ES2060705T3 - Sistema jerarquico de gestion de claves. - Google Patents

Sistema jerarquico de gestion de claves.

Info

Publication number
ES2060705T3
ES2060705T3 ES89113868T ES89113868T ES2060705T3 ES 2060705 T3 ES2060705 T3 ES 2060705T3 ES 89113868 T ES89113868 T ES 89113868T ES 89113868 T ES89113868 T ES 89113868T ES 2060705 T3 ES2060705 T3 ES 2060705T3
Authority
ES
Spain
Prior art keywords
security
key
users
key certification
terminals
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
ES89113868T
Other languages
English (en)
Inventor
Robert Ivan Foster
Robert Frederick Pfeifer
Thomas James Mihm Jr
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Motorola Solutions Inc
Original Assignee
Motorola Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Motorola Inc filed Critical Motorola Inc
Application granted granted Critical
Publication of ES2060705T3 publication Critical patent/ES2060705T3/es
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04K—SECRET COMMUNICATION; JAMMING OF COMMUNICATION
    • H04K1/00—Secret communication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
    • H04L9/0833—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key
    • H04L9/0836—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key using tree structure or hierarchical structure
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements

Abstract

SE PRESENTA UN SISTEMA JERARQUICO PARA EL MANEJO DE CLAVES QUE INCLUYE UN NUMERO DE TERMINALES DE SEGURIDAD (1-500). ESTOS TERMINALES SUMINISTRAN UN ACCESO SEGURO A UN CORRESPONDIENTE NUMERO DE USUARIOS (1-500). UN USUARIO INSERTA UN DISPOSITIVO DE ACTIVACION DE SEGURIDAD (SAD) O CLAVE EN EL TERMINAL DE SEGURIDAD PARA CONSEGUIR UNA CONEXION SEGURA A TRAVES DE LA RED DE COMUNICACIONES ESTABLECIDAS (PSTN). UN GRUPO DE TERMINALES DE SEGURIDAD (1-500) SE CONECTA A UNA AUTORIDAD DE CERTIFICACION DE CLAVES (KCA) PUEDEN EXISTIR VARIOS GRUPOS DE AUTORIDADES DE CERTIFICACION DE CLAVE (A,B,C) Y LOS CORRESPONDIENTES USUARIOS DEL TERMINAL DE SEGURIDAD (1-500). EN EL NIVEL MAS ALTO, UN CENTRO DE CERTIFICACION DE CLAVES (KCC) AUTORIZA LAS COMUNICACIONES DE SEGURIDAD MEDIANTE LAS AUTORIDADES DE CERTIFICACION DE CLAVES (KCA), A SU VEZ, LAS AUTORIDADES DE CERTIFICACION DE CLAVE AUTORIZA LAS COMUNICACIONES DE SEGURIDAD ENTRE LOS USUARIOS. COMO RESULTADO, SI UN NIVEL DE MANEJO DE CLAVE ESTA COMPROMETIDO, OTROS NIVELES Y USUARIOS NO ESTARAN AFECTADOS.
ES89113868T 1988-05-02 1989-07-27 Sistema jerarquico de gestion de claves. Expired - Lifetime ES2060705T3 (es)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US07/188,868 US4888801A (en) 1988-05-02 1988-05-02 Hierarchical key management system

Publications (1)

Publication Number Publication Date
ES2060705T3 true ES2060705T3 (es) 1994-12-01

Family

ID=22694885

Family Applications (1)

Application Number Title Priority Date Filing Date
ES89113868T Expired - Lifetime ES2060705T3 (es) 1988-05-02 1989-07-27 Sistema jerarquico de gestion de claves.

Country Status (6)

Country Link
US (1) US4888801A (es)
EP (1) EP0410037B1 (es)
KR (1) KR960014681B1 (es)
AU (1) AU624395B2 (es)
DE (1) DE68918855T2 (es)
ES (1) ES2060705T3 (es)

Families Citing this family (76)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5005200A (en) * 1988-02-12 1991-04-02 Fischer Addison M Public key/signature cryptosystem with enhanced digital signature certification
US4888801A (en) * 1988-05-02 1989-12-19 Motorola, Inc. Hierarchical key management system
US4969189A (en) * 1988-06-25 1990-11-06 Nippon Telegraph & Telephone Corporation Authentication system and apparatus therefor
US5003593A (en) * 1989-06-05 1991-03-26 Motorola, Inc. Teleconferencing method for a secure key management system
US5226172A (en) * 1989-06-12 1993-07-06 Motorola, Inc. Methods for configuring and performing 3-level password searching in a distributed computer system
US5392353A (en) * 1989-08-07 1995-02-21 Tv Answer, Inc. Interactive satellite broadcast network
US5224163A (en) * 1990-09-28 1993-06-29 Digital Equipment Corporation Method for delegating authorization from one entity to another through the use of session encryption keys
US5179591A (en) * 1991-10-16 1993-01-12 Motorola, Inc. Method for algorithm independent cryptographic key management
US5230020A (en) * 1991-10-16 1993-07-20 Motorola, Inc. Algorithm independent cryptographic key management
US5164988A (en) * 1991-10-31 1992-11-17 International Business Machines Corporation Method to establish and enforce a network cryptographic security policy in a public key cryptosystem
US5276735A (en) * 1992-04-17 1994-01-04 Secure Computing Corporation Data enclave and trusted path system
GB9213169D0 (en) * 1992-06-22 1992-08-05 Ncr Int Inc Cryptographic key management apparatus and method
US5596718A (en) * 1992-07-10 1997-01-21 Secure Computing Corporation Secure computer network using trusted path subsystem which encrypts/decrypts and communicates with user through local workstation user I/O devices without utilizing workstation processor
US5341426A (en) * 1992-12-15 1994-08-23 Motorola, Inc. Cryptographic key management apparatus and method
US5335281A (en) * 1992-12-15 1994-08-02 Motorola, Inc. Network controller and method
US5673034A (en) * 1993-10-12 1997-09-30 Saliga; Thomas V. Security system comprising three apparatuses sharing a time-varying code
US5465300A (en) * 1993-12-27 1995-11-07 Motorola, Inc. Secure communication setup method
NZ279622A (en) * 1994-01-13 1998-04-27 Certco Llc Encrypted secure and verifiable communication: cryptographic keys escrowed
AU705473B2 (en) * 1994-01-13 1999-05-20 Certco Inc Cryptographic system and method with key escrow feature
ATE429099T1 (de) * 1994-02-24 2009-05-15 Comcast Cable Holdings Llc Verfahren und vorrichtung zur erstellung einer kryptographischen verbindung zwischen elementen eines systems
US5787172A (en) * 1994-02-24 1998-07-28 The Merdan Group, Inc. Apparatus and method for establishing a cryptographic link between elements of a system
US5481613A (en) * 1994-04-15 1996-01-02 Northern Telecom Limited Computer network cryptographic key distribution system
US5530758A (en) * 1994-06-03 1996-06-25 Motorola, Inc. Operational methods for a secure node in a computer network
US5864683A (en) * 1994-10-12 1999-01-26 Secure Computing Corporartion System for providing secure internetwork by connecting type enforcing secure computers to external network for limiting access to data based on user and process access rights
US5621795A (en) * 1994-12-27 1997-04-15 Pitney Bowes Inc. System and method for fault tolerant key management
US5680456A (en) * 1995-03-31 1997-10-21 Pitney Bowes Inc. Method of manufacturing generic meters in a key management system
US5812666A (en) * 1995-03-31 1998-09-22 Pitney Bowes Inc. Cryptographic key management and validation system
US5742682A (en) * 1995-03-31 1998-04-21 Pitney Bowes Inc. Method of manufacturing secure boxes in a key management system
US5661803A (en) * 1995-03-31 1997-08-26 Pitney Bowes Inc. Method of token verification in a key management system
JP3691519B2 (ja) * 1995-03-31 2005-09-07 ザ・コモンウェルス・オブ・オーストラリア 異なった機密保護レベルのネットワークを相互に連絡させる方法及び手段
IL113259A (en) * 1995-04-05 2001-03-19 Diversinet Corp A device and method for a secure interface for secure communication and data transfer
US5615266A (en) * 1995-07-13 1997-03-25 Motorola, Inc Secure communication setup method
US8732457B2 (en) 1995-10-02 2014-05-20 Assa Abloy Ab Scalable certificate validation and simplified PKI management
US7600129B2 (en) 1995-10-02 2009-10-06 Corestreet, Ltd. Controlling access using additional data
US8015597B2 (en) 1995-10-02 2011-09-06 Corestreet, Ltd. Disseminating additional data used for controlling access
US7716486B2 (en) 1995-10-02 2010-05-11 Corestreet, Ltd. Controlling group access to doors
US6766450B2 (en) 1995-10-24 2004-07-20 Corestreet, Ltd. Certificate revocation system
US7337315B2 (en) 1995-10-02 2008-02-26 Corestreet, Ltd. Efficient certificate revocation
US5604804A (en) * 1996-04-23 1997-02-18 Micali; Silvio Method for certifying public keys in a digital signature scheme
US7353396B2 (en) 1995-10-02 2008-04-01 Corestreet, Ltd. Physical access control
US7822989B2 (en) 1995-10-02 2010-10-26 Corestreet, Ltd. Controlling access to an area
EP0768774A3 (en) * 1995-10-16 1999-08-04 Sony Corporation Method and apparatus for data encryption using a key generation hierarchy
US8261319B2 (en) 1995-10-24 2012-09-04 Corestreet, Ltd. Logging access attempts to an area
US5913024A (en) 1996-02-09 1999-06-15 Secure Computing Corporation Secure server utilizing separate protocol stacks
US6002768A (en) * 1996-05-07 1999-12-14 International Computer Science Institute Distributed registration and key distribution system and method
US5841864A (en) * 1996-08-05 1998-11-24 Motorola Inc. Apparatus and method for authentication and session key exchange in a communication system
US5950195A (en) * 1996-09-18 1999-09-07 Secure Computing Corporation Generalized security policy management system and method
DE19649292A1 (de) * 1996-11-28 1998-06-04 Deutsche Telekom Ag Verfahren zum Sichern eines durch eine Schlüsselhierarchie geschützten Systems
US6604242B1 (en) * 1998-05-18 2003-08-05 Liberate Technologies Combining television broadcast and personalized/interactive information
US6381741B1 (en) 1998-05-18 2002-04-30 Liberate Technologies Secure data downloading, recovery and upgrading
US5917911A (en) * 1997-01-23 1999-06-29 Motorola, Inc. Method and system for hierarchical key access and recovery
US6330608B1 (en) 1997-03-31 2001-12-11 Stiles Inventions L.L.C. Method and system of a computer system for establishing communications between a service provider and a central service factory and registry in a computer system
US6035041A (en) * 1997-04-28 2000-03-07 Certco, Inc. Optimal-resilience, proactive, public-key cryptographic system and method
US6049872A (en) * 1997-05-06 2000-04-11 At&T Corporation Method for authenticating a channel in large-scale distributed systems
US6370249B1 (en) * 1997-07-25 2002-04-09 Entrust Technologies, Ltd. Method and apparatus for public key management
DE69935913T2 (de) * 1998-07-02 2008-01-10 Cryptography Research Inc., San Francisco Leckresistente aktualisierung eines indexierten kryptographischen schlüssels
AU3712300A (en) 1999-06-11 2001-01-02 Liberate Technologies Hierarchical open security information delegation and acquisition
US6907127B1 (en) * 1999-06-18 2005-06-14 Digital Video Express, L.P. Hierarchical key management encoding and decoding
US6812938B2 (en) 2000-03-29 2004-11-02 Citicorp Development Center, Inc. Method and system for providing status indication and control to a computer network user
GB2365720B (en) * 2000-07-17 2004-04-14 Motorola Inc A communication system and method therefor
WO2003013185A1 (en) * 2001-08-01 2003-02-13 Dashen Fan Cardioid beam with a desired null based acoustic devices, systems and methods
US7487363B2 (en) * 2001-10-18 2009-02-03 Nokia Corporation System and method for controlled copying and moving of content between devices and domains based on conditional encryption of content key depending on usage
EP1627488A4 (en) 2003-05-13 2008-06-04 Corestreet Ltd EFFICIENT AND SECURE DATA ACTUALITY SYSTEMS
WO2005001653A2 (en) 2003-06-24 2005-01-06 Corestreet, Ltd. Access control
US20050102513A1 (en) * 2003-11-10 2005-05-12 Nokia Corporation Enforcing authorized domains with domain membership vouchers
KR20060097131A (ko) 2003-11-19 2006-09-13 코아스트리트 리미티드 분산 위임 인증 경로 획득 및 검증
JP4576210B2 (ja) 2003-12-16 2010-11-04 株式会社リコー 証明書転送装置、証明書転送システム、証明書転送方法、プログラム及び記録媒体
CA2872032A1 (en) 2004-01-09 2005-08-04 Corestreet, Ltd. Signature-efficient real time credentials for ocsp and distributed ocsp
US7205882B2 (en) 2004-11-10 2007-04-17 Corestreet, Ltd. Actuating a security system using a wireless device
US8090105B2 (en) * 2004-11-24 2012-01-03 International Business Machines Corporation Broadcast encryption with dual tree sizes
EP1847066A4 (en) * 2005-02-07 2013-09-18 Samsung Electronics Co Ltd KEY MANAGEMENT PROCEDURES USING HIERARCHIC KNOT TOPOPY AND THIS USE METHOD FOR REGISTERING AND DEREGISTERING USERS
KR100636228B1 (ko) * 2005-02-07 2006-10-19 삼성전자주식회사 계층적인 노드 토폴로지를 이용한 키 관리 방법 및 이를이용한 사용자 등록 및 등록해제 방법
US8046588B2 (en) * 2006-02-23 2011-10-25 Rockwell Automation Technologies, Inc. Audit trail in a programmable safety instrumented system via biometric signature(s)
US20100215033A1 (en) * 2009-02-20 2010-08-26 Avaya Inc. Preferential routing of secured calls
US10212144B2 (en) 2013-03-15 2019-02-19 Assa Abloy Ab Digital credential with embedded authentication instructions
EP3276879B1 (de) * 2016-07-26 2020-06-17 Siemens Aktiengesellschaft Verfahren zum betreiben einer anordnung, die eine unterstation und zumindest ein daran angeschlossenes endgerät umfasst

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4114139A (en) * 1977-01-25 1978-09-12 International Business Machines Corporation Security controlled information exchange system
US4386233A (en) * 1980-09-29 1983-05-31 Smid Miles E Crytographic key notarization methods and apparatus
US4438824A (en) * 1981-04-22 1984-03-27 Siemens Corporation Apparatus and method for cryptographic identity verification
US4500750A (en) * 1981-12-30 1985-02-19 International Business Machines Corporation Cryptographic application for interbank verification
US4458109A (en) * 1982-02-05 1984-07-03 Siemens Corporation Method and apparatus providing registered mail features in an electronic communication system
US4578531A (en) * 1982-06-09 1986-03-25 At&T Bell Laboratories Encryption system key distribution method and apparatus
US4694492A (en) * 1984-11-09 1987-09-15 Pirmasafe, Inc. Computer communications security control system
NL8501211A (nl) * 1985-04-29 1986-11-17 Philips Nv Systeem voor opslag en distributie van sleutels ten behoeve van cryptografisch beveiligde communicatie.
DE3775924D1 (de) * 1987-04-22 1992-02-20 Ibm Verwaltung von geheimuebertragungsschluesseln.
US4888801A (en) * 1988-05-02 1989-12-19 Motorola, Inc. Hierarchical key management system

Also Published As

Publication number Publication date
AU624395B2 (en) 1992-06-11
EP0410037B1 (en) 1994-10-12
KR960014681B1 (ko) 1996-10-19
EP0410037A1 (en) 1991-01-30
AU3829289A (en) 1991-04-26
US4888801A (en) 1989-12-19
DE68918855D1 (de) 1994-11-17
DE68918855T2 (de) 1995-05-11
KR910003964A (ko) 1991-02-28

Similar Documents

Publication Publication Date Title
ES2060705T3 (es) Sistema jerarquico de gestion de claves.
US5944824A (en) System and method for single sign-on to a plurality of network elements
US4168396A (en) Microprocessor for executing enciphered programs
ATE67912T1 (de) Verfahren und vorrichtung zum schutz der geheimelemente in einem netz von chiffriergeraeten mit offener schluessel-verwaltung.
CA2051576A1 (en) Method and apparatus for protecting multiple copies of computer software from unauthorized use
GB2114791A (en) User authorisation verification apparatus for computer systems
DK0993662T3 (da) Fremgangsmåde til at styre applikationer, som er gemt i et abonnentidentitetsmodul
ES471105A1 (es) Un conjunto perfeccionado de cerradura de puerta
DE69634880D1 (de) Verfahren und gerät zum kontrollierten zugriff zu verschlüsselten datenakten in einem computersystem
NO168860C (no) Kommunikasjonsnettverk
ATE28018T1 (de) Kabelfernsehensystem.
ATE68618T1 (de) Kontrollsystem.
DE59712945D1 (de) Verfahren und vorrichtung zum fernbedienen und fernsteuern von einrichtungen und geräten über ein telefonnetz
CA2293202A1 (en) Selective security level certificate meter
DK1008023T3 (da) Fremgangsmåde til at tilgå en tjeneste i et datakommunikationssystem samt datakommunikationssystem
NO962672D0 (no) Fremgangsmåte for etablering av en felles nökkel for autoriserte personer
ES8400623A1 (es) "un sistema de seguridad con multiples niveles de acceso".
CN103259689A (zh) 一种对设备进行密码变更以及发生故障后密码恢复的方法
BR0115573A (pt) Esquema de criptografia limite para sistemas de autenticação de mensagens
CN107395577A (zh) 一种大型电力企业薪酬安全系统
JPS5437406A (en) Preventing system for malicious alteration of subscriber information
BR8301966A (pt) Fechadura de numeros com dispositivo para reajuste de segredo de chave
CN109886038A (zh) 一种访问电子资源的认证方法、装置、存储介质及服务器
Augustine Four Theories of Music in the United States, 1900-1950: Cowell, Yasser, Partch, Schillinger
Bakst Computer security: A management issue that must be reckoned with.

Legal Events

Date Code Title Description
FG2A Definitive protection

Ref document number: 410037

Country of ref document: ES