Cryptography – Key management – Having particular key generator
Reexamination Certificate
2006-01-10
2006-01-10
Sheikh, Ayaz (Department: 2136)
Cryptography
Key management
Having particular key generator
C380S277000, C713S168000, C713S169000, C713S171000, C713S176000, C713S152000
Reexamination Certificate
active
06985583
ABSTRACT:
In one embodiment of a user authentication system and method according to the invention, a device shares a secret, referred to as a master seed, with a server. The device and the server both derive one or more secrets, referred to as verifier seeds, from the master seed, using a key derivation function. The server shares a verifier seed with one or more verifiers. The device, or an entity using the device, can authenticate with one of the verifiers using the appropriate verifier seed. In this way, the device and the verifier can share a secret, the verifier seed for that verifier, without that verifier knowing the master seed, or any other verifier seeds. Thus, the device need only store the one master seed, have access to the information necessary to correctly derive the appropriate seed, and have seed derivation capability. A verifier cannot compromise the master seed, because the verifier does not have access to the master seed.
REFERENCES:
patent: 4104694 (1978-08-01), Hargrove
patent: 4145568 (1979-03-01), Ehrat
patent: 4145569 (1979-03-01), Ehrat
patent: 4238854 (1980-12-01), Ehrsam et al.
patent: 4317957 (1982-03-01), Sendrow
patent: 4320387 (1982-03-01), Powell
patent: 4369332 (1983-01-01), Campbell, Jr.
patent: 4438824 (1984-03-01), Mueller-Schloer
patent: 4471216 (1984-09-01), Herve
patent: 4509093 (1985-04-01), Stellberger
patent: 4536647 (1985-08-01), Atalla et al.
patent: 4543657 (1985-09-01), Wilkinson
patent: 4575621 (1986-03-01), Dreifus
patent: 4578530 (1986-03-01), Zeidler
patent: 4582434 (1986-04-01), Plangger et al.
patent: 4599489 (1986-07-01), Cargile
patent: 4605820 (1986-08-01), Campbell, Jr.
patent: 4609777 (1986-09-01), Cargile
patent: 4614861 (1986-09-01), Pavlov et al.
patent: 4720860 (1988-01-01), Weiss
patent: 4731841 (1988-03-01), Rosen et al.
patent: 4800590 (1989-01-01), Vaughan
patent: 4819267 (1989-04-01), Cargile et al.
patent: 4849613 (1989-07-01), Eisele
patent: 4856062 (1989-08-01), Weiss
patent: 4885778 (1989-12-01), Weiss
patent: 4890323 (1989-12-01), Beker et al.
patent: 4928098 (1990-05-01), Dannhaeuser
patent: 4933971 (1990-06-01), Bestock et al.
patent: 4944008 (1990-07-01), Piosenka et al.
patent: 4998279 (1991-03-01), Weiss
patent: 5016276 (1991-05-01), Matumoto et al.
patent: 5023908 (1991-06-01), Weiss
patent: 5046125 (1991-09-01), Takizawa
patent: 5058161 (1991-10-01), Weiss
patent: 5097505 (1992-03-01), Weiss
patent: 5101430 (1992-03-01), Periou
patent: 5168520 (1992-12-01), Weiss
patent: 5180902 (1993-01-01), Schick et al.
patent: 5206905 (1993-04-01), Lee et al.
patent: 5237614 (1993-08-01), Weiss
patent: 5280527 (1994-01-01), Gullman et al.
patent: 5347580 (1994-09-01), Molva et al.
patent: 5361062 (1994-11-01), Weiss et al.
patent: 5367572 (1994-11-01), Weiss
patent: 5479512 (1995-12-01), Weiss
patent: 5485519 (1996-01-01), Weiss
patent: 5513263 (1996-04-01), White et al.
patent: 5539824 (1996-07-01), Bjorklund et al.
patent: 5592553 (1997-01-01), Guski et al.
patent: 5655077 (1997-08-01), Jones et al.
patent: 5657388 (1997-08-01), Weiss
patent: 5717756 (1998-02-01), Coleman
patent: 5732133 (1998-03-01), Mark
patent: 5737421 (1998-04-01), Audebert
patent: 5748734 (1998-05-01), Mizikovsky
patent: 5802176 (1998-09-01), Audebert
patent: 5841864 (1998-11-01), Klayman et al.
patent: 5887065 (1999-03-01), Audebert
patent: 5937068 (1999-08-01), Audebert
patent: 6078888 (2000-06-01), Johnson, Jr.
patent: 6141760 (2000-10-01), Abadi et al.
patent: 6295359 (2001-09-01), Cordery et al.
patent: 6338140 (2002-01-01), Owens et al.
patent: 0140013 (1985-05-01), None
patent: 0148960 (1985-07-01), None
patent: 0566811 (1993-10-01), None
patent: 0678836 (1995-10-01), None
patent: 2607544 (1988-06-01), None
patent: 59-119630 (1991-05-01), None
patent: 2835433 (1997-06-01), None
patent: 2884338 (1999-04-01), None
patent: 88/06826 (1988-09-01), None
FIPS Publ. 190, “Guideline for the use of advanced authentication technology alternatives”, Sep. 28, 1994, section 4; section 4.4.2.1 particularly.
Chevassut, O., et al, “One-time Verifier based Encrypted Key Exchange”, Lawrence Berkeley National Lab., Springer-Verlag 2004-2005, entire document.
Kim, Y., et al, “Secure authentication system that generates seed from biometric information”, Feb. 10, 2005, Optical Society of America, Applied Optics, vol. 44, No. 5, entire article.
American National Standard for Financial Services. “Financial Services Key Management Using the DEA,” American Bankers Association, copyright 1992, 1999, pp. i-iii, 1-9, 34-52.
RSA Laboratories, a division of RSA Data Security, Inc. “PKCS #5 v2.0: Password-Based Cryptography Standard.” Mar. 25, 1999, copyright 1991-1999, pp. 1-30.
Standard Specifications for Public Key Cryptography, IEEE P 1363 / D 13 (Draft Version 13), Institute of Electrical and Electronics Engineers, Inc., New York, NY, Nov. 12, 1999, pp. 1, 4-6, 53-57, 71-73.
Freier, et al. The SSL Protocol, Version 3.0, http://home.netscape.com/eng/ssI3/3-SPEC.htm, Mar. 1996, pp. 1-26, and Table of Contents, http://home.netscape.com/eng/ssl3/ssl-toc.html, pp. 1-3.
European Patent Office, European Search Report, International Application EP 00 30 3741, date of completion of search Jan. 16, 2002, 2 pages.
Ferreira, “The Smart Card: A High Security Tool in EDP”, Philips Telecommunications and Data Systems Review, Philips Telecommunicatie Industrie N.V. Hilversum, NL, Sep. 1989, vol. 47, No. 3, pp. 1-19.
Shamir,“Identity-Based Cryptosystems and Signature Schemes”, Lecture Notes in Computer Science, Springer Verlag, New York, NY, US, 1985, pp. 47-53.
Brainard John G.
Kaliski, Jr. Burton S.
Nyström Magnus
Rivest Ronald L.
Baum Ronald
RSA Security Inc.
Sheikh Ayaz
Wilmer Cutler Pickering Hale and Dorr LLP
LandOfFree
System and method for authentication seed distribution does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with System and method for authentication seed distribution, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and System and method for authentication seed distribution will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3533090