Key management system

• US 5,093,860 A
• Filed: 09/27/1990
• Issued: 03/03/1992
• Est. Priority Date: 09/27/1990
• Status: Expired due to Term

• Current Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Bright, Michael W., Steinbrenner, Kurt W.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US07/589,138
• Time in Patent Office: 523 Days
• Field of Search: 380/21, 380/49, 380/50, 380/52
• US Class Current: 380/273
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

This key management system effectively solves the key distribution problems of distance, time, operator error, and security risk by transferring encryption keys with appropriate system information between a key management controller (101) and a remote keyloader (109). The keyloader (109) is then coupled to a communication device to transfer (327) the keys and receive (329) identification information from the communication device. The keyloader (109) then sends (323) the information to the key management controller (101) that controls the distribution of the encryption keys and collection of the communication device identifications.

Claims

1. A key management system for a secure communication system, using a keyloader to load at least one encryption key into a communication device, comprising:

means for controlling distribution of a plurality of encryption keys;

means, coupled to said means for controlling, for conveying at least one of said plurality of encryption keys to the keyloader;

means for coupling the keyloader to the communication device; and

means for transferring said at least one of said plurality of encryption keys to the communication device.

2. The key management system of claim 1, further comprising means for storing said plurality of encryption keys.

3. The key management system of claim 1 further comprising:

means, coupled to said means for transferring, for accepting an identification from the communication device; and

means, coupled to said means for conveying, for sending said identification to said means for controlling.

4. The key management system of claim 3 further comprising means for encrypting said identification.

5. The key management system of claim 4 further comprising means for decrypting said encrypted identification.

6. The key management system of claim 1 further comprising means for encrypting said at least one of said plurality of encryption keys.

7. The key management system of claim 6, further comprising:

means for determining if said at least one of said plurality of encryption keys is encrypted; and

means, coupled to said means for determining, for decrypting said encrypted at least one of said plurality of encryption keys.

8. A keyloader for use with an external communication device in a key management system employing an external source of key control, comprising:

means for entering user information;

means, coupled to said means for entering, for accessing the external source of key control;

means, coupled to said means for entering, for requesting at least one encryption key from the external source of key control;

means, for receiving said at least one requested encryption key;

means, coupled to said receiving means, for storing said at least one requested encryption key; and

means, coupled to said storing means, for transferring said at least one requested encryption key to the external communication device.

9. The keyloader of claim 8, further comprising:

means, coupled to said means for transferring, for accepting an identification from the external communication device; and

means, coupled to said means for accepting, for sending said identification to the external source of key control.

10. The keyloader of claim 9, further comprising means, coupled to said means for accepting, for encrypting said identification.

11. The keyloader of claim 8, further comprising:

means, coupled to said means for receiving, for determining if said at least one requested encryption key is encrypted; and

means, coupled to said means for determining, for decrypting said at least one encrypted encryption key.

12. A method of key management in a key loader for use with an external communication device in a key management system employing an external source of key control, comprising the steps of:

accessing the external source of key control;

requesting, responsive to said step of accessing, at least one encryption key from the external source of key control;

receiving, responsive to said step of requesting, said at least one encryption key from the external source of key control;

storing, responsive to said step of receiving, said at least one received encryption key; and

transferring said at least one received encryption key to the external communication device.

13. The method of key management of claim 12, further comprising the steps of:

accepting, responsive to said step of transferring, an identification from the external communication device; and

sending, responsive to said step of accepting, said identification to the external source of key control.

14. The method of key management of claim 13, further comprising the step of encrypting said identification.

15. The method of key management of claim 12, further comprising the steps of:

determining, responsive to said step of receiving, if said at least one received encryption key is encrypted; and

decryption, responsive to said step of determining, said at least one received encrypted encryption key.