International Business Machines Corporation

Certicom Corporation

Certicon Corp.

Donald B Johnson

Scott Alexander Vanstone

Stephen M Matyas

An V Le

John D Wilkins

Rostislaw Prymak

Stephen Michael Matyas, Jr

Minghua Qu

Dennis G Abraham

Phil C Yeh

William C Martin

Alfred John Menezes

William S Rohland

Ramesh K Karne

Nevenko Zunic

Marcel Mordechay Yung

Paul Ashley Karger

Don Coppersmith

Julian Thomas

David R Safford

Ronald M Smith

Charles William Kaufman, Jr

Robert John Lambert

Richard Henry Guski

An Van Le

James D Randall

Raymond Craig Larson

Minghua Ou

Mohammad Peyravian

John Gary Waclawsky

Steve Richard White

Ashok Vadekar

Paul C Hershey

William Carlisle Arnold

Michael James Kelly

Rosario Gennaro

Christopher J Holloway

Randall J Easter

Simon Blake-Wilson

Ronald C Mullin

Robert C Elander

James V Stevens

Paul G Lubold

Patrick J McCormack

Rotislaw Prymak

Rostislaw Prymak, Deceased

Alphonse M Bracco

Bernard J Halter

John M Hudson

Daniela Henningsmeyer

Michael J Kelly

A method of determining the integrity of a message exchanged between a pair of correspondents. The message is secured by embodying the message in a function of a public key derived from a private key selected by one of the correspondents. The method comprises first obtaining the public key. The public key is then subjected to at least one mathematical test to determine whether the public key satisfies predefined mathematical characteristics. Messages utilizing the public key are accepted if the public key satisfies the predefined mathematical characteristics.

Strengthened public key protocol

A public key encryption system exchanges information between a pair of correspondents. The recipient performs computations on the received data to recover the transmitted data or verify the identity of the sender. The data transferred includes supplementary information that relates to intermediate steps in the computations performed by the recipient.

Accelerated signature verification on an elliptic curve

A method for creating and authenticating a digital signature is provided, including selecting a first session parameter k and generating a first short term public key derived from the session parameter k, computing a first signature component r derived from a first mathematical function using the short term public key, selecting a second session parameter t and computing a second signature component s derived from a second mathematical function using the second session parameter t and without using an inverse operation, computing a third signature component using the first and second session parameters and sending the signature components (s, r, c) as a masked digital signature to a receiver computer system. In the receiver computer system, a recovered second signature component s' is computed by combining a third signature component with the second signature component to derive signature components (s&#x2032;, r) as an unmasked digital signature.

Masked digital signatures

A system and method are provided for enabling a symmetric key to be derived, the method comprising: obtaining a plurality of key parts, wherein the plurality of key parts when combined equal the symmetric key; encrypting a first of the key parts using a first cryptographic algorithm to generate a first encrypted value; encrypting one or more remaining key parts of the plurality of key parts using respective cryptographic algorithms to generate one or more additional encrypted values, wherein each key part encrypted is encrypted using a different cryptographic algorithm; and providing the first encrypted value and the one or more additional encrypted values to an other entity to enable the other entity to derive the symmetric key.

Resilent cryptographic scheme

A method for communicating information between at least a pair of correspondents, the method comprising the steps of each of the correspondents selecting a plurality of cryptographic algorithms known to each of the correspondents. One of the correspondents applies the algorithms in a predetermined manner to a message for producing a set of processed information. The set of processed information is transmitted to the other correspondent. The other correspondent applies complimentary operations of the cryptographic schemes in accordance with the predetermined manner for deriving information related to the message from the processed information.

Resilient cryptographic scheme

A method performed at a computing device for validation of a public key, the public key for use in a communication system. The method includes obtaining the public key, and verifying, by the computing device, that the obtained public key is a point on an elliptic curve defined over a finite field, the verifying including substituting the obtained public key into an equation defining the elliptic curve, the elliptic curve being associated with the communication system.

Key validation scheme

The present invention relates to digital signature operations using public key schemes in a secure communications system and in particular for use with processors having limited computing power such as 'smart cards'. This invention describes a method for creating and authenticating a digital signature comprising the steps of selecting a first session parameter k and generating a first short term public key derived from the session parameter k, computing a first signature component r derived from a first mathematical function using the short term public key, selecting a second session parameter t and computing a second signature component s derived from a second mathematical function using the second session parameter t and without using an inverse operation, computing a third signature component using the first and second session parameters and sending the signature components (s, r, c) as a masked digital signature to a receiver computer system. In the receiver computer system computing a recovered second signature component s' by combining a third signature component with the second signature component to derive signature components (s&#x2032;, r) as an unmasked digital signature. Verifying these signature components as in a usual EIGamal or ECDSA type signature verification.

A system and method for validating digital information transmitted by one correspondent to another in a data communication system. The method comprising the steps of generating a public key in accordance with a predetermined, generating a public key in accordance with a predetermined cryptographic scheme having predetermined arithmetic properties and system parameters. The verifying said public key conforms to said arithmetic properties of said scheme, transmitting said verified public key to a recipient.

The present invention relates to digital signature operations using public key schemes in a secure communications system and in particular for use with processors having limited computing power such as 'smart cards'. This invention describes a method for creating and authenticating a digital signature comprising the steps of selecting a first session parameter k and generating a first short term public key derived from the session parameter k, computing a first signature component r derived from a first mathematical function using the short term public key, selecting a second session parameter t and computing a second signature component s derived from a second mathematical function using the second session parameter t and without using an inverse operation, computing a third signature component using the first and second session parameters and sending the signature components (s, r, c) as a masked digital signature to a receiver computer system. In the receiver computer system computing a recovered second signature component s' by combining a third signature component with the second signature component to derive signature components (s&#x2032;, r) as an unmasked digital signature. Verifying these signature components as in a usual ElGamal or ECDSA type signature verification.

Growing community of inventors

Manassas, VA, United States of America

Donald B Johnson