Devices that utilize random tokens which direct dynamic random access

• US 10,616,192 B2
• Filed: 10/29/2018
• Issued: 04/07/2020
• Est. Priority Date: 06/12/2017
• Status: Active Grant

• Current Assignee: Ironclad Encryption Corp.
• Original Assignee: Daniel Maurice Lerner
• Inventors: Lerner, Daniel Maurice
• Primary Examiner(s): Holder, Bradley W
• Application Number:
  US16/173,179
• Publication Number:
  US 20190268154A1
• Time in Patent Office: 526 Days
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3073 involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807

Abstract

The disclosure provides for one or more devices and associated system that securitize and conceal data transmitted to and/or data received from the devices that utilize one or more master keys comprising at least one device that conceals and reveals such that the data and/or associated data files utilize both master keys and one or more key selectors, wherein the master keys and key selectors produce a specific set of one or more keys that conceal the data and/or associated data files such that one or more key selectors coincide with at least one value that directly corresponds with created cipher data and/or cipher data files. The key selectors can also be concealed and revealed as required. Produced concealed data and concealed data files can only be concealed and revealed with one or more master keys and one or more key selectors.

Claims

1. A system with one or more devices that encrypt data transmitted to or decrypt data received from or both transmit said data to and decrypt said data received from said devices that utilize one or more master keys comprising:

at least one computer processing unit (CPU) with computational capabilities that is connected to and controls a computer memory via an address bus and a data bus where said address bus accesses a designated range of computer memories and range of memory bits and said data bus provides a flow of transmission(s) into and out of said CPU and computer memory;

at least one encrypter or decrypter or both an encrypter and a decrypter that encrypt or decrypt or both encrypt and decrypt said data or associated data files or both said data and said associated data files that utilize one or more master keys and one or more key selectors, where one or more key selectors provide selection and provision of one or more encryption keys for each segment of bit by bit data or byte by byte data or both bit by bit data and byte by byte data, wherein said master keys and said key selectors produce a specific set of one or more executable encryption keys that encrypt or decrypt or both encrypt and decrypt said data or said associated data files or both said data and said associated data files where one or more said key selectors coincide with at least one value that directly corresponds with created cipher data or created cipher data files or both said created cipher data and said created cipher data files,

and wherein said key selectors are also encrypted and decrypted,

and wherein said key selectors and said created cipher data and said created cipher data files produce result data and result data files where said created cipher data and said created cipher data files together with said result data and said result data files are sealed to produce encrypted data and encrypted data files that are only encrypted and decrypted with one or more said master keys and one or more said key selectors wherein an operation of encryption of data within said devices require at least one dynamically selectable encryption system (DSES) encrypter, a master key used by a dynamically selectable encryption key generator together with a key selector value that produces a dynamic data encryption key (KE) and

wherein said key selector value is sent to a decryption token, wherein said (DSES) encrypter receives data and encrypts said received data according to at least one value corresponding with and/or contained by said data encryption key (KE).

2. The encryption system of claim 1, wherein encrypted output data is accepted from said DSES encrypter and wherein a combination of said decryption token and said encrypted output data becomes encrypted communication signals.

3. The system of claim 1, wherein said DSES encrypter possesses a hidden portion and/or an indirect hidden portion and wherein said encryption key (KE) is changed at any time based upon at least one value of said key selector that provides a key selector value.

4. The system of claim 1 wherein for at least one configuration of said devices, said master key is a source for a first key derivation communication processor and a second key derivation communication processor wherein first and second key derivation communication processor(s) utilize information from said master key to provide variants of an original master key.

5. The system of claim 4, where said first and second key derivation communication processor(s) are distinguishable from each other in that they use unique initialization vectors or computerized computations or both said vectors and said computerized operations to each produce uniquely different derived keys.

6. The system of claim 5, wherein said master key is provided to said first key derivation communication processor that is used by a dynamically selectable encryption key generator together with said key selector value to produce a dynamic data encryption key (KE), wherein said key selector value is sent to an encryption token.

7. The system of claim 1, wherein an encryption token encrypter encrypts said key selector value and produces a hidden decryption token and wherein an encrypted encryption token is an indirect encrypted decryption token.

8. The system of claim 1, wherein encrypted data is initially supplied in a form of plaintext.

9. The system of claim 1, wherein an operation of decryption of data within said system requires at least one dynamically selectable decryption system (DSED) decrypter, a decryption token that becomes a key selector value, a master key used by a dynamically selectable decryption key generator that produces a dynamic decryption key (KD) wherein said (DSED) decrypter receives data and decrypts said data according to a value that coincides with or is contained by or both coincides with and is contained by said decryption key (KD).

10. The system of claim 9, wherein a master key of said DSES decrypter has an identical value as a matching master key for said DSED decrypter.

11. The system of claim 10, wherein said DSED decrypter possesses a hidden portion and/or an indirect hidden portion.

12. The system of claim 9, wherein decrypted output data is accepted from said DSED decrypter and wherein a combination of said decryption token and a decrypted output data receiver provides decrypted communication signals.

13. The system of claim 9, wherein said decryption key (KD) is changed at any time based upon a value of said key selector that provides a key selector value.

14. The system of claim 13, wherein an encrypted decryption token is sent to a decryption token decrypter along with a master key so that said decryption token decrypter decrypts said encrypted decryption token and produces a key selector value and wherein said decrypted decryption token is an indirect decrypted decryption token.

15. The system of claim 9, wherein a master key is provided to a first key derivation communication processor that is used by a dynamically selectable encryption key generator together with a key selector value to produce a dynamic decryption key (KD).

16. The system of claim 9, wherein decrypted data is initially supplied in a form of cypher-text and eventually decrypts data according to a value of said decryption key (KD) and produced in a form of plaintext.

17. The system of claim 9, wherein both values of an original key selector value and original data are available as decrypted communication signals from both a key selector receiver and a decrypted output data receiver, respectively, and allow for secure transmission through a dynamic encryption/decryption tunnel and wherein decryption is provided for dynamically encrypted data on the move.

18. The system of claim 17, whereby every block of memory in a memory storage system is encrypted and decrypted with a unique encryption key (KE).

19. The system of claim 9, wherein for decryption for dynamically decrypted data at rest, a key selector that operates as a locater is utilized by a memory storage system as a block address and recovers encrypted output data at a specific block address.

20. The system of claim 1, wherein said master key is provided to a first key derivation communication processor that is used by a dynamically selectable encryption key generator together with said key selector value to produce a dynamic decryption key (KD).

21. The system of claim 20, wherein said decryption token is sent to an indirect decryption token decrypter along with a second key derivation communication processor so that said indirect decryption token decrypter decrypts an indirect encrypted decryption token and produces said key selector value.