Entrust Corporation

Entrust Technologies Limited

Adrian O Mancini

Robert Zuccherato

Timothy E Moses

Kevin Simzer

James Arthur Turnbull

A method and apparatus for initializing operation for information security operation for an entity utilizes shared information, such as shared secret information, that may be shared between the entity and other applications or operations within a system to initialize an entity. Prestored shared information that can be used as entity identification data (RV) and authentication data (IAK) that is associated with the entity identification data is encrypted and sent in clear text fashion to an initialization authentication unit, such as a server or other processing unit. The initialization authentication unit requests stored shared data from another processing unit that maintains a database. The other processing system then responds to the request by providing prestored shared data that can be used to, for example, decrypt the encrypted information sent in a clear text fashion to determine whether an entity is a proper user of the information security operation. Accordingly, no secure session is required, and no new generation of identification data or authentication data is required.

System and method for initializing operation for an information security operation

A system and method stores inquiry data, such as data representing questions or forms containing questions, to facilitate entry of shared authentication data for initialization. The stored inquiry data is retrieved for presentation, in audible or visual form, based on received entity identification data entered, for example, by a user or otherwise obtained by a processing or entity seeking initialization. As such, the system and method produces an entity that, for example, first asks a user for identifying information. The entity identification information, such as an employee number, or other information, is then provided to the entity. This information is then sent to a processing unit, such as a certification authority or other server. The processing unit determines what questions must be asked of the user to identify the user for initialization purposes. These questions are returned to the terminal for application wherein they are presented to the user. Once the information is collected, the various responses are concatenated together to form one data object which is then used to identify the individual. The responses to the questions may be communicated in any type of PAKE type protocol, or any other suitable protocol.

Shared data initialization query system and method

An information security network provides a plurality of trusted authorities configurable in a rooted hierarchical structure. At least one of the trusted authorities is a superior authority and at least one of the trusted authorities are subordinate authorities. The trust authorities are capable of issuing digitally signed data structures, referred to as certificates. The superior authority is operative to generate policy control message data, such as separate message data or a certificate containing policy information, to dynamically vary policy control data to facilitate trust authority policy delegation among subordinate authorities. The policy control data includes, among other things, inter-trusted authority trust modification data to dynamically vary validation starting authorities among subordinate authorities.

Dynamic trust anchor system and method

A method and system for notarizing digital data, such as digital signature data, determines a subscriber compromised distribution latency period prior to authenticating the digital data. Upon receiving a notarization request, the system and method stores the digital data for notarization and holds the evidence or digital data for the latency period and as such waits to notarize the digital data in response to the subscriber compromise distribution latency period.

Growing community of inventors

Nepean, Canada

Adrian O Mancini