Certicom Corporation

Blackberry Corporation

Alfred John Menezes

Scott Alexander Vanstone

Minghua Qu

Donald B Johnson

Robert John Lambert

Daniel Richard L Brown

Ashok Vadekar

Robert Philip Gallant

Mingua Qu

Neil Patrick Adams

Simon Blake-Wilson

Michael S Brown

Christopher Labrador

Dinah Lea Marie Davis

Daniel Richard Brown

Rene Struik

Michael Stephen Brown

A system, device and method for authenticating a user. The system, device and method may employ a computing device for providing credentials required for access to an on-line resource available over a network. The computing device may connect to the on-line resource to register a user. The computing device may receive from the on-line resource at least one request for a credential to identify the user. In response to the request, the computing device may generate a random credential, store the random credential in association with an on-line resource identifier and the request in a data store accessible to the computing device and, submit the random credential to the on-line resource to register the user.

System, device, and method for authentication of a user accessing an on-line resource

A key agreement protocol for use in a public key cryptographic scheme between a pair of correspondents each of which has a long term public key and an ephemeral public key. The protocol includes the steps of exchanging the ephemeral public keys between the correspondents for computing a shared secret at each correspondent and utilizing the shared secret to obtain a common key, wherein the validity of the ephemeral public keys is checked by the recipient thereof prior to use of the common key.

Enhanced key agreement and transport protocol

A method of determining the integrity of a message exchanged between a pair of correspondents. The message is secured by embodying the message in a function of a public key derived from a private key selected by one of the correspondents. The method comprises first obtaining the public key. The public key is then subjected to at least one mathematical test to determine whether the public key satisfies predefined mathematical characteristics. Messages utilizing the public key are accepted if the public key satisfies the predefined mathematical characteristics.

Strengthened public key protocol

A method for hindering a cold boot attack on a user equipment (UE) is provided. The method includes, in response to detection of the cold boot attack, executing prioritized security procedures. A user equipment (UE) is also provided that includes a processor configured to execute prioritized security procedures responsive to detection of a cold boot attack.

System and method for hindering a cold boot attack

A potential bias in the generation of a private key is avoided by selecting the key and comparing it against the system parameters. If a predetermined condition is attained it is accepted. If not it is rejected and a new key is generated.

Method of public key generation

A key establishment protocol between a pair of correspondents includes the generation by each correspondent of respective signatures. The signatures are derived from information that is private to the correspondent and information that is public. After exchange of signatures, the integrity of exchange messages can be verified by extracting the public information contained in the signature and comparing it with information used to generate the signature. A common session key may then be generated from the public and private information of respective ones of the correspondents.

Key agreement and transport protocol with implicit signatures

A potential bias in the generation or a private key is avoided by selecting the key and comparing it against the system parameters. If a predetermined condition is attained it is accepted. If not it is rejected and a new key is generated.

A key establishment protocol includes the generation of a value of cryptographic function, typically a hash, of a session key and public information. This value is transferred between correspondents together with the information necessary to generate the session key. Provided the session key has not been compromised, the value of the cryptographic function will be the same at each of the correspondents. The value of the cryptographic function cannot be compromised or modified without access to the session key.

Key agreement and transport protocol

A key agreement protocol for preventing key-share attacks wherein a method is provided for establishing a common shared key between a pair of correspondents in a station-to-station protocol by exchanging messages between the correspondents and including identification information in said messages, the information being identifiable to one or other of said correspondents to thereby establish said common key.

Method for preventing key share attacks

A key establishment protocol between a pair of correspondents includes the generation by each correspondent of respective signatures. The signatures are derived from information that is private to the correspondent and information that is public. After exchange of signatures, the integrity of exchange messages can be verified by extracting the public information contained in the signature and comparing it with information used to generate the signature. A common session key may then be generated from the pubilc and private information of respective ones of the correspondents.

Growing community of inventors

Waterloo, Canada

Alfred John Menezes