Fair cryptosystems and methods of use

• US 5,315,658 A
• Filed: 04/19/1993
• Issued: 05/24/1994
• Est. Priority Date: 04/20/1992
• Status: Expired

• Current Assignee: Silvio Micali
• Original Assignee: Bankers Trust Company
• Inventors: Micali, Silvio
• Primary Examiner(s): Swann, Tod R.
• Application Number:
  US08/049,929
• Time in Patent Office: 400 Days
• Field of Search: 380/23, 380/24, 380/25, 380/28, 380/29, 380/30
• US Class Current: 380/286
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 20/403 Solvency checks
• CPC Class Codes: G07F 17/3241 Security aspects of a gaming system, e.g. detecting cheating, device integrity, surveillance computer security G06F21/00
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04K 1/00 Secret communication
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority

Abstract

A method, using a public-key cryptosystem, for enabling a predetermined entity to monitor communications of users suspected of unlawful activities while protecting the privacy of law-abiding users, wherein each user is assigned a pair of matching secret and public keys. According to the method, each user'"'"'s secret key is broken into shares. Then, each user provides a plurality of "trustees" pieces of information. The pieces of information provided to each trustee enable that trustee to verify that such information includes a "share" of a secret key of some given public key. Each trustee can verify that the pieces of information provided include a share of the secret key without interaction with any other trustee or by sending messages to the user. Upon a predetermined request or condition, e.g., a court order authorizing the entity to monitor the communications of a user suspected of unlawful activity, the trustees reveal to the entity the shares of the secret key of such user. This enables the entity to reconstruct the secret key and monitor the suspect user'"'"'s communications.

Claims

1. A method, using a public-key cryptosystem, for enabling a predetermined entity to monitor communications of users suspected of unlawful activities while protecting the privacy of law-abiding users, wherein each user is assigned a pair of matching secret and public keys, comprising the steps of:

breaking each user'"'"'s secret key into shares;

providing trustees pieces of information enabling the trustees to verify that the pieces of information include shares of a secret key of some given public key; and

upon a predetermined request, having the trustees reveal the shares of the secret key of a user suspected of unlawful activity to enable the entity to attempt reconstruction of the secret key; and

monitoring communications to the suspect user during a time period specified in the predetermined request.

2. The method as described in claim 1 wherein the predetermined entity is a government agency and the predetermined request is a court order.

3. A method, using a cryptosystem, for enabling a predetermined entity to monitor communications of users suspected of unlawful activities while protecting the privacy of law-abiding users, comprising the steps of:

providing trustees pieces of information that are guaranteed to include shares of at least a secret decryption key; and

upon a predetermined request, having the trustees reveal the shares of the secret decryption key to enable the entity to attempt to monitor communications to the suspected user during a time period specified in the predetermined request.

4. A method, using a cryptosystem, for enabling a predetermined entity to monitor communications of users suspected of unlawful activities while protecting the privacy of law-abiding users, comprising the steps of:

having trustees hold pieces of information, wherein a piece of information is guaranteed to include a share of secret decryption key; and

upon a predetermined request, having a given number of trustees each reveal the piece of information that includes the share of at least one secret decryption key to enable the entity to monitor communications to the suspected user.

5. The method as described in claim 4 further including the step of:

characterizing the user'"'"'s activities as unlawful if the entity is unable to monitor the user'"'"'s communications.

6. The method as described in claim 4 wherein a given minority of trustees are unable to reconstruct the secret key.

7. A method, using a cryptosystem, for enabling a predetermined entity to monitor communications of users suspected of unlawful activities while protecting the privacy of law-abiding users, wherein one user has at least a secret decryption key, comprising the steps of:

having trustees hold pieces of information that are guaranteed to include shares of a secret decryption key; and

upon a predetermined request, having a given number of trustees each reveal the piece of information that includes the share of the secret decryption key to enable the entity to attempt to monitor communications to the user suspected of unlawful activities.

8. The method as described in claim 7 wherein upon the predetermined request all of the trustees each reveal the piece of information.

9. A method for revealing a user'"'"'s secret value, comprising the steps of:

having trustees hold pieces of information, wherein a piece of information includes a share of secret value; and

upon a predetermined request, having a given number of trustees each reveal the piece of information that includes the share of the secret value to enable the entity to reconstruct the secret value at a prescribed time specified in the predetermined request.

10. A method, using a cryptosystem, for enabling a predetermined entity to monitor communications of users suspected of unlawful activities while protecting the privacy of law-abiding users, comprising the steps of:

having trustees hold pieces of information that are guaranteed to include shares of a secret decryption key;

upon a predetermined request, having the trustees send information to a secure device having its own internal clock; and

using the secure device to enable the entity to monitor communications to a suspect user for an amount of time as specified in the predetermined request.

11. A method, using a cryptosystem, for enabling a predetermined entity to verify that a user is sending messages encrypted by means of a secure device implementing the given cryptosystem, wherein the secure device contains a secret key known to the entity, comprising the steps of:

having the secure device use the given cryptosystem to generate a first string, the first string being an encryption of a message;

having the secure device use the secret key to generate a second string that guarantees to the entity that the first string was generated with the given cryptosystem.

12. A method, using a cryptosystem, for enabling a predetermined entity to confirm that users of a system exchange messages encrypted according to a predetermined algorithm, comprising the steps of:

providing each user in the system with a secure chip containing at least one secret key unknown to the user; and

having the user send encrypted messages using the secure chip; and

with each encrypted message sent by a user, having the secure chip also send a data string, computed using the secret key, to guarantee the entity that the encrypted message was generated by the secure chip using the predetermined algorithm.

13. The method as described in claim 12 further including the steps of:

providing trustees with pieces of information including shares of a secret key; and

upon a predetermined request, having a given number of trustees send information including shares of the secret key to allow the entity to monitor communications to a suspect user.