ES2060705T3 - Sistema jerarquico de gestion de claves. - Google Patents

Sistema jerarquico de gestion de claves.

Info

Publication number
ES2060705T3
ES2060705T3 ES89113868T ES89113868T ES2060705T3 ES 2060705 T3 ES2060705 T3 ES 2060705T3 ES 89113868 T ES89113868 T ES 89113868T ES 89113868 T ES89113868 T ES 89113868T ES 2060705 T3 ES2060705 T3 ES 2060705T3
Authority
ES
Spain
Prior art keywords
security
key
users
key certification
terminals
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
ES89113868T
Other languages
English (en)
Inventor
Robert Ivan Foster
Robert Frederick Pfeifer
Thomas James Mihm Jr
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Motorola Solutions Inc
Original Assignee
Motorola Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Motorola Inc filed Critical Motorola Inc
Application granted granted Critical
Publication of ES2060705T3 publication Critical patent/ES2060705T3/es
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04K—SECRET COMMUNICATION; JAMMING OF COMMUNICATION
    • H04K1/00—Secret communication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
    • H04L9/0833—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key
    • H04L9/0836—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key using tree structure or hierarchical structure
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)
  • Storage Device Security (AREA)

Abstract

SE PRESENTA UN SISTEMA JERARQUICO PARA EL MANEJO DE CLAVES QUE INCLUYE UN NUMERO DE TERMINALES DE SEGURIDAD (1-500). ESTOS TERMINALES SUMINISTRAN UN ACCESO SEGURO A UN CORRESPONDIENTE NUMERO DE USUARIOS (1-500). UN USUARIO INSERTA UN DISPOSITIVO DE ACTIVACION DE SEGURIDAD (SAD) O CLAVE EN EL TERMINAL DE SEGURIDAD PARA CONSEGUIR UNA CONEXION SEGURA A TRAVES DE LA RED DE COMUNICACIONES ESTABLECIDAS (PSTN). UN GRUPO DE TERMINALES DE SEGURIDAD (1-500) SE CONECTA A UNA AUTORIDAD DE CERTIFICACION DE CLAVES (KCA) PUEDEN EXISTIR VARIOS GRUPOS DE AUTORIDADES DE CERTIFICACION DE CLAVE (A,B,C) Y LOS CORRESPONDIENTES USUARIOS DEL TERMINAL DE SEGURIDAD (1-500). EN EL NIVEL MAS ALTO, UN CENTRO DE CERTIFICACION DE CLAVES (KCC) AUTORIZA LAS COMUNICACIONES DE SEGURIDAD MEDIANTE LAS AUTORIDADES DE CERTIFICACION DE CLAVES (KCA), A SU VEZ, LAS AUTORIDADES DE CERTIFICACION DE CLAVE AUTORIZA LAS COMUNICACIONES DE SEGURIDAD ENTRE LOS USUARIOS. COMO RESULTADO, SI UN NIVEL DE MANEJO DE CLAVE ESTA COMPROMETIDO, OTROS NIVELES Y USUARIOS NO ESTARAN AFECTADOS.
ES89113868T 1988-05-02 1989-07-27 Sistema jerarquico de gestion de claves. Expired - Lifetime ES2060705T3 (es)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US07/188,868 US4888801A (en) 1988-05-02 1988-05-02 Hierarchical key management system

Publications (1)

Publication Number Publication Date
ES2060705T3 true ES2060705T3 (es) 1994-12-01

Family

ID=22694885

Family Applications (1)

Application Number Title Priority Date Filing Date
ES89113868T Expired - Lifetime ES2060705T3 (es) 1988-05-02 1989-07-27 Sistema jerarquico de gestion de claves.

Country Status (6)

Country Link
US (1) US4888801A (es)
EP (1) EP0410037B1 (es)
KR (1) KR960014681B1 (es)
AU (1) AU624395B2 (es)
DE (1) DE68918855T2 (es)
ES (1) ES2060705T3 (es)

Families Citing this family (76)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5005200A (en) * 1988-02-12 1991-04-02 Fischer Addison M Public key/signature cryptosystem with enhanced digital signature certification
US4888801A (en) * 1988-05-02 1989-12-19 Motorola, Inc. Hierarchical key management system
US4969189A (en) * 1988-06-25 1990-11-06 Nippon Telegraph & Telephone Corporation Authentication system and apparatus therefor
US5003593A (en) * 1989-06-05 1991-03-26 Motorola, Inc. Teleconferencing method for a secure key management system
US5226172A (en) * 1989-06-12 1993-07-06 Motorola, Inc. Methods for configuring and performing 3-level password searching in a distributed computer system
US5392353A (en) * 1989-08-07 1995-02-21 Tv Answer, Inc. Interactive satellite broadcast network
US5224163A (en) * 1990-09-28 1993-06-29 Digital Equipment Corporation Method for delegating authorization from one entity to another through the use of session encryption keys
US5179591A (en) * 1991-10-16 1993-01-12 Motorola, Inc. Method for algorithm independent cryptographic key management
US5230020A (en) * 1991-10-16 1993-07-20 Motorola, Inc. Algorithm independent cryptographic key management
US5164988A (en) * 1991-10-31 1992-11-17 International Business Machines Corporation Method to establish and enforce a network cryptographic security policy in a public key cryptosystem
US5276735A (en) * 1992-04-17 1994-01-04 Secure Computing Corporation Data enclave and trusted path system
GB9213169D0 (en) * 1992-06-22 1992-08-05 Ncr Int Inc Cryptographic key management apparatus and method
US5596718A (en) * 1992-07-10 1997-01-21 Secure Computing Corporation Secure computer network using trusted path subsystem which encrypts/decrypts and communicates with user through local workstation user I/O devices without utilizing workstation processor
US5341426A (en) * 1992-12-15 1994-08-23 Motorola, Inc. Cryptographic key management apparatus and method
US5335281A (en) * 1992-12-15 1994-08-02 Motorola, Inc. Network controller and method
US5673034A (en) * 1993-10-12 1997-09-30 Saliga; Thomas V. Security system comprising three apparatuses sharing a time-varying code
US5465300A (en) * 1993-12-27 1995-11-07 Motorola, Inc. Secure communication setup method
AU705473B2 (en) * 1994-01-13 1999-05-20 Certco Inc Cryptographic system and method with key escrow feature
NZ329891A (en) * 1994-01-13 2000-01-28 Certco Llc Method of upgrading firmware of trusted device using embedded key
ATE189570T1 (de) * 1994-02-24 2000-02-15 Merdan Group Inc Verfahren und einrichtung zum aufbau einer kryptographischen verbindung zwischen elementen eines systems
US5787172A (en) * 1994-02-24 1998-07-28 The Merdan Group, Inc. Apparatus and method for establishing a cryptographic link between elements of a system
US5481613A (en) * 1994-04-15 1996-01-02 Northern Telecom Limited Computer network cryptographic key distribution system
US5530758A (en) * 1994-06-03 1996-06-25 Motorola, Inc. Operational methods for a secure node in a computer network
US5864683A (en) 1994-10-12 1999-01-26 Secure Computing Corporartion System for providing secure internetwork by connecting type enforcing secure computers to external network for limiting access to data based on user and process access rights
US5621795A (en) * 1994-12-27 1997-04-15 Pitney Bowes Inc. System and method for fault tolerant key management
US5661803A (en) * 1995-03-31 1997-08-26 Pitney Bowes Inc. Method of token verification in a key management system
US5742682A (en) * 1995-03-31 1998-04-21 Pitney Bowes Inc. Method of manufacturing secure boxes in a key management system
US5680456A (en) * 1995-03-31 1997-10-21 Pitney Bowes Inc. Method of manufacturing generic meters in a key management system
US5812666A (en) * 1995-03-31 1998-09-22 Pitney Bowes Inc. Cryptographic key management and validation system
JP3691519B2 (ja) * 1995-03-31 2005-09-07 ザ・コモンウェルス・オブ・オーストラリア 異なった機密保護レベルのネットワークを相互に連絡させる方法及び手段
IL113259A (en) * 1995-04-05 2001-03-19 Diversinet Corp A device and method for a secure interface for secure communication and data transfer
US5615266A (en) * 1995-07-13 1997-03-25 Motorola, Inc Secure communication setup method
US6766450B2 (en) 1995-10-24 2004-07-20 Corestreet, Ltd. Certificate revocation system
US7353396B2 (en) 1995-10-02 2008-04-01 Corestreet, Ltd. Physical access control
US7716486B2 (en) 1995-10-02 2010-05-11 Corestreet, Ltd. Controlling group access to doors
US7660994B2 (en) 1995-10-24 2010-02-09 Corestreet, Ltd. Access control
US7600129B2 (en) 1995-10-02 2009-10-06 Corestreet, Ltd. Controlling access using additional data
US5604804A (en) * 1996-04-23 1997-02-18 Micali; Silvio Method for certifying public keys in a digital signature scheme
US8015597B2 (en) 1995-10-02 2011-09-06 Corestreet, Ltd. Disseminating additional data used for controlling access
US7822989B2 (en) 1995-10-02 2010-10-26 Corestreet, Ltd. Controlling access to an area
US8732457B2 (en) 1995-10-02 2014-05-20 Assa Abloy Ab Scalable certificate validation and simplified PKI management
US7337315B2 (en) 1995-10-02 2008-02-26 Corestreet, Ltd. Efficient certificate revocation
US5796839A (en) * 1995-10-16 1998-08-18 Sony Corporation Encryption method, encryption apparatus, recording method, decoding method, decoding apparatus and recording medium
US8261319B2 (en) 1995-10-24 2012-09-04 Corestreet, Ltd. Logging access attempts to an area
US5913024A (en) 1996-02-09 1999-06-15 Secure Computing Corporation Secure server utilizing separate protocol stacks
US6002768A (en) * 1996-05-07 1999-12-14 International Computer Science Institute Distributed registration and key distribution system and method
US5841864A (en) * 1996-08-05 1998-11-24 Motorola Inc. Apparatus and method for authentication and session key exchange in a communication system
US5950195A (en) * 1996-09-18 1999-09-07 Secure Computing Corporation Generalized security policy management system and method
DE19649292A1 (de) * 1996-11-28 1998-06-04 Deutsche Telekom Ag Verfahren zum Sichern eines durch eine Schlüsselhierarchie geschützten Systems
US6604242B1 (en) * 1998-05-18 2003-08-05 Liberate Technologies Combining television broadcast and personalized/interactive information
US6381741B1 (en) 1998-05-18 2002-04-30 Liberate Technologies Secure data downloading, recovery and upgrading
US5917911A (en) * 1997-01-23 1999-06-29 Motorola, Inc. Method and system for hierarchical key access and recovery
US6330608B1 (en) 1997-03-31 2001-12-11 Stiles Inventions L.L.C. Method and system of a computer system for establishing communications between a service provider and a central service factory and registry in a computer system
US6035041A (en) * 1997-04-28 2000-03-07 Certco, Inc. Optimal-resilience, proactive, public-key cryptographic system and method
US6049872A (en) * 1997-05-06 2000-04-11 At&T Corporation Method for authenticating a channel in large-scale distributed systems
US6370249B1 (en) * 1997-07-25 2002-04-09 Entrust Technologies, Ltd. Method and apparatus for public key management
DE69935913T2 (de) * 1998-07-02 2008-01-10 Cryptography Research Inc., San Francisco Leckresistente aktualisierung eines indexierten kryptographischen schlüssels
WO2000077974A1 (en) 1999-06-11 2000-12-21 Liberate Technologies Hierarchical open security information delegation and acquisition
US6907127B1 (en) * 1999-06-18 2005-06-14 Digital Video Express, L.P. Hierarchical key management encoding and decoding
US6812938B2 (en) 2000-03-29 2004-11-02 Citicorp Development Center, Inc. Method and system for providing status indication and control to a computer network user
GB2365720B (en) * 2000-07-17 2004-04-14 Motorola Inc A communication system and method therefor
KR20040028933A (ko) * 2001-08-01 2004-04-03 다센 판 기대했던 소리의 널의 카디오이드 빔에 기초한 소리장치,시스템 및 방법
US7487363B2 (en) * 2001-10-18 2009-02-03 Nokia Corporation System and method for controlled copying and moving of content between devices and domains based on conditional encryption of content key depending on usage
WO2004102352A2 (en) 2003-05-13 2004-11-25 Corestreet, Ltd. Efficient and secure data currentness systems
US20050102513A1 (en) * 2003-11-10 2005-05-12 Nokia Corporation Enforcing authorized domains with domain membership vouchers
ES2572810T3 (es) 2003-11-19 2016-06-02 Assa Abloy Ab Descubrimiento y validación de rutas delegadas y distribuidas
JP4576210B2 (ja) 2003-12-16 2010-11-04 株式会社リコー 証明書転送装置、証明書転送システム、証明書転送方法、プログラム及び記録媒体
WO2005071877A1 (en) 2004-01-09 2005-08-04 Corestreet, Ltd. Signature-efficient real time credentials for ocsp and distributed ocsp
US7205882B2 (en) 2004-11-10 2007-04-17 Corestreet, Ltd. Actuating a security system using a wireless device
US8090105B2 (en) * 2004-11-24 2012-01-03 International Business Machines Corporation Broadcast encryption with dual tree sizes
WO2006083141A1 (en) * 2005-02-07 2006-08-10 Samsung Electronics Co., Ltd. Key management method using hierarchical node topology, and method of registering and deregistering user using the same
KR100636228B1 (ko) * 2005-02-07 2006-10-19 삼성전자주식회사 계층적인 노드 토폴로지를 이용한 키 관리 방법 및 이를이용한 사용자 등록 및 등록해제 방법
US8046588B2 (en) * 2006-02-23 2011-10-25 Rockwell Automation Technologies, Inc. Audit trail in a programmable safety instrumented system via biometric signature(s)
US20100215033A1 (en) * 2009-02-20 2010-08-26 Avaya Inc. Preferential routing of secured calls
WO2014177938A2 (en) 2013-03-15 2014-11-06 Assa Abloy Ab Digital credential with embedded authentication instructions
EP3276879B1 (de) 2016-07-26 2020-06-17 Siemens Aktiengesellschaft Verfahren zum betreiben einer anordnung, die eine unterstation und zumindest ein daran angeschlossenes endgerät umfasst

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4114139A (en) * 1977-01-25 1978-09-12 International Business Machines Corporation Security controlled information exchange system
US4386233A (en) * 1980-09-29 1983-05-31 Smid Miles E Crytographic key notarization methods and apparatus
US4438824A (en) * 1981-04-22 1984-03-27 Siemens Corporation Apparatus and method for cryptographic identity verification
US4500750A (en) * 1981-12-30 1985-02-19 International Business Machines Corporation Cryptographic application for interbank verification
US4458109A (en) * 1982-02-05 1984-07-03 Siemens Corporation Method and apparatus providing registered mail features in an electronic communication system
US4578531A (en) * 1982-06-09 1986-03-25 At&T Bell Laboratories Encryption system key distribution method and apparatus
US4694492A (en) * 1984-11-09 1987-09-15 Pirmasafe, Inc. Computer communications security control system
NL8501211A (nl) * 1985-04-29 1986-11-17 Philips Nv Systeem voor opslag en distributie van sleutels ten behoeve van cryptografisch beveiligde communicatie.
EP0287720B1 (en) * 1987-04-22 1992-01-08 International Business Machines Corporation Management of cryptographic keys
US4888801A (en) * 1988-05-02 1989-12-19 Motorola, Inc. Hierarchical key management system

Also Published As

Publication number Publication date
KR910003964A (ko) 1991-02-28
EP0410037A1 (en) 1991-01-30
KR960014681B1 (ko) 1996-10-19
EP0410037B1 (en) 1994-10-12
US4888801A (en) 1989-12-19
AU3829289A (en) 1991-04-26
AU624395B2 (en) 1992-06-11
DE68918855T2 (de) 1995-05-11
DE68918855D1 (de) 1994-11-17

Similar Documents

Publication Publication Date Title
ES2060705T3 (es) Sistema jerarquico de gestion de claves.
US5944824A (en) System and method for single sign-on to a plurality of network elements
US4168396A (en) Microprocessor for executing enciphered programs
ATE67912T1 (de) Verfahren und vorrichtung zum schutz der geheimelemente in einem netz von chiffriergeraeten mit offener schluessel-verwaltung.
CA2051576A1 (en) Method and apparatus for protecting multiple copies of computer software from unauthorized use
DK0993662T3 (da) Fremgangsmåde til at styre applikationer, som er gemt i et abonnentidentitetsmodul
ES471105A1 (es) Un conjunto perfeccionado de cerradura de puerta
DE69634880D1 (de) Verfahren und gerät zum kontrollierten zugriff zu verschlüsselten datenakten in einem computersystem
NO168860C (no) Kommunikasjonsnettverk
DK192083D0 (da) Kabel-tv kommunikationssystem
KR950701481A (ko) 공용-키 암호 시스템에서 비밀키를 조회하는 방법(verifying secret keys in a public-key cryptosystem)
BR0209953A (pt) Autenticação local em um sistema de comunicação
ES2162659T3 (es) Sistema de comunicacion cabeza-cola seguro y metodo para el procedimiento en ordenadores de control.
DE59712945D1 (de) Verfahren und vorrichtung zum fernbedienen und fernsteuern von einrichtungen und geräten über ein telefonnetz
ATE68618T1 (de) Kontrollsystem.
DE59006915D1 (de) Schlüsselverteilung in offenen kommunikationsnetzen unter berücksichtigung von sicherheitsabstufungen.
CA2293202A1 (en) Selective security level certificate meter
DK1008023T3 (da) Fremgangsmåde til at tilgå en tjeneste i et datakommunikationssystem samt datakommunikationssystem
ES8405182A1 (es) Un metodo de aumentar la seguridad de un sistema de seguridad de acceso por teclado
KR102865851B1 (ko) 개량된 양자난수 암호화키 생성방법
Fouad et al. Effectiveness of an endodontic diagnosis computer simulation program
CN103259689A (zh) 一种对设备进行密码变更以及发生故障后密码恢复的方法
BR8301966A (pt) Fechadura de numeros com dispositivo para reajuste de segredo de chave
Stadler Cryptographic protocols for revocable privacy
NO20012463D0 (no) Fremgangsmåte og apparat for sikker fordeling av autentiseringsakkreditiver til omstreifende brukere

Legal Events

Date Code Title Description
FG2A Definitive protection

Ref document number: 410037

Country of ref document: ES