 | 2007-04-18 | Hewlett Packard Development Co | Data transfer system |
| US20090222927A1 (en) * | 2006-04-30 | 2009-09-03 | Pikus Fedor G | Concealment of Information in Electronic Design Automation |
| US9002018B2 (en) * | 2006-05-09 | 2015-04-07 | Sync Up Technologies Corporation | Encryption key exchange system and method |
| JP4994741B2 (ja) * | 2006-08-08 | 2012-08-08 | キヤノン株式会社 | 通信暗号化処理装置 |
| US7822207B2 (en) * | 2006-12-22 | 2010-10-26 | Atmel Rousset S.A.S. | Key protection mechanism |
| US20090060183A1 (en) * | 2007-08-29 | 2009-03-05 | Dynasig Corporation | Private lock infrastructure |
| CA2621147C (en) * | 2008-02-15 | 2013-10-08 | Connotech Experts-Conseils Inc. | Method of bootstrapping an authenticated data session configuration |
| US7522723B1 (en) | 2008-05-29 | 2009-04-21 | Cheman Shaik | Password self encryption method and system and encryption by keys generated from personal secret information |
| US9191200B1 (en) | 2010-10-07 | 2015-11-17 | L-3 Communications Corp. | System and method for changing the security level of a communications terminal during operation |
| US20130055369A1 (en) * | 2011-08-24 | 2013-02-28 | Mcafee, Inc. | System and method for day-zero authentication of activex controls |
| US9172529B2 (en) * | 2011-09-16 | 2015-10-27 | Certicom Corp. | Hybrid encryption schemes |
| US20130226812A1 (en) * | 2012-02-24 | 2013-08-29 | Mads Landrok | Cloud proxy secured mobile payments |
| US9811827B2 (en) | 2012-02-28 | 2017-11-07 | Google Inc. | System and method for providing transaction verification |
| US8819427B2 (en) * | 2012-06-15 | 2014-08-26 | Iolo Technologies, Llc | Device specific secure licensing |
| RU2562913C2 (ru) * | 2013-03-29 | 2015-09-10 | Виталий Олегович Клебан | Система мониторинга мобильных сотрудников |
| CN104348610A (zh) * | 2013-07-31 | 2015-02-11 | 中国银联股份有限公司 | 基于云pos交易敏感数据的安全传输方法和系统 |
| US9954848B1 (en) | 2014-04-04 | 2018-04-24 | Wells Fargo Bank, N.A. | Central cryptographic management for computer systems |
| US9288043B1 (en) * | 2014-10-17 | 2016-03-15 | Motorola Solutions, Inc. | Methods and systems for providing high-security cryptographic keys to mobile radios |
| US10382413B1 (en) | 2016-12-23 | 2019-08-13 | Cisco Technology, Inc. | Secure bootstrapping of client device with trusted server provided by untrusted cloud service |
| US11093627B2 (en) | 2018-10-31 | 2021-08-17 | L3 Technologies, Inc. | Key provisioning |
| US12217246B2 (en) * | 2020-04-06 | 2025-02-04 | Mastercard Asia/Pacific Pte. Ltd. | Method and system for use of an EMV card in a multi-signature wallet for cryptocurrency transactions |
| US20240323016A1 (en) * | 2023-03-21 | 2024-09-26 | Micron Technology, Inc. | Verify Public Keys by Devices without Secrets for the Generation of Respective Private Keys |
Family Cites Families (22)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US4200770A (en) * | 1977-09-06 | 1980-04-29 | Stanford University | Cryptographic apparatus and method |
| US4405829A (en) * | 1977-12-14 | 1983-09-20 | Massachusetts Institute Of Technology | Cryptographic communications system and method |
| US5020105A (en) * | 1986-06-16 | 1991-05-28 | Applied Information Technologies Corporation | Field initialized authentication system for protective security of electronic information networks |
| US4771461A (en) * | 1986-06-27 | 1988-09-13 | International Business Machines Corporation | Initialization of cryptographic variables in an EFT/POS network with a large number of terminals |
| DE3919734C1 (pt) * | 1989-06-16 | 1990-12-06 | Siemens Ag, 1000 Berlin Und 8000 Muenchen, De | |
| JPH04143881A (ja) * | 1990-10-05 | 1992-05-18 | Toshiba Corp | 相互認証方式 |
| US5142578A (en) * | 1991-08-22 | 1992-08-25 | International Business Machines Corporation | Hybrid public key algorithm/data encryption algorithm key distribution method based on control vectors |
| SE468068C (sv) * | 1991-09-30 | 1994-04-11 | Comvik Gsm Ab | Förfarande för personifiering av ett aktivt kort, för användning i ett mobiltelefonsystem |
| US5179591A (en) * | 1991-10-16 | 1993-01-12 | Motorola, Inc. | Method for algorithm independent cryptographic key management |
| ATE207642T1 (de) * | 1992-03-30 | 2001-11-15 | Telstra Corp Ltd | Geheimübertragungsverfahren und -system |
| JPH0697931A (ja) * | 1992-09-14 | 1994-04-08 | Fujitsu Ltd | パーソナル通信端末登録制御方式 |
| US5375159A (en) * | 1992-09-29 | 1994-12-20 | C & P Of Virginia | System and method for remote testing and protocol analysis of communication lines |
| EP0658021B1 (en) * | 1993-12-08 | 2001-03-28 | International Business Machines Corporation | A method and system for key distribution and authentication in a data communication network |
| US5535276A (en) * | 1994-11-09 | 1996-07-09 | Bell Atlantic Network Services, Inc. | Yaksha, an improved system and method for securing communications using split private key asymmetric cryptography |
| GB9422389D0 (en) * | 1994-11-05 | 1995-01-04 | Int Computers Ltd | Authenticating access control for sensitive functions |
| US5583939A (en) * | 1995-06-01 | 1996-12-10 | Chung N. Chang | Secure, swift cryptographic key exchange |
| CA2156780A1 (en) * | 1995-08-23 | 1995-09-23 | Thierry Moreau | Apparatus and method for cryptographic system users to obtain a jointly determined, secret, shared and unique bit string |
| US5680458A (en) * | 1995-11-14 | 1997-10-21 | Microsoft Corporation | Root key compromise recovery |
| US5768373A (en) * | 1996-05-06 | 1998-06-16 | Symantec Corporation | Method for providing a secure non-reusable one-time password |
| CA2177622A1 (en) * | 1996-05-29 | 1997-11-30 | Thierry Moreau | Cryptographic data integrity apparatus and method based on pseudo-random bit generators |
| US5784463A (en) * | 1996-12-04 | 1998-07-21 | V-One Corporation | Token distribution, registration, and dynamic configuration of user entitlement for an application level security system and method |
| US5875394A (en) * | 1996-12-27 | 1999-02-23 | At & T Wireless Services Inc. | Method of mutual authentication for secure wireless service provision |
-
1998
- 1998-05-07 BR BR9809272-3A patent/BR9809272A/pt not_active IP Right Cessation
- 1998-05-07 CA CA002289452A patent/CA2289452C/en not_active Expired - Fee Related
- 1998-05-07 WO PCT/CA1998/000431 patent/WO1998052316A1/en not_active Ceased
- 1998-05-07 AU AU72026/98A patent/AU733803B2/en not_active Ceased
- 1998-05-07 EP EP98919012A patent/EP1000481A1/en not_active Withdrawn
-
1999
- 1999-04-22 US US09/296,378 patent/US6061791A/en not_active Expired - Lifetime
Also Published As
| Publication number | Publication date |
|---|---|
| AU733803B2 (en) | 2001-05-24 |
| EP1000481A1 (en) | 2000-05-17 |
| WO1998052316A1 (en) | 1998-11-19 |
| US6061791A (en) | 2000-05-09 |
| AU7202698A (en) | 1998-12-08 |
| CA2289452A1 (en) | 1998-11-19 |
| CA2289452C (en) | 2008-07-29 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| BR9809272A (pt) | Estabelecimento de chave secreta inicial incluindo instalações para verificação de identidade | |
| JP6370722B2 (ja) | データセンタへのプラットフォームの内包検証 | |
| US8144874B2 (en) | Method for obtaining key for use in secure communications over a network and apparatus for providing same | |
| KR950701481A (ko) | 공용-키 암호 시스템에서 비밀키를 조회하는 방법(verifying secret keys in a public-key cryptosystem) | |
| BR0309437A (pt) | Esquema de autenticação, autorização e contabilidade baseado em certificado para interação de acoplamento livre | |
| Ellison | Establishing identity without certification authorities | |
| US5764772A (en) | Differential work factor cryptography method and system | |
| US8239679B2 (en) | Authentication method, client, server and system | |
| CN110932851B (zh) | 一种基于pki的多方协同运算的密钥保护方法 | |
| TW200818838A (en) | Mutual authentication and secure channel establishment between two parties using consecutive one-time passwords | |
| JP2001512654A (ja) | ネットワーク環境での私用鍵の管理及び利用法 | |
| WO1999034554A3 (en) | Administration and utilization of secret fresh random numbers in a networked environment | |
| WO2000074297A3 (en) | Method and apparatus for secure distribution of public/private key pairs | |
| FI974341A0 (fi) | Dataskydd foer datafoerbindelser | |
| ITRM20030100A1 (it) | Tecnica di accesso multiplo alla rete, da parte di terminale di utente interconnesso ad una lan e relativa architettura di riferimento. | |
| BR0309523A (pt) | Autenticação, autorização, contabilidade transitiva na inter-operação entre redes de acesso | |
| JP2002508892A (ja) | 双方向認証および暗号化システム | |
| WO2024186977A3 (en) | Systems and methods for secure authentication of contactless card | |
| ATE506797T1 (de) | Datenauthentifizierungsverfahren und agent basiertes system | |
| WO2002005475A3 (en) | Generation and use of digital signatures | |
| RU2004131500A (ru) | Аутентификация на основе вызова, не требующая знания секретных аутентификационных данных | |
| JP2002314532A (ja) | 複製端末発見方法 | |
| BR0008457A (pt) | Método de fornecimento de interface em uma rede de telefonia de banda larga | |
| DE69916420D1 (de) | Schlüsselverwaltungssystem | |
| NZ777623A (en) | Techniques for call authentication |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| B08F | Application fees: application dismissed [chapter 8.6 patent gazette] |
Free format text: REFERENTE A 12A ANUIDADE |
|
| B08K | Patent lapsed as no evidence of payment of the annual fee has been furnished to inpi [chapter 8.11 patent gazette] |
Free format text: REFERENTE AO DESPACHO 8.6 PUBLICADO NA RPI 2077 DE 26/10/2010. |