Cryptographic key split binding process and apparatus

• US 20070014406A1
• Filed: 06/22/2006
• Published: 01/18/2007
• Est. Priority Date: 02/13/1998
• Status: Active Grant

• Current Assignee: TecSec, Incorporated
• Original Assignee: TecSec, Incorporated
• Inventors: Scheidt, Edward, Wack, C.
• Granted Patent: US 7,738,660 B2
• Time in Patent Office: Days
• US Class Current: 380/258
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds

Abstract

A cryptographic key split combiner includes a number of key split generators for generating cryptographic key splits from seed data, and a key split randomizer for randomizing the key splits to produce a cryptographic key. The key split generators can include a random split generator for generating random key splits, a token split generator for generating token key splits based on label data, a console split generator for generating console key splits based on maintenance data, a biometric split generator for generating biometric key splits based on biometric data, and a location split generator for generating location key splits based on location data. Label data can be read from storage, and can include user authorization data. A process for forming cryptographic keys includes randomizing or otherwise binding the splits to form the key.

Claims

1-26. -26. (canceled)

27. A process for forming decrypting an encrypted object, comprising:

generating a plurality of cryptographic key splits, each based on seed data;

randomizing the cryptographic key splits to produce a cryptographic key; and

applying the cryptographic key to the encrypted object according to a predetermined object/key relationship;

wherein generating a plurality of cryptographic key splits includes generating a location key split based on location seed data.

28. The process of claim 27, further comprising receiving the location seed data from a geographic location device.

29. The process of claim 27, wherein the location seed data is based at least in part on at least one of virtual location data, actual location data, and relative location data.

30. The process of claim 27, wherein the location seed data corresponds to at least one of virtual location data, actual location data, and relative location data.

31. The process of claim 27, wherein the location seed data is based at least in part on at least one of Global Positioning System receiver output data and Galileo receiver output data.

32. The process of claim 27, wherein the location seed data corresponds to at least one of Global Positioning System receiver output data and Galileo receiver output data.

33. The process of claim 27, wherein the location seed data is based at least in part on at least one of longitude, latitude, altitude, and satellite distance data.

34. The process of claim 27, wherein the location seed data corresponds to at least one of longitude, latitude, altitude, and satellite distance data.

35. The process of claim 27, further comprising receiving the location seed data from a computer network.

36. The process of claim 27, wherein the location seed data is based at least in part on a network location.

37. The process of claim 27, wherein the location seed data corresponds to a network location.

38. The process of claim 27, wherein the location seed data is based at least in part on at least one of an Internet Protocol address and a Media Access Control address.

39. The process of claim 27, wherein the location seed data corresponds to at least one of an Internet Protocol address and a Media Access Control address.

40. The process of claim 27, wherein the location seed data is based at least in part on network domain data.

41. The process of claim 27, wherein the location seed data corresponds to network domain data.

42. The process of claim 27, wherein the cryptographic key is a stream of symbols.

43. The process of claim 27, wherein the cryptographic key is at least one symbol block.

44. The process of claim 27, wherein the cryptographic key is a key matrix.

45. The process of claim 27, wherein generating a plurality of cryptographic key splits further includes generating a random key split based on random seed data.

46. The process of claim 27, wherein generating a plurality of cryptographic key splits further includes generating an organization key split based on organization seed data.

47. The process of claim 27, wherein generating a plurality of cryptographic key splits further includes generating a maintenance key split based on maintenance seed data.

48. The process of claim 27, wherein generating a plurality of cryptographic key splits further includes generating a random key split based on random seed data, generating an organization key split based on organization seed data, and generating a maintenance key split based on maintenance seed data.

49-72. -72. (canceled)