CN1832394B - 用于非对称密钥安全的方法和系统 - Google Patents

用于非对称密钥安全的方法和系统 Download PDF

Info

Publication number
CN1832394B
CN1832394B CN2006100037302A CN200610003730A CN1832394B CN 1832394 B CN1832394 B CN 1832394B CN 2006100037302 A CN2006100037302 A CN 2006100037302A CN 200610003730 A CN200610003730 A CN 200610003730A CN 1832394 B CN1832394 B CN 1832394B
Authority
CN
China
Prior art keywords
server
key
client
identity
proof
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN2006100037302A
Other languages
English (en)
Chinese (zh)
Other versions
CN1832394A (zh
Inventor
A·伯兹
A·K·楠达
D·R·希蒙
J·P·休丘科
J·D·本纳龙
K·卡麦龙
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Microsoft Corp
Original Assignee
Microsoft Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Microsoft Corp filed Critical Microsoft Corp
Publication of CN1832394A publication Critical patent/CN1832394A/zh
Application granted granted Critical
Publication of CN1832394B publication Critical patent/CN1832394B/zh
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0442—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
    • A—HUMAN NECESSITIES
    • A45—HAND OR TRAVELLING ARTICLES
    • A45D—HAIRDRESSING OR SHAVING EQUIPMENT; EQUIPMENT FOR COSMETICS OR COSMETIC TREATMENTS, e.g. FOR MANICURING OR PEDICURING
    • A45D29/00—Manicuring or pedicuring implements
    • A45D29/11—Polishing devices for nails
    • A45D29/12—Polishing devices for nails manually operated
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/44—Program or device authentication
    • G06F21/445—Program or device authentication by mutual authentication, e.g. between devices or programs
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0869—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3218—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2129—Authenticate client device independently of the user
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/061—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
CN2006100037302A 2005-03-07 2006-02-07 用于非对称密钥安全的方法和系统 Expired - Fee Related CN1832394B (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US11/074,885 2005-03-07
US11/074,885 US7822200B2 (en) 2005-03-07 2005-03-07 Method and system for asymmetric key security

Publications (2)

Publication Number Publication Date
CN1832394A CN1832394A (zh) 2006-09-13
CN1832394B true CN1832394B (zh) 2011-06-29

Family

ID=36587037

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2006100037302A Expired - Fee Related CN1832394B (zh) 2005-03-07 2006-02-07 用于非对称密钥安全的方法和系统

Country Status (5)

Country Link
US (1) US7822200B2 (enExample)
EP (1) EP1701283B8 (enExample)
JP (1) JP4896537B2 (enExample)
KR (1) KR101169100B1 (enExample)
CN (1) CN1832394B (enExample)

Families Citing this family (57)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7739500B2 (en) * 2005-03-07 2010-06-15 Microsoft Corporation Method and system for consistent recognition of ongoing digital relationships
WO2006129654A1 (ja) * 2005-06-01 2006-12-07 Matsushita Electric Industrial Co., Ltd. 電子機器、更新サーバ装置、鍵更新装置
US7747540B2 (en) * 2006-02-24 2010-06-29 Microsoft Corporation Account linking with privacy keys
US8495380B2 (en) 2006-06-06 2013-07-23 Red Hat, Inc. Methods and systems for server-side key generation
US7930759B2 (en) * 2006-11-09 2011-04-19 Kabushiki Kaisha Toshiba Backup system for image forming apparatus and backup method for image forming apparatus
US8352738B2 (en) * 2006-12-01 2013-01-08 Carnegie Mellon University Method and apparatus for secure online transactions
US8291227B2 (en) * 2007-02-02 2012-10-16 Red Hat, Inc. Method and apparatus for secure communication
US8694787B2 (en) * 2007-08-07 2014-04-08 Christophe Niglio Apparatus and method for securing digital data with a security token
JP4995667B2 (ja) * 2007-08-28 2012-08-08 富士通株式会社 情報処理装置、サーバ装置、情報処理プログラム及び方法
JP2009130882A (ja) * 2007-11-28 2009-06-11 Oki Electric Ind Co Ltd チェックバリュー確認方法及び装置
US8321682B1 (en) * 2008-01-24 2012-11-27 Jpmorgan Chase Bank, N.A. System and method for generating and managing administrator passwords
US8108777B2 (en) 2008-08-11 2012-01-31 Microsoft Corporation Sections of a presentation having user-definable properties
US9230109B2 (en) * 2008-10-07 2016-01-05 Microsoft Technology Licensing, Llc Trusted platform module security
US8452963B2 (en) * 2009-01-27 2013-05-28 Cisco Technology, Inc. Generating protected access credentials
US9548978B2 (en) 2009-02-03 2017-01-17 Inbay Technologies Inc. Method and system for authorizing secure electronic transactions using a security device
US9521142B2 (en) 2009-02-03 2016-12-13 Inbay Technologies Inc. System and method for generating passwords using key inputs and contextual inputs
US9608988B2 (en) 2009-02-03 2017-03-28 Inbay Technologies Inc. Method and system for authorizing secure electronic transactions using a security device having a quick response code scanner
US9485254B2 (en) * 2009-02-03 2016-11-01 Inbay Technologies Inc. Method and system for authenticating a security device
US9736149B2 (en) 2009-02-03 2017-08-15 Inbay Technologies Inc. Method and system for establishing trusted communication using a security device
US9742560B2 (en) * 2009-06-11 2017-08-22 Microsoft Technology Licensing, Llc Key management in secure network enclaves
US8352741B2 (en) 2009-06-11 2013-01-08 Microsoft Corporation Discovery of secure network enclaves
US9100171B1 (en) * 2009-12-17 2015-08-04 Secure Forward, LLC Computer-implemented forum for enabling secure exchange of information
US20130051552A1 (en) * 2010-01-20 2013-02-28 Héléna Handschuh Device and method for obtaining a cryptographic key
CN102271330A (zh) * 2010-06-04 2011-12-07 希姆通信息技术（上海）有限公司 终端、网络服务器及终端与网络服务器间的通讯方法
CN101917710A (zh) * 2010-08-27 2010-12-15 中兴通讯股份有限公司 移动互联网加密通讯的方法、系统及相关装置
CN102467711A (zh) * 2010-11-19 2012-05-23 阿奇八八科技股份有限公司 数字版权管理交易系统
US8972746B2 (en) * 2010-12-17 2015-03-03 Intel Corporation Technique for supporting multiple secure enclaves
US20120166792A1 (en) * 2010-12-22 2012-06-28 Tat Kin Tan Efficient nemo security with ibe
DE102011051498A1 (de) * 2011-06-06 2012-12-06 Kobil Systems Gmbh Gesicherter Zugriff auf Daten in einem Gerät
CN103166757B (zh) * 2011-12-19 2016-01-20 卓望数码技术（深圳）有限公司 一种动态保护用户隐私数据的方法及系统
US9124432B2 (en) * 2012-05-25 2015-09-01 Kabushiki Kaisha Toshiba Host device and authentication method for host device
US20160125416A1 (en) * 2013-05-08 2016-05-05 Acuity Systems, Inc. Authentication system
EP3100408B1 (en) * 2014-01-31 2020-04-15 Cryptometry Limited System and method for performing secure communications
US10541815B2 (en) * 2014-03-16 2020-01-21 Haventec Pty Ltd Persistent authentication system incorporating one time pass codes
WO2015179020A2 (en) * 2014-03-27 2015-11-26 Ent Technologies, Inc. Generalized entity network translation (gent)
KR101544722B1 (ko) 2014-11-13 2015-08-18 주식회사 엘지씨엔에스 부인 방지 방법, 이를 위한 결제 관리 서버 및 사용자 단말기
US10454676B2 (en) * 2015-02-13 2019-10-22 International Business Machines Corporation Automatic key management using enterprise user identity management
US10348727B2 (en) 2015-02-13 2019-07-09 International Business Machines Corporation Automatic key management using enterprise user identity management
US10205598B2 (en) * 2015-05-03 2019-02-12 Ronald Francis Sulpizio, JR. Temporal key generation and PKI gateway
US11265165B2 (en) * 2015-05-22 2022-03-01 Antique Books, Inc. Initial provisioning through shared proofs of knowledge and crowdsourced identification
CN106332061B (zh) * 2015-06-23 2019-11-05 南京中兴软件有限责任公司 空口引导设置处理方法及终端设备
CN107852404A (zh) * 2015-06-30 2018-03-27 维萨国际服务协会 保密通信的相互认证
US9967244B2 (en) * 2015-10-14 2018-05-08 Microsoft Technology Licensing, Llc Multi-factor user authentication framework using asymmetric key
CN109074562B (zh) * 2016-02-23 2023-07-25 区块链控股有限公司 基于区块链的合并式数据传输控制方法和系统
SG11201805542TA (en) * 2016-02-23 2018-09-27 Nchain Holdings Ltd Secure multiparty loss resistant storage and transfer of cryptographic keys for blockchain based systems in conjunction with a wallet management system
CN105681036B (zh) * 2016-03-10 2018-12-04 上汽通用汽车有限公司 一种获取密钥的方法和装置
US10644875B2 (en) * 2016-04-28 2020-05-05 International Business Machines Corporation Pre-authorization of public key infrastructure
JP6801448B2 (ja) * 2016-12-27 2020-12-16 大日本印刷株式会社 電子情報記憶媒体、認証システム、認証方法、及び認証アプリケーションプログラム
EP3834398A1 (en) * 2018-08-10 2021-06-16 Medroster.com Corporation Encrypted messaging system
WO2020101325A1 (ko) * 2018-11-13 2020-05-22 (주)블루팝콘 순열그룹 기반의 암호화 기술을 적용한 암호화시스템 및 방법
EP3883178A4 (en) * 2018-11-13 2022-08-10 Bluepopcon Inc. ENCRYPTION SYSTEM AND METHOD USING PERMUTATION GROUP BASED ENCRYPTION TECHNOLOGY
CN109462481B (zh) * 2018-11-23 2022-04-26 上海扈民区块链科技有限公司 一种基于非对称双线性对的匿签密方法
CN110247762A (zh) * 2019-06-20 2019-09-17 江西金格科技股份有限公司 一种基于sm9算法的可信网站搭建方法
US20220286291A1 (en) * 2019-08-23 2022-09-08 Commonwealth Scientific And Industrial Research Organisation Secure environment for cryptographic key generation
CN113127814B (zh) * 2019-12-31 2023-03-14 杭州海康威视数字技术股份有限公司 软件防抄方法、装置、电子设备及可读存储介质
CN111865592A (zh) * 2020-09-21 2020-10-30 四川科锐得电力通信技术有限公司 物联网设备快速接入方法、装置、物联网平台及存储介质
US20220239502A1 (en) * 2021-01-27 2022-07-28 Anderson Software LLC System to Securely Issue and Count Electronic Ballots

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1478121A2 (en) * 2003-05-09 2004-11-17 Abu, Nor Azman bin Method and apparatus for ID-based public key generation

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6853988B1 (en) * 1999-09-20 2005-02-08 Security First Corporation Cryptographic server with provisions for interoperability between cryptographic systems
ATE465571T1 (de) * 2001-08-13 2010-05-15 Univ Leland Stanford Junior Systeme und verfahren zur verschlüsselung auf identitätsbasis und damit zusammenhängende kryptografische techniken
ATE369689T1 (de) * 2002-03-20 2007-08-15 Research In Motion Ltd Zertifikatinformationsspeichersystem und verfahren
AU2003293501A1 (en) * 2002-12-13 2004-07-09 Wholesecurity, Inc. Method, system, and computer program product for security within a global computer network
AU2004100268B9 (en) 2004-04-09 2004-07-15 Lockstep Consulting Pty Ltd Means and method of using cryptographic devices to combat online institution identity theft
US7373505B2 (en) * 2004-04-15 2008-05-13 Microsoft Corporation Displaying a security element with a browser window
US7555784B2 (en) * 2005-03-04 2009-06-30 Microsoft Corporation Method and system for safely disclosing identity over the internet
US7739500B2 (en) * 2005-03-07 2010-06-15 Microsoft Corporation Method and system for consistent recognition of ongoing digital relationships

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1478121A2 (en) * 2003-05-09 2004-11-17 Abu, Nor Azman bin Method and apparatus for ID-based public key generation

Non-Patent Citations (5)

* Cited by examiner, † Cited by third party
Title
A.Menezes,P.Van Oorschot,S.Vanstone,.Handbook of Applied Cryptography.CRC Press,Inc,1997,385-424. *
N.Zhang,Q.Shi and M.Merabti.Anonymous public-key certificates for anonymous and fairdocument exchange.IEE PROCEEDINGS:COMMUNICATIONS,INSTITUTION OF ELECTRICAL ENGINEERS147 6.2000,147(6),345-350.
同上.
同上.同上,同上.
同上.同上,同上.;N.Zhang,Q.Shi and M.Merabti.Anonymous public-key certificates for anonymous and fairdocument exchange.IEE PROCEEDINGS:COMMUNICATIONS,INSTITUTION OF ELECTRICAL ENGINEERS147 6.2000,147(6),345-350. *

Also Published As

Publication number Publication date
US20060198517A1 (en) 2006-09-07
US7822200B2 (en) 2010-10-26
JP2006254423A (ja) 2006-09-21
EP1701283B8 (en) 2017-08-30
EP1701283B1 (en) 2017-04-19
JP4896537B2 (ja) 2012-03-14
KR101169100B1 (ko) 2012-07-26
EP1701283A1 (en) 2006-09-13
CN1832394A (zh) 2006-09-13
KR20060097583A (ko) 2006-09-14

Similar Documents

Publication Publication Date Title
EP1701283B1 (en) Method and System for Asymmetric Key Security
JP6515246B2 (ja) 情報及び階層的で決定性の暗号化鍵のセキュアな交換のための共通秘密の決定
US8132020B2 (en) System and method for user authentication with exposed and hidden keys
TWI288552B (en) Method for implementing new password and computer readable medium for performing the method
Sathya et al. A comprehensive study of blockchain services: future of cryptography
US20060195402A1 (en) Secure data transmission using undiscoverable or black data
US9531540B2 (en) Secure token-based signature schemes using look-up tables
US8806206B2 (en) Cooperation method and system of hardware secure units, and application device
CN106464496A (zh) 用于创建对用户身份鉴权的证书的方法和系统
CN111740995B (zh) 一种授权认证方法及相关装置
CN113886781B (zh) 基于区块链的多重认证加密方法、系统、电子设备及介质
CN113641975A (zh) 身份标识注册方法、身份标识验证方法、装置及系统
CN113726523A (zh) 一种基于Cookie和DR身份密码体制的多重身份认证方法及装置
Tiwari et al. ACDAS: Authenticated controlled data access and sharing scheme for cloud storage
Hussain et al. An improved authentication scheme for digital rights management system
CN114915494B (zh) 一种匿名认证的方法、系统、设备和存储介质
CN114422106B (zh) 一种多服务器环境下的物联网系统安全认证方法及系统
Resende et al. PUF-based mutual multifactor entity and transaction authentication for secure banking
CN115865320A (zh) 一种基于区块链的安全服务管理方法及系统
US7739500B2 (en) Method and system for consistent recognition of ongoing digital relationships
CN115242471B (zh) 信息传输方法、装置、电子设备及计算机可读存储介质
CN118802143A (zh) 数据传输方法、装置及电子设备
CN115720137A (zh) 一种信息管理的系统、方法以及装置
CN115114648A (zh) 一种数据处理方法、装置及电子设备
Rana et al. Cryptanalysis and improvement of biometric based content distribution framework for digital rights management systems

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
ASS Succession or assignment of patent right

Owner name: MICROSOFT TECHNOLOGY LICENSING LLC

Free format text: FORMER OWNER: MICROSOFT CORP.

Effective date: 20150429

C41 Transfer of patent application or patent right or utility model
TR01 Transfer of patent right

Effective date of registration: 20150429

Address after: Washington State

Patentee after: MICROSOFT TECHNOLOGY LICENSING, LLC

Address before: Washington State

Patentee before: Microsoft Corp.

C41 Transfer of patent application or patent right or utility model
TR01 Transfer of patent right

Effective date of registration: 20160722

Address after: Grand Cayman, Georgetown, Cayman Islands

Patentee after: Microsoft Corp.

Address before: Washington State

Patentee before: MICROSOFT TECHNOLOGY LICENSING, LLC

CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20110629

CF01 Termination of patent right due to non-payment of annual fee