Method and system for secure communications over a public network

• US 20050238174A1
• Filed: 04/22/2004
• Published: 10/27/2005
• Est. Priority Date: 04/22/2004
• Status: Abandoned Application

• Current Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Kreitzer, Stuart S.
• Application Number:
  US10/829,900
• Publication Number:
  US 20050238174A1
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: H04L 2209/04 Masking or blinding
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068

Abstract

A method (100) of secure communications over a public network can include establishing a permanent key and an ordered sequence of limited use keys (102), enabling the use of the permanent key at any time (104) and enabling the use of the limited use keys for a predetermined usage (106). The step of establishing the order sequence of limited use keys can optionally include the step of establishing an ordered sequence of single-use keys (108). The method can further include the step of requesting (110) the ordered sequence of limited use keys from an access protected website and optionally storing (116) the ordered sequence of limited use keys and a respective status for each of the limited use keys. The method can further include the step of disabling (112) each of the limited use keys after the predetermined usage for each of the limited use keys.

Claims

1. A method of secure communications over a public network, comprising the steps of:

establishing a permanent key and an ordered sequence of limited use keys;

enabling the use of the permanent key at any time;

enabling the use of the limited use keys for a predetermined usage for each of the limited use keys in the ordered sequence; and

disabling each of the limited use keys after the predetermined usage for each of the limited use keys in the ordered sequence respectively.

2. The method of claim 1, wherein the method further comprises the step of masking sensitive information when a limited use key is used for a given session.

3. The method of claim 1, wherein the method further comprises the step of suppressing the display of sensitive account information at logon when using a limited use key.

4. The method of claim 1, wherein the step of establishing the order sequence of limited use keys comprises the step of establishing an ordered sequence of single-use keys.

5. The method of claim 4, wherein the step of disabling comprises the step of disabling a single use key after a single logon using the single use key.

6. The method of claim 1, wherein the step of disabling comprises the step of disabling a limited use key after at least one among a predetermined amount of logons or a predetermined amount of logon time or after an expiration period.

7. The method of claim 1, wherein the method further comprises the step of requesting the ordered sequence of limited use keys from an access protected website.

8. The method of claim 1, wherein the method further comprises the step of storing the ordered sequence of limited use keys and a respective status for each of the limited use keys.

9. A secure networking system, comprising:

at least one server; and

a processor forming a portion of the server, wherein the processor is programmed to;

establish a permanent key and an ordered sequence of limited use keys;

enable the use of the permanent key at any time;

enable the use of the limited use keys for a predetermined usage for each of the limited use keys in the ordered sequence; and

disable each of the limited use keys after the predetermined usage for each of the limited use keys in the ordered sequence respectively.

10. The system of claim 9, wherein the processor is further programmed to mask sensitive information when a limited use key is used for a given session.

11. The system of claim 9, wherein the processor is further programmed to suppress the display of sensitive account information at logon when using a limited use key.

12. The system of claim 9, wherein the processor is further programmed in establishing the order sequence of limited use keys by establishing an ordered sequence of single-use keys.

13. The system of claim 12, wherein the processor is further programmed in disabling by disabling at least one among a single use key after a single login using the single use key, or disabling a limited use key after at least one among a predetermined amount of logons or after a predetermined amount of logon time or after an expiration period.

14. The system of claim 9, wherein the processor is further programmed to receive requests for and provide the ordered sequence of limited use keys from an access protected website.

15. The system of claim 9, wherein the processor is further programmed to store the ordered sequence of limited use keys and a respective status for each of the limited use keys.

16. A machine readable storage, having stored thereon a computer program having a plurality of code sections executable by a machine for causing the machine to perform the steps of:

establish a permanent key and an ordered sequence of limited use keys;

enable the use of the permanent key at any time;

enable the use of the limited use keys for a predetermined usage for each of the limited use keys in the ordered sequence; and

disable each of the limited use keys after the predetermined usage for each of the limited use keys in the ordered sequence respectively.

17. The machine readable storage of claim 16, wherein the computer program further has a plurality of code sections executable by the machine for causing the machine to perform the step of disabling by disabling at least one among a single use key after a single login using the single use key, or disabling a limited use key after at least one among a predetermined amount of logons or after a predetermined amount of logon time or after an expiration period.