초록 ▼

A method of unwrapping wrapped digital data that is unusable while wrapped, includes obtaining an acceptance phrase from a user; deriving a cryptographic key from the acceptance phrase; and unwrapping the package of digital data using the derived cryptographic key. The acceptance phrase is a phrase

A method of unwrapping wrapped digital data that is unusable while wrapped, includes obtaining an acceptance phrase from a user; deriving a cryptographic key from the acceptance phrase; and unwrapping the package of digital data using the derived cryptographic key. The acceptance phrase is a phrase entered by a user in response to information provided to the user. The information and the acceptance phrase can be in any appropriate language. The digital data includes, alone or in combination, any of: software, a cryptographic key, an identifying certificate, an authorizing certificate, a data element or field of an identifying or authorizing certificate, a data file representing an images, data representing text, numbers, audio, and video.

대표청구항 ▼

[ What is claimed:] [41.] A method of providing digital data representing a digital identification certificate in a public key infrastructure wherein a certification authority (CA) issues identification certificates to subscribers, the method comprising:providing first digital data representing a su

[ What is claimed:] [41.] A method of providing digital data representing a digital identification certificate in a public key infrastructure wherein a certification authority (CA) issues identification certificates to subscribers, the method comprising:providing first digital data representing a subscriber public cryptographic key for a subscriber;providing second digital data comprising conditions of use of the subscriber public cryptographic key;determining an acceptance phrase to indicate acceptance of the conditions;determining a wrapping key value based on at least the digital data representing the particular acceptance phrase and on the second digital data;encrypting the digital data representing the subscriber public key using the wrapping key;inserting the digital data representing the encrypted subscriber public key into a first certificate;forming a digital signature using the first certificate and a private key of the CA;inserting the digital data representing the subscriber public key into a second certificate; andappending the digital signature to the second certificate and providing the second certificate as a digital identification certificate.