Entrust Technologies Limited

Ron J Vandergeest

Patrick A Lyson

Stephen William Hillier

A method and apparatus for dynamically accessing security credentials that are used to participate in a secure communication begins by obtaining virtual credentials of an entity, where the virtual credentials include a data specifier and/or an identifier. The data specifier functions as a pointer to a particular physical security credential, its data storage location, and the format of the physical security credential. The identifier functions as a pointer to secondary virtual credentials, which include at least one data specifier. The processing continues by generating physical security credentials based on the physical security credentials retrieved via the data specifiers. The processing then continues by utilizing the physical security credentials by an individual entity (e.g., a party, a server, an administrator, etc.) such that the individual entity may participate in a secured communication. If, during the secured communication, any of the physical security credentials change, the physical security credentials are updated in accordance with a synchronization record to maintain data synchronization.

Method and apparatus for dynamically accessing security credentials and related information

A method and apparatus for securing and accessing data elements within a database is accomplished by securing a symmetric key based on an encryption public key. This may be done for the entire database or portions thereof. Once a symmetric key is secured, the computing system may receive a data element for storage in a database. When a data element is received, the computing device retrieves the secured symmetric key and then decrypts it based on a decryption private key. Having decrypted the secured symmetric key, the recaptured symmetric key is used to secure the data element. The securing is done utilizing an encryption algorithm and the symmetric key. Once the data element has been secured, it is stored in the database. To retrieve a secured data element from the database, a request for access must be received. Once a request is received, the computing device retrieves a secured data element in response to the request. The secured data element has been secured based on a secured symmetric key wherein the secured symmetric key was secured based on an encryption public key associated with the requesting entity. Having retrieved the secured data element, the secured symmetric key is retrieved and decrypted based on a decryption private key. The recaptured symmetric key is used in conjunction with a decryption algorithm, such as DES, to decrypt the data. The recaptured data is then provided to the requesting entity.

Method and apparatus for securing and accessing data elements within a database

Apparatus for securing and accessing data elements within a database

A method and apparatus for providing off-line secure communications is accomplished when an end-user is on-line with a security information repository and transmits a request for security information relating to at least one targeted communication entity. The targeted communication entity may be another end-user that has sent the present end-user an encrypted message or another end-user that will receive an encrypted message from the present end-user. In response to the request, the present end-user subsequently receives the security information and updates a local security information repository (e.g., cache memory) with the security information related to the at least one targeted communication entity. Having updated the local security information repository, the current end-user goes off-line from the security information repository. While off-line, the current end-user confidently processes a secure communication with the at least one targeted communication entity based on the security information that is stored in the local security information repository.

Growing community of inventors

Kanata, Canada

Ron J Vandergeest