Entrust Technologies Limited

Other

Northern Telecom Limited

Carlisle M Adams

Michael James Wiener

Hussein Talaat Mouftah

Roland Thomas Lockhart

Binod Vaidya

Serge J Mister

Methods and systems for conjugated authentication and authorization are provided, where two entities are associated through the use of respective conjugated credentials. The credentials of the user and a respective vehicle are both generated in a method that cryptographically binds the two entities and their respective pieces of data together so that the binding of the two entities can be easily verified by a third party without the use of external databases.

Methods and systems for conjugated authentication and authorization

A system and method grants security privilege in a communication system by providing privilege test criteria data for a subscriber unit so that the subscriber unit or some other entity can select among subscriber privilege data based on the privilege test criteria data, so that only the necessary privilege information is communicated between the relying party and the subscriber unit of interest. A privilege data selector selects, for example, among a plurality of attribute certificates associated with a selected subscriber unit or among sets of privilege data within an attribute certificate, the certificate (or certificates) that matches the privileged test criteria data. This pre-selected certificate is then communicated for use by the relying unit and verified that it meets the test selected by the relying party unit.

System and method for granting security privilege in a communication system

A multi-factor biometric authenticating device and method generates error correction based partial encryption key seed data based on a plurality of sample biometric inputs, such as raw biometric data The error correction based partial encryption key seed data serves as a partial seed for generating a secret encryption key for encrypting user data. The first partial seed is combined with a second partial encryption seed to generate the secret encryption key. The device stores the error correction based partial encryption key seed data and does not store the secret encryption key.

Multi-factor biometric authenticating device and method

A method of generating a substitution box (S-box) involves generating an S-box with desired characteristics, forming a new S-box with another column such that the new S-box has the desired characteristics as well, and continuing to add columns in these ways until the S-box has the proper size.

Practical S box design

A method of encrypting or decrypting an input message block of binary data of predetermined length 2n into an output message block by dividing the message block into two equal size halves, performing one or more transformation rounds on the message block halves, each transformation round further comprising the steps of determining a key, processing the first half data block using a hash function to obtain a modified first half data block of length n, and combining the modified first half data block with the second half data block to obtain a modified second half data block of length n; and, lastly, appending the first modified half data block to the second modified half data block to obtain the output message block.

Design principles of the shade cipher

A new design procedure for constructing a family of DES-like Substitution-Permutation Network (SPN) cryptosystems with desirable cryptographic properties including provable resistance to differential cryptanalysis, linear cryptanalysis, and related-key cryptanalysis is described. New cryptosystems called CAST ciphers, constructed according to the procedure, are also described. Details of the design choices in the procedure are given, including those regarding the component substitution boxes (s-boxes), the overall framework, the key schedule, and the round function. A fully specified example CAST cipher, an output of this design procedure, is presented as an aid to understanding the concepts and to encourage detailed analysis by the cryptologic community.

Construction symmetric ciphers using the cast design procedure

A novel symmetric cryptographic system for data encryption using novel partially bent-function-based (m.times.n) substitution boxes (s-boxes), where m and n are positive even numbers, m&lt;&lt;n and m&lt;log ##EQU1## is disclosed. A novel key schedule is used for selecting internal keys which also undergo substitution transformation by s-boxes. The s-boxes are designed on the principle that bent-function-based s-boxes possess good characteristics for encryption. The s-boxes of the invention are represented by (m.times.n) binary matrices.

Growing community of inventors

Ottawa, Canada

Carlisle M Adams