METHOD AND APPARATUS FOR GENERATING AND UPDATING SECURITY CODES

• US 20100189263A1
• Filed: 11/03/2009
• Published: 07/29/2010
• Est. Priority Date: 11/05/2008
• Status: Abandoned Application

• Current Assignee: Mustang Microsystems, Inc.
• Original Assignee: Mustang Microsystems, Inc.
• Inventors: Janoschka, Wilbert John, Rochette, Michael John, Galloway, Thomas F., Cunningham, Joyce E.
• Application Number:
  US12/611,205
• Publication Number:
  US 20100189263A1
• Time in Patent Office: Days
• US Class Current: 380/279
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

A system and method for creating a target cryptographic key. In one embodiment the system includes a first cryptographic module including a first cryptographic key, and a loader including a second cryptographic key, a communications port for the first cryptographic module; and a communication link for transmitting the target cryptographic key. When the first cryptographic module is connected with the communications port of the loader, the first cryptographic module loads the second cryptographic key and creates the target cryptographic key in response to the first cryptographic key and the second cryptographic key. In one embodiment the method of creating a cryptographic key, includes the steps of: loading a second cryptographic key into a first cryptographic module; calculating, by the first cryptographic module, a target cryptographic key in response to a first cryptographic key and a second cryptographic key; and loading the target cryptographic key to a loader.

Claims

1. A system for creating a target cryptographic key comprising:

a first cryptographic module comprising;

a first cryptographic key; and

a loader comprising

a second cryptographic key; and

a communications port for the first cryptographic module,

wherein when the first cryptographic module is connected with the communications port of the loader, the first cryptographic module loads the second cryptographic key and creates the target cryptographic key in response to the first cryptographic key and the second cryptographic key.

2. The system of claim 1 wherein the target cryptographic key is loaded from the first cryptographic module to the loader.

3. The system of claim 1 further comprising a communication link for transmitting the target cryptographic key.

4. The system of claim 3 wherein the target cryptographic key is transmitted on the communication link from the loader to the target device.

5. The system of claim 1 wherein the second cryptographic key is stored encrypted in the loader.

6. The system of claim 1 wherein the system further comprises a key serial number.

7. The system of claim 6 wherein the target cryptographic key is the encrypted key serial number.

8. A method of updating a cryptographic key in a system having a smart card comprising a first cryptographic key and a loader having a second cryptographic key, the method comprising the steps of:

loading the second cryptographic key into the first cryptographic module from the loader;

creating, by the first cryptographic module, a target cryptographic key in response to the first cryptographic key and the second cryptographic key; and

loading the target cryptographic key to the loader.

9. The method of claim 8 further comprising the step transmitting by the loader the target cryptographic key to a target device on a communication link.

10. The method of claim 8 wherein the second cryptographic key is stored in the loader in encrypted form and the method further comprises the step of decrypting, by the first cryptographic module, the second cryptographic key.

11. The method of claim 10 further comprising the step of using the decrypted second cryptographic key to encrypt a key serial number to create the target cryptographic key.

12. A system for creating an updated cryptographic key comprising:

a first cryptographic module; and

a loader comprising;

an internal cryptographic module, the internal cryptographic module comprising an internal cryptographic module memory comprising a first cryptographic key; and

a communications port for the first cryptographic module,

wherein the first cryptographic module comprises a second cryptographic key and when the first cryptographic module is connected with the first cryptographic module communications port of the loader, the first cryptographic module transmits the second cryptographic key to the loader and the loader creates a target cryptographic key in response to the first cryptographic key and the second cryptographic key.

13. The system of claim 12 further comprising a communication link for transmitting the target cryptographic key.

14. The system of claim 13 wherein the target cryptographic key is transmitted on the communication link from the loader to the target device.

15. The system of claim 12 wherein the second cryptographic key is stored encrypted in the first cryptographic module.

16. The system of claim 12 wherein the system further comprises a key serial number.

17. The system of claim 16 wherein the target cryptographic key is the encrypted key serial number.

18. The system of claim 12 wherein the loader further comprises a loader processor and a loader memory and the internal cryptographic module is in communications with the loader processor.

19. A method of creating a cryptographic key in a system comprising a loader comprising an internal cryptographic module having a first cryptographic key, and a first cryptographic module having a second cryptographic key, the method comprising the steps of:

loading the second cryptographic key from the first cryptographic module to the loader; and

creating, by the loader, a target cryptographic key in response to the first cryptographic key and the second cryptographic key.

20. The method of claim 19 further comprising the step transmitting by the loader the target cryptographic key to a target device on a communication link.

21. The method of claim 19 wherein the target cryptographic key is encrypted.

22. The method of claim 19 wherein the second cryptographic key is stored in the first cryptographic module in encrypted form;

wherein the loader further comprises an internal cryptographic module comprising the first cryptographic key; and

wherein the method further comprises the step of decrypting, by the internal cryptographic module, the second cryptographic key using the first cryptographic key.

23. The method of claim 22 further comprising the step of using the decrypted second cryptographic key to encrypt a key serial number to create the target cryptographic key.

24. A system for creating a target cryptographic key comprising:

a first cryptographic module comprising;

a first cryptographic key and a second cryptographic key; and

a key recipient comprising

a communications port for the first cryptographic module,

wherein when the first cryptographic module is connected with the communications port of the key recipient, the first cryptographic module creates the target cryptographic key in response to the first cryptographic key and the second cryptographic key and loads it into the key recipient.

25. The system of claim 24 further comprising a target communication link for transmitting a target cryptographic key.

26. The system of claim 25 wherein the target cryptographic key is transmitted on the target communication link from the key recipient to the target device.

27. The system of claim 24 wherein the target cryptographic key is the encrypted key serial number.

28. A method of target cryptographic key in a system having a first cryptographic module comprising a first cryptographic key and second cryptographic key, and a key recipient, the method comprising the steps of:

creating, by the first cryptographic module, a target cryptographic key in response to the first cryptographic key and the second cryptographic key; and

loading the target cryptographic key to the key recipient.

29. The method of claim 28 further comprising the step transmitting by the key recipient the encrypted cryptographic key to a target device on a target communication link.

30. The method of claim 28 further comprising the step of using the first cryptographic key to encrypt a second cryptographic key to create the target cryptographic key.