Decryption of messages employing unique control words and randomly chosen decryption keys

• US 4,782,529 A
• Filed: 09/14/1987
• Issued: 11/01/1988
• Est. Priority Date: 09/02/1986
• Status: Expired due to Term

• Current Assignee: Unisys Corporation
• Original Assignee: Unisys Corporation
• Inventors: Shima, George T.
• Primary Examiner(s): Cangialosi, Salvatore
• Application Number:
  US07/096,772
• Time in Patent Office: 414 Days
• Field of Search: 380/20, 380/21, 380/28, 380/44-50
• US Class Current: 380/44
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

In a communication network, a transmitting station sends encrypted messages to several receiving stations. Each receiving station stores one and the same set of decryption keys; and it stores a control word which is a series of bits that is unique to that station. Also, each receiving station identifies an encrypted message as being sent to it by -- (a) automatically selecting a decryption key at random from the set, (b) performing a decrypt operation on the same portion of the encrypted message from the transmitting station using the selected key, (c) comparing the result of the decrypt operation to its stored control word, and (d) repeating steps (a) thru (c) until either a match occurs or all keys in the set have been selected.

Claims

1. For use in a communication network of the type in which a transmitting station sends an encrypted message to a plurality of receiving stations in a manner that enables only a selected receiving station in said plurality to decrypt the messages, a method of operation each receiving station, wherein:

each of said receiving stations stores one and the same set of several decryption keys;

each of said receiving stations stores a control word which is any series of bits that is unique to that station; and

each of said receiving stations identifies an encrypted message as being sent to it by--(a) automatically choosing a decryption key at random from said set, (b) performing a decrypt operation on the same portion of the encrypted message from said transmitting station using the selected key, (c) comparing the result of said decrypt operation to its stored control word, and (d) repeating steps (a) thru (c) until either a match occurs or all keys in said set have been selected.

2. A method according to claim 1 wherein the recited step (a) is performed by--storing a circular sequence of bits in a memory;

randomly picking one bit in said sequence as the first bit of said decryption key; and

reading successive bits of said stored sequence as successive bits of said decryption key.

3. A method according to claim 2 wherein to read successive bits of said decryption key, the number one is added to the memory address of the immediately preceding bit.

4. A method according to claim 2 wherein to read successive bits of said decryption key, the number one is subtracted from the address of the immediately preceding bit.

5. A method according to claim 1 wherein said portion of said encrypted message on which step (b) is performed is at the start of the message.

6. A method according to claim 1 wherein said portion of said encrypted message on which step (b) is performed is at a predetermined location therein.

7. A method according to claim 1 wherein said control word is of a type which has a secondary meaning independent of its use in generating said match.

8. For use in a communication network of the type in which a transmitting station sends an encrypted message to a plurality of receiving stations in a manner that enables only a selected receiving station in said plurality to decrypt the messages, a module for inclusion within each receiving station which comprises:

one and the same set of several decryption keys;

a control word which is any series of bits that is unique to each receiving station; and

a control circuit including (a) a means for automatically choosing a decryption key at random from said set, (b) a means for performing a decrypt operation on the same portion of the encrypted message from said transmitting station using the selected key, (c) a means for comparing the result of said decrypt operation to the stored control word, and (d) a means for reactivating means (a) thru (c) until either a match occurs or all keys in said set have been selected.

9. A module according to claim 8 wherein said set of decryption keys is stored as a circular sequence of bits in a memory;

and wherein said means for selecting randomly picks one bit in said sequence as the first bit of said decryption key and reads successive bits of said sequence as successive bits of said decryption key.

10. A module according to claim 9 wherein said means for selecting read consecutive bits of said decryption key from said memory by adding the number one to the address of the immediately preceding bit.

11. A module according to claim 9 wherein said means for selecting reads consecutive bits of said decryption key from said memory by subtracting the number one from the address of the immediately preceding bit.

12. A module according to claim 8 wherein said same portion of said encrypted message is at the start of the message.

13. A module according to claim 8 wherein said same portion of said encrypted message is at a predetermined location therein.

14. A module according to claim 8 wherein said control word is of a type which has a secondary meaning independent of its use in generating said match.