Method of distributing and utilizing enciphering keys

• US 4,607,137 A
• Filed: 04/13/1984
• Issued: 08/19/1986
• Est. Priority Date: 04/26/1983
• Status: Expired due to Fees

• Current Assignee: US Philips Corporation (Koninklijke Philips N.V.)
• Original Assignee: US Philips Corporation (Koninklijke Philips N.V.)
• Inventors: Jansen, Cornelis J. A., van der Vlist, Pieter, Hafkamp, Frederik, van de Pas, Andries J. M.
• Primary Examiner(s): Cangialosi, Salvatore
• Assistant Examiner(s): Lewis, Aaron J.
• Application Number:
  US06/600,050
• Time in Patent Office: 858 Days
• Field of Search: 178/22.05, 178/22.09, 178/22.14, 178/22.19, 179/1.5 R
• US Class Current: 380/277
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

In a communication network with cryptographically protected connections a unique key is used for each connection between two subscribers, so that when one or more keys fall into the hands of an unauthorized person it has no consequences for the protection of the remaining connections. In a network comprising N subscribers this implies that each participant must have N-1 keys for communication with the other participants. Such a set of N-1 keys is obtained by putting a column from a N×N key matrix (main diagonal empty) at the disposal of each participant. During the connection set-up the correct unique key is automatically selected by interchange of the column number. The key matrices used in the network can be regularly replaced without it being necessary to interrupt the operation of the network.

Claims

1. A method of distributing and utilizing enciphering keys in a system comprising a number of (N,N>

2) transceivers, these transceivers being interconnectable for transmitting enciphered messages, characterized in that each transceiver has an initial set of keys enciphering of which in all cases a unique key is reserved for communication with each one of the other transceivers, that each key of such set is an element of a column of a first N×

N key matrix and the number of the column is associated with the identity of the transceiver, and that prior to the start of communication between two transceivers their column numbers are exchanged and the two transceivers are automatically adjusted to their unique key.

2. A method of distributing and utilizing enciphering keys as claimed in claim 1, characterized in that the initial sets of keys of all the N-transceivers are gradually and continuously replaced by new sets of keys which new sets together provide a new N×

N key matrix.

3. A method of distributing and utilizing enciphering keys as claimed in claim 1, characterized in that initially each transceiver has, in addition to the said initial set of keys from the first key matrix, a second set of enciphering keys from a second newer key matrix, that prior to the start of the communication between two transceivers not only their column numbers in the first key matrix but also their column number in the second key matrix and the identity of the two matrices are interchanged, that the two transceivers are automatically adjusted to their most recent unique key, that in a first period of time a new set of keys is transmitted separately to each transceiver to replace their older set of keys and that in second and subsequent periods of time a new set of keys is in all cases transmitted separately to each transceiver to replace their oldest set of keys.

4. A method of distributing and utilizing enciphering keys as claimed in claim 1, characterized in that initially each transceiver has in addition to the said initial set of keys from the first key matrix a second and a third set of keys from a second and third key matrix, respectively, that in a first time period new sets of keys are transmitted separately to each transceiver which new sets are columns from a new first, new second and new third key matrix, respectively, that in second and subsequent periods of time the sets of keys associated with the first, second and third key matrices are replaced, that prior to the start of communication between two transceivers not only their column members but also the number of the time period is interchanged and that the transceivers are automatically adjusted to their unique key from the appropriate matrix.

5. A method of distributing and utilizing enciphering keys as claimed in claim 4, characterized in that the set of keys associated with the first key column is obtained by choosing any column from the transposed third key matrix of the preceding time period.