초록 ▼

Cryptographic keys for a cryptographic function are notarized by encrypting the keys with the cryptographic function using a notarizing cryptographic key derived from identifier designations associated with the encryptor and intended decryptor, respectively, and an interchange key which is accessibl

Cryptographic keys for a cryptographic function are notarized by encrypting the keys with the cryptographic function using a notarizing cryptographic key derived from identifier designations associated with the encryptor and intended decryptor, respectively, and an interchange key which is accessible only to authorized users of the cryptographic function. Preferably, the identity of a user of the cryptographic function is authenticated as a condition to access to an interchange key. Advantageously, authentication is accomplished by comparing a password designation supplied by the user with a prestored version thereof which has been notarized by having been encrypted with the cryptograpic function using a notarizing cryptographic key derived from the identifier designation of the corresponding authorized user and an interchange key. Signature properties similar to those provided by public key systems are provided for nonpublic keys by allowing a user to use a key for only encryption or decryption and not both. Preferably, this is attained through the use of user identifiers which are combined in predetermined combinations for data key notarization and notarized data key decryption in dependence on whether a key is to be used for encryption or decryption.

대표청구항 ▼

A method for notarizing a cryptographic key used in the encryption and decryption of data with a cryptographic function controlled by cryptographic keys such that the data encryptor and intended decryptor are positively identified, the method comprising the step of: encrypting the cryptographic key

A method for notarizing a cryptographic key used in the encryption and decryption of data with a cryptographic function controlled by cryptographic keys such that the data encryptor and intended decryptor are positively identified, the method comprising the step of: encrypting the cryptographic key with the cryptographic function using a notarizing key, derived from an identifier designation associated with the encryptor, an identifier designation associated with the intended decryptor, and an interchange key which is accessible only to authorized users of the cryptographic function, as the key encrypting cryptographic key.