Devices that utilize random tokens which direct dynamic random access

• US 10,171,435 B1
• Filed: 06/12/2018
• Issued: 01/01/2019
• Est. Priority Date: 06/12/2017
• Status: Active Grant

• Current Assignee: Ironclad Encryption Corp.
• Original Assignee: Ironclad Encryption Corp.
• Inventors: Lerner, Daniel Maurice
• Primary Examiner(s): Holder, Bradley
• Application Number:
  US16/005,871
• Publication Number:
  US 20180359228A1
• Time in Patent Office: 203 Days
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation

Abstract

The disclosure provides for one or more devices and associated system that securitize and conceal data transmitted to and/or data received from the devices that utilize one or more master keys comprising at least one device that conceals and reveals such that the data and/or associated data files utilize both master keys and one or more key selectors, wherein the master keys and key selectors produce a specific set of one or more keys that conceal the data and/or associated data files such that one or more key selectors coincide with at least one value that directly corresponds with created cipher data and/or cipher data files. The key selectors can also be concealed and revealed as required. Produced concealed data and concealed data files can only be concealed and revealed with one or more master keys and one or more key selectors.

Claims

1. One or more devices that encrypt data transmitted to or decrypt data received from or both transmit said data to and decrypt said data received from said devices that utilize one or more master keys comprising:

at least one computer processing unit (CPU) with computational capabilities that is connected to and controls a computer memory via an address bus and a data bus where said address bus accesses a designated range of computer memories and range of memory bits and said data bus provides a flow of transmission(s) into and out of said CPU and computer memory;

at least one encrypter or decrypter or both an encrypter and a decrypter that encrypt or decrypt or both encrypt and decrypt said data or associated data files or both said data and said associated data files that utilize one or more master keys and one or more key selectors, where one or more key selectors provide selection and provision of one or more encryption keys for each segment of bit by bit data or byte by byte data or both bit by bit data and byte by byte data, wherein said master keys and said key selectors produce a specific set of one or more executable encryption keys that encrypt or decrypt or both encrypt and decrypt said data or said associated data files or both said data and said associated data files where one or more said key selectors coincide with at least one value that directly corresponds with created cipher data or created cipher data files or both said created cipher data and said created cipher data files,

and wherein said key selectors are also encrypted and decrypted,

and wherein said key selectors and said created cipher data and said created cipher data files produce result data and result data files where said created cipher data and said created cipher data files together with said result data and said result data files are sealed to produce encrypted data and encrypted data files that are only encrypted and decrypted with one or more said master keys and one or more said key selectors.

2. The one or more devices of claim 1, wherein said encryption keys or said key selectors or both said encryption keys and said key selectors are temporary.

3. The one or more devices of claim 1, wherein said encryption keys are symmetric or said encryption keys are asymmetric public and private key pairs or said encryption keys are both symmetric and asymmetric public and private keys.

4. The one or more devices of claim 1, wherein said encryption keys are paired directly with decryption keys.

5. The one or more devices of claim 1, wherein said key selectors are random which results in random encryption and decryption keys, wherein said random encryption and decryption keys are used to encrypt and decrypt data.

6. The one or more devices of claim 5, wherein said encryption and decryption keys are provided within said created cipher data files and said result data files.

7. The one or more devices of claim 1, wherein said encryption encrypts data at rest or data on the move or both data at rest and data on the move before, during, and after transmission of said data and wherein said transmitted data is communications data.

8. The one or more devices of claim 1, wherein said encryption keys are coded keys that can be decoded.

9. The one or more devices of claim 1, wherein said encryption keys are encrypted keys that can be decrypted.

10. The one or more devices of claim 1, wherein said key selectors are provided where said key selectors exist with or within a tolerance range or both with and within said tolerance range.

11. The one or more devices of claim 10, wherein said tolerance range is utilized to authenticate the validity of said key selectors.

12. The one or more devices of claim 1, wherein said encryption keys are dynamic encryption keys in that said dynamic encryption keys can continuously change form, address, specific position and location, within or external to or both within and external to said devices as well as provide intended functions.

13. The one or more devices of claim 1, wherein said devices are transceivers.

14. The one or more devices of claim 1, wherein said devices are real or virtual devices or both said real and said virtual devices.

15. The one or more devices of claim 1, wherein an operation of encryption of data within said devices require at least one dynamically selectable encryption system (DSES) encrypter, a master key used by a dynamically selectable encryption key generator together with a key selector value that produces a data encryption key (KE) in a dynamic fashion and

wherein said key selector value is sent to a decryption token, wherein said (DSES) encrypter receives data and encrypts said received data according to at least one value corresponding with or contained by or both corresponding with and contained by said data encryption key (KE).

16. The one or more devices of claim 15, wherein said encrypted received data is accepted from said DSES encrypter and wherein a combination of said decryption token and said encrypted received data becomes available as encrypted communication signals.

17. The one or more devices of claim 15, wherein said DSES encrypter possesses a hidden portion or an indirect hidden portion or both a hidden portion and an indirect hidden portion.

18. The one or more devices of claim 15, wherein said data encryption key (KE) may be changed at any time based upon at least one value of said key selector that provides a key selector value.

19. The one or more devices of claim 15, wherein an encryption token encrypter encrypts said key selector value and produces a hidden decryption token that can be an indirect encrypted decryption token.

20. The one or more devices of claim 1, wherein for at least one configuration of said devices, said master key is a source for a first key derivation communication processor and a second key derivation communication processor wherein said first and second key derivation communication processor(s) utilize information from said master key to provide variants of an original master key.

21. The one or more devices of claim 20, where said first and second key derivation communication processor(s) are distinguishable from each other in that they use unique initialization vectors and computerized computations or initialization vectors or computerized operations to each produce uniquely different derived keys.

22. The one or more devices of claim 21, wherein said master key is provided to said first key derivation communication processor that is used by a dynamically selectable encryption key generator together with said key selector value to produce a data encryption key (KE) in a dynamic fashion.

23. The one or more devices of claim 1, wherein encrypted data is initially supplied in a form of plaintext.

24. The one or more devices of claim 1, wherein an operation of decryption of data within said devices requires at least one dynamically selectable decryption system (DSED) decrypter, a decryption token that becomes a key selector value, a master key used by a dynamically selectable decryption key generator that dynamically produces a decryption key (KD) wherein said (DSED) decrypter receives data and decrypts said received data according to a value that coincides with or is contained by or both coincides with and is contained by said decryption key (KD).

25. The one or more devices of claim 1, wherein a system comprising and utilizing a computing device encrypts data transmitted to or decrypts data received from or both transmits said data to and decrypts said data received from said one or more devices that utilize one or more master keys comprising;

at least one dynamically selectable dynamic encryption encrypter (DSDES) with an indirect hidden portion where encryption or decryption of said data or both encryption and decryption of said data or said associated data files or both encryption and decryption of said data and said associated data files, utilizes both master keys and one or more key selectors,

wherein said master keys and said key selectors produce a specific set of one or more encryption keys that encrypt or decrypt said data or both encrypt and decrypt said data or said associated data files or both encrypt and decrypt said data and said associated data files where one or more key selectors coincide with at least one value that directly corresponds with created cipher data or created cipher data files or both created cipher data and created cipher data files,

and wherein said key selectors can also be encrypted and decrypted, and wherein said key selectors and said created cipher data and said created cipher data files produces result data and result data files where said created cipher data and said created cipher data files together with said result data and said result data files are sealed in that produced encrypted data and encrypted data files are only encrypted and decrypted by one or more master keys and one or more key selectors.

26. The one or more devices of claim 25, wherein one or more devices comprising and utilizing a computing device that encrypts data transmitted to or decrypts data received from or both transmits said data to and decrypts said data received from said one or more devices that utilize one or more master keys comprising;

at least one dynamically selectable dynamic encryption decrypter (DSDDS) with an indirect hidden portion where encryption or decryption of said data or both encryption and decryption of said data or said associated data files or both encryption and decryption of said data and said associated data files utilizes both master keys and one or more key selectors,

wherein said master keys and said key selectors produce a specific set of one or more encryption keys that encrypt or decrypt said data or both encrypt and decrypt said data or said associated data files or both encrypt and decrypt said data and said associated data files where one or more key selectors coincide with at least one value that directly corresponds with created cipher data or created cipher data files or both created cipher data and created cipher data files,

and wherein said key selectors can also be encrypted and decrypted,

and wherein said key selectors and said created cipher data and said created cipher data files produce result data and result data files where said created cipher data and said created cipher data files together with said result data and said result data files are sealed in that produced encrypted data and encrypted data files are only encrypted and decrypted by one or more master keys and one or more key selectors.

27. One or more devices that encrypt data transmitted to or decrypt data received from or both transmit said data to and decrypt said data received from said devices that utilize one or more master keys comprising:

at least one computer processing unit (CPU) with computational capabilities that is connected to and controls a computer memory via an address bus and a data bus where said address bus accesses a designated range of computer memories and range of memory bits and said data bus provides a flow of transmission(s) into and out of said CPU and computer memory;

at least one dynamically selectable dynamic encryption encrypter (DSDES) with an indirect hidden portion that encrypt or decrypt or both encrypt and decrypt said data or associated data files or both said data and said associated data files that utilize one or more master keys and one or more key selectors, where one or more key selectors provide selection and provision of one or more encryption keys for each segment of bit by bit data or byte by byte data or both bit by bit data and byte by byte data, wherein said master keys and said key selectors produce a specific set of one or more executable encryption keys that encrypt or decrypt or both encrypt and decrypt said data or said associated data files or both said data and said associated data files where one or more said key selectors coincide with at least one value that directly corresponds with created cipher data or created cipher data files or both said created cipher data and said created cipher data files,

and wherein said key selectors are also encrypted and decrypted,

and wherein said key selectors and said created cipher data and said created cipher data files produce result data and result data files where said created cipher data and said created cipher data files together with said result data and said result data files are sealed to produce encrypted data and encrypted data files that are only encrypted and decrypted with one or more said master keys and one or more said key selectors.

28. One or more devices that encrypt data transmitted to or decrypt data received from or both transmit said data to and decrypt said data received from said devices that utilize one or more master keys comprising:

at least one computer processing unit (CPU) with computational capabilities that is connected to and controls a computer memory via an address bus and a data bus where said address bus accesses a designated range of computer memories and range of memory bits and said data bus provides a flow of transmission(s) into and out of said CPU and computer memory;

at least one dynamically selectable dynamic encryption decrypter (DSDDS) with an indirect hidden portion that encrypt or decrypt or both encrypt and decrypt said data or associated data files or both said data and said associated data files that utilize one or more master keys and one or more key selectors, where one or more key selectors provide selection and provision of one or more encryption keys for each segment of bit by bit data or byte by byte data or both bit by bit data and byte by byte data, wherein said master keys and said key selectors produce a specific set of one or more executable encryption keys that encrypt or decrypt or both encrypt and decrypt said data or said associated data files or both said data and said associated data files where one or more said key selectors coincide with at least one value that directly corresponds with created cipher data or created cipher data files or both said created cipher data and said created cipher data files,

and wherein said key selectors are also encrypted and decrypted,

and wherein said key selectors and said created cipher data and said created cipher data files produce result data and result data files where said created cipher data and said created cipher data files together with said result data and said result data files are sealed to produce encrypted data and encrypted data files that are only encrypted and decrypted with one or more said master keys and one or more said key selectors.

29. A system with one or more devices that encrypt data transmitted to or decrypt data received from or both transmit said data to and decrypt said data received from said devices that utilize one or more master keys comprising:

at least one computer processing unit (CPU) with computational capabilities that is connected to and controls a computer memory via an address bus and a data bus where said address bus accesses a designated range of computer memories and range of memory bits and said data bus provides a flow of transmission(s) into and out of said CPU and computer memory;

at least one encrypter or decrypter or both an encrypter and a decrypter that encrypt or decrypt or both encrypt and decrypt said data or associated data files or both said data and said associated data files that utilize one or more master keys and one or more key selectors, where one or more key selectors provide selection and provision of one or more encryption keys for each segment of bit by bit data or byte by byte data or both bit by bit data and byte by byte data, wherein said master keys and said key selectors produce a specific set of one or more executable encryption keys that encrypt or decrypt or both encrypt and decrypt said data or said associated data files or both said data and said associated data files where one or more said key selectors coincide with at least one value that directly corresponds with created cipher data or created cipher data files or both said created cipher data and said created cipher data files,

and wherein said key selectors are also encrypted and decrypted,

and wherein said key selectors and said created cipher data and said created cipher data files produce result data and result data files where said created cipher data and said created cipher data files together with said result data and said result data files are sealed to produce encrypted data and encrypted data files that are only encrypted and decrypted with one or more said master keys and one or more said key selectors.