Universal secure messaging for cryptographic modules

• US 10,554,393 B2
• Filed: 11/07/2013
• Issued: 02/04/2020
• Est. Priority Date: 04/29/2003
• Status: Expired due to Term

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Le Saint, Eric F., Wen, Wu
• Primary Examiner(s): Lwin, Maung T
• Assistant Examiner(s): Debnath, Suman
• Application Number:
  US14/074,082
• Publication Number:
  US 20140068267A1
• Time in Patent Office: 2,280 Days
• Field of Search: 713155, 713168, 713171, 726 15, 726 21, 380 30, 380259, 380286
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys

Abstract

An anonymous secure messaging method and system for securely exchanging information between a host computer system and a functionally connected cryptographic module. The invention comprises a Host Security Manager application in processing communications with a security executive program installed inside the cryptographic module. An SSL-like communications pathway is established between the host computer system and the cryptographic module. The initial session keys are generated by the host and securely exchanged using a PKI key pair associated with the cryptographic module. The secure communications pathway allows presentation of critical security parameter (CSP) without clear text disclosure of the CSP and further allows use of the generated session keys as temporary substitutes of the CSP for the session in which the session keys were created.

Claims

1. A secure messaging method for securely exchanging information during a session between a host computer system and a functionally connected cryptographic module, the cryptographic module comprising one or more critical security parameter (CSP) protected applications each requiring a corresponding critical security parameter in order to access the CSP protected application, the method comprising:

generating a pair of identical session keys for the session;

performing a secure key exchange between the host computer system and the cryptographic module using a public key from a digital certificate associated with the cryptographic module for encrypting information used with the secure key exchange, the host computer system and the cryptographic module each provided with one session key of said pair of identical session keys;

generating a unique session identifier at the cryptographic module for the session;

associating the unique session identifier with the session key at the cryptographic module;

associating the unique session identifier with a critical security parameter, the critical security parameter provided to the host computer system by a user requesting access to the one or more CSP protected applications, the critical security parameter provided by the host computer system to the cryptographic module for initial authentication;

determining availability of the critical security parameter to exchange at least a portion of information between the host computer system and the cryptographic module;

using the unique session identifier to select the associated session key;

performing one or more counterpart cryptographic functions on at least a portion of information exchanged between the host computer system and the cryptographic module during the session using the selected session key as a surrogate for the critical security parameter in response to the critical security parameter not being available; and

granting permission to access one or more of the CSP protected applications requiring the critical security parameter for a duration of the session using the session key.

2. The method according to claim 1, wherein the unique session identifier is further associated with a specific function performed by the cryptographic module.

3. The method according to claim 1, wherein the one or more counterpart cryptographic functions include symmetric encryption, decryption, and message authentication.

4. The method according to claim 1, wherein the exchanged information includes the critical security parameter.

5. The method according to claim 1 wherein the session keys are temporarily surrogates for the critical security parameter after successful initial authentication.

6. The method according to claim 1, wherein the exchanged information includes commands sent from at least the host computer system to the cryptographic module.

7. The method according to claim 1, wherein the unique session identifier is generated independently from the identical session keys.

8. The method according to claim 1, further comprising:

providing a table that defines a relationship between one or more unique session identifiers, including the unique session identifier, and one more critical security parameters, including the critical service parameter, wherein the table associates the unique session identifier with the critical security parameter.

9. A method of securely exchanging information during a session between a host computer system and a cryptographic module for which a unique session identifier and a session key for the session have been established between the host computer and the cryptographic module, the method comprising:

associating the unique session identifier with the at least one session key;

associating the unique session identifier with a critical security parameter, the critical security parameter provided by a user to the host computer system and by the host computer system to the cryptographic module for initial authentication;

after initial authentication of the critical security parameter, determining availability of the critical security parameter to exchange at least a portion of information between the host computer system and the cryptographic module; and

using the at least one session key as a substitute for the critical security parameter during the session to exchange at least a portion of information between the host computer system and the cryptographic module in response to the critical security parameter not being available, wherein the unique session identifier is used to select the associated session key for use as the substitute;

wherein using the at least one session key as the substitute includes granting permission to unlock one or more applications authorized for the critical security parameter for a duration of the session using the at least one session key.

10. The method according to claim 9, further comprising:

securely exchanging the session key between the host computer system and the cryptographic module using public key encryption.

11. The method according to claim 10, wherein the secure exchanging includes using a public key from a digital certificate associated with the cryptographic module for encrypting information.

12. The method according to claim 9, wherein the exchange of at least a portion of information is performed as part of performing a function, and wherein the method further comprises, performing the initial authentication using the critical security parameter.

13. The method according to claim 9, wherein the unique session identifier is generated independently from the session key.

14. The method according to claim 9, further comprising:

providing a table that defines a relationship between one or more unique session identifiers, including the unique session identifier, and one more critical security parameters, including the critical service parameter, wherein the table associates the unique session identifier with the critical security parameter.