Key management system

• US 5,173,938 A
• Filed: 09/03/1991
• Issued: 12/22/1992
• Est. Priority Date: 09/27/1990
• Status: Expired due to Term

• Current Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Bright, Michael W., Steinbrenner, Kurt W.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US07/753,454
• Time in Patent Office: 476 Days
• Field of Search: 380/9, 380/21, 380/43, 380/49, 380/50
• US Class Current: 380/273
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

This key management system effectively solves the key distribution problems of distance, time, operator error, and security risk by transferring encryption keys with appropriate system information between a key management controller (101) and a remote keyloader (109). The keyloader (109) is then coupled to a communication device to transfer (327) the keys and receive (329) identification information from the communication device. The keyloader (109) then sends (323) the information to the key management controller (101) that controls the distribution of the encryption keys and collection of the communication device identifications.

Claims

1. A key management controller for a key management system employing a keyloader for use with at least one external communication device, comprising:

means for receiving a call for access from the keyloader;

means coupled to said means for receiving a call, for receiving on a communication channel a key data request from the keyloader; and

means, coupled to said means for receiving on a communication channel, for providing said key data to the keyloader via said communication channel, and as a result the keyloader subsequently transfers said key data to an external communication device.

2. The key management controller of claim 1, further comprising:

means, coupled to said means for receiving a call for access, for receiving an identification of the keyloader; and

means for checking said identification of the keyloader for validity.

3. The key management controller of claim 1, further comprising means for acknowledging said call for access.

4. The key management controller of claim 1, further comprising means, coupled to said means for receiving a key data request, for encrypting said key data.

5. The key management controller of claim 1, further comprising:

means, coupled to said means for receiving a call, for accepting an identification of the external communication device from the keyloader; and

means, coupled to said means for accepting, for storing said identification of the external communication device.

6. The key management controller of claim 5, further comprising:

means, coupled to said means for accepting, for determining if said identification of the external communication device is encrypted; and

means, coupled to said means for determining, for decrypting said encrypted identification of the external communication device.

7. A method of key management in a key management controller for a key management system employing a keyloader for use with at least one external communication device, comprising the steps of:

receiving a call for access from the keyloader;

receiving on a communication channel, responsive to said step of receiving a call for access, a key data request from the keyloader; and

providing, responsive to said step of receiving on a communication channel, said key data to the keyloader via said communication channel, and as a result the keyloader subsequently transfers said key data to an external communication device.

8. The method of key management of claim 7, further comprising the steps of:

receiving, responsive to said step of receiving a call for access, an identification of the keyloader; and

checking said identification of the keyloader for validity.

9. The method of key management of claim 7, further comprising the step of acknowledging said call for access.

10. The method of key management of claim 7, further comprising the step of encrypting, responsive to said step of receiving a key data request, said key data.

11. The method of key management of claim 7, further comprising the steps of:

accepting, responsive to said step of receiving a call, an identification of the external communication device from the keyloader; and

storing, responsive to said step of accepting, said identification of the external communication device.

12. The method of key management of claim 11, further comprising the steps of:

determining, responsive to said step of accepting, if said identification of the external communication device is encrypted; and

decrypting, responsive to said step of determining, said encrypted identification of the external communication device.