Method and apparatus for encrypting data

• US 20030095661A1
• Filed: 10/11/2002
• Published: 05/22/2003
• Est. Priority Date: 10/15/2001
• Status: Active Grant

• Current Assignee: Marqeta, Inc.
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Harrison, Keith Alexander
• Granted Patent: US 7,219,226 B2
• Time in Patent Office: Days
• US Class Current: 380/231
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3033 details relating to pseudo-prime or prime number generation, e.g. primality test

Abstract

A method for encrypting data comprising deriving a public key using a first data set that defines an instruction; encrypting a second data set with the public key; providing the encrypted third data set to a recipient; providing the public key to a third party such that on satisfaction of the instruction the third party provides an associated private key to the recipient to allow decryption of the encrypted second data set.

Claims

1. A method for encrypting data comprising deriving a public key using a first data set that defines an instruction;

encrypting a second data set with the public key;

providing the encrypted third data set to a recipient;

providing the public key to a third party such that on satisfaction of the instruction the third party provides an associated private key to the recipient to allow decryption of the encrypted second data set.

2. A method for encrypting data comprising deriving a public key using a first data set that defines a term of an agreement;

encrypting a second data set with the public key;

providing the encrypted second data set to a recipient;

providing the public key to a third party such that on satisfaction of the term of the agreement the third party provides an associated private key to the recipient to allow decryption of the encrypted second data set.

3. A method according to claim 2, wherein a term of the agreement that needs to be satisfied is that the private key should not be released to the recipient until a specified date.

4. A method according to claim 2, wherein a term of the agreement that needs to be satisfied to allow release of the private key to the recipient is the making of a payment.

5. A method according to claim 2, wherein the second data set includes a nonce.

6. A computer system for encrypting data comprising a first computer entity for deriving a public key using a first data set that defines a term of an agreement and encrypting a second data set with the public key;

communication means for providing the encrypted data to a second computer entity and the public key to a third computer entity;

wherein the third computer entity is arranged, on satisfaction of the term of the agreement, to provide an associated private key to the second computer entity to allow decryption of the encrypted second data set.

7. A computer system for encrypting data comprising a first computer node for deriving a public key using a first data set that defines an instruction and encrypting a second data set with the public key;

communication means for providing the encrypted data to a second computer node and the public key to a third computer node;

wherein the third computer node is arranged, on satisfaction of the instruction to the third party, to provide an associated private key to the second computer node to allow decryption of the encrypted second data set.

8. A computer apparatus for encrypting data comprising a processor for deriving a public key using a first data set that defines a term of an agreement and encrypting a second data set with the public key.

9. A computer apparatus for encrypting data comprising a processor for deriving a public key using a first data set that defines an instruction and encrypting a second data set with the public key.