International Business Machines Corporation

Walter E Bass

Stephen M Matyas

Jonathan Oseas

Kenneth G Beaman

A method for authenticating nodes/users and in protecting data flow between nodes. This is facilitated by creating a dialogue involving authenticated encryption among the nodes. During each session, a key for use in cryptographic conversion is constructed among the node participants in order to permit symmetric authentication. The key is unique to the session. A different key is generated for each and every session. The building of the session key involves sharing of a minimal amount of information among the participants in the form of combining both a random number and authentication indicia.

Method for establishing user authenication with composite session keys

A method and means are provided to facilitate the exchange of data between a direct access storage device (DASD) and a central processing unit (CPU). The data is stored in fixed length records on the DASD. A pair of sequential commands are issued by the CPU to control access to the DASD data. The first command contains information which defines the boundaries of the DASD storage space which the CPU can access. The second command identifies the operation to be carried out within the permitted space defined in the first command and establishes where within the permitted space the activity is to take place. The use of these two commands reduces the amount of CPU software involvement which is required for data accessing, particularly where the accessing involves the crossing of geometrical boundaries on the DASD.

Growing community of inventors

Sunnyvale, CA, United States of America

Walter E Bass