Access control for sensitive functions

Details Access control for sensitive functions Access control for sensitive functions

1995-10-16

1998-05-05

Cangialosi, Salvatore

Cryptography

Particular algorithmic function encoding

Nbs/des algorithm

380 28, H04L 900

Patent

active

057487391

ABSTRACT:
A data processing system has a security infrastructure, including a first cryptographic support facility, a security service for user data, including a further cryptographic support facility, and a number of cryptographic algorithms, usable by said cryptographic support facilities. In order to protect against a user replacing weak algorithms intended for the protection of data with strong algorithms intended for use by the security infrastructure, a challenge/response mechanism is provided, which enables the cryptographic support facilities to verify authenticity of the algorithms. The challenge/response mechanism is as follows. First, the cryptographic support facility sends a challenge to the algorithm. The algorithm then generates a response by applying a cryptographic function to the challenge, and returns the response to the cryptographic support facility. The cryptographic support facility then checks whether the response has an expected value. Only upon successful authentication does the algorithm reveal a pointer to a function table. The pointer is encrypted under a shared secret key to prevent an "attacker in the middle" attack.

REFERENCES:
patent: 4996711 (1991-02-01), Chaum
patent: 5148479 (1992-09-01), Bird et al.
patent: 5159634 (1992-10-01), Reeds, III
patent: 5311596 (1994-05-01), Scott et al.
patent: 5351293 (1994-09-01), Michener et al.
patent: 5420908 (1995-05-01), Hodges et al.
patent: 5455862 (1995-10-01), Hoskinson
patent: 5495098 (1996-02-01), Pailles et al.
Ferreira, "The Practical Application Of State Of The Art Security In Real Environments", International Conference On Cryptology, Jan. 8-11, 1990, pp. 334-355.

Affiliated with

Also associated with

Rating

Access control for sensitive functions does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Access control for sensitive functions, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Access control for sensitive functions will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-63901