Application level security system and method

• US 5,602,918 A
• Filed: 12/22/1995
• Issued: 02/11/1997
• Est. Priority Date: 12/22/1995
• Status: Expired due to Term

• Current Assignee: SSL Services LLC
• Original Assignee: Virtual Open Network Environment Corporation
• Inventors: Wang, Jieh-Shan, Chen, James F.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): Laufer, Pinchus M.
• Application Number:
  US08/593,240
• Time in Patent Office: 417 Days
• Field of Search: 380/21, 380/25, 380/49, 380/23, 380/24
• US Class Current: 713/153
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

A system and method for establishing secured communications pathways across an open unsecured network, without compromising the security of any parties to the communication, involves establishing secured gateways or firewalls between the Internet and any party which desires protection by 1.) using a smart card to distribute shared secret keys between a computer which serves as the above-mentioned firewall and a client node on the Internet; 2.) using the shared private keys to establish mutual authentication between the gateway and the smartcard; 3.) generating a session or temporary secret key for use in further communications between the gateway and the client node once communications have been established; and 4.) encrypting further communications using the session key.

Claims

1. A system for establishing secured communications pathways across an open unsecured network between a secured party and a possibly unsecured party, without compromising the security of either of the parties, comprising:

a smartcard reader and a smartcard located at a client node of the unsecured party, the smartcard having stored thereon a shared secret key known to the secured party;

a gateway processor which controls access from the open unsecured network to said secured party and having access to the shared secret key;

means for authenticating communications between the respective parties based on said shared secret key and for generating session keys,

wherein the smartcard reader includes means for prompting a card holder to enter a secret code and for confirming the code in order to authenticate the card holder before permitting further communications, and

wherein the means for authenticating communication between the respective parties and for generating the session keys comprises;

means associated with the gateway processor for generating a first number and sending the first number to the smart card;

means on the smartcard for encrypting the first number by the shared secret key;

means on the smartcard for generating a second number and encrypting a combination of the encrypted first number and the second number;

means in the gateway processor for verifying whether the first number has been encrypted by the shared secret key, thereby authenticating the smartcard;

means in the gateway processor for generating a first session key by combining the encrypted first number with the second number and encrypting the combination;

means in the gateway processor for encrypting the second number by the shared secret key;

means in the smartcard for verifying whether the second random number has been encrypted by the shared secret key and thereby authenticating the gateway processor; and

means in the smartcard for combining the encrypted first number with the second number and encrypting same to generate a second session key corresponding to the first session key generated by the gateway processor; and

means for encrypting further communications between the respective parties using the first and second session keys.

2. A system as claimed in claim 1, wherein the secured party is connected by means of a secured communications line with a key server, and the further communications include a portion of a digital signature generated in part by the key server and a portion generated by the smartcard.

3. A system as claimed in claim 1, wherein said first and second numbers are random numbers.

4. A system as claimed in claim 1, wherein said combining means in the gateway processor and said combining means in the smartcard each comprises means for performing an exclusive or operation on the encrypted first number and the second number.

5. A method of establishing a secured communication pathway between a party on a private network and a party on an open unsecured network, comprising the steps of:

reading from a smartcard a shared secret key;

authenticating communications between the respective parties based on the shared secret key and generating session keys; and

prompting a card holder to enter a secret code into the smartcard reader and confirming the code in order to authenticate the card holder before permitting further communications,

wherein the step of authenticating communications between the respective parties and generating the session key comprises the steps of;

the gateway processor generating a first number and sending the first number to the smart card;

the smartcard encrypting the first number by the shared secret key;

the smart card generating a second number and encrypting a combination of the encrypted first number and the second number;

the gateway processor verifying whether the first number has been encrypted by the shared secret key, thereby authenticating the smartcard;

the gateway processor generating a session key by combining the encrypted first number with the second number and encrypting the result;

the gateway processor encrypting the second number by the shared secret key;

the smartcard verifying whether the second random number has been encrypted by the shared secret and thereby authenticating the gateway processor; and

the smartcard combining the encrypted first number with the second number and encrypting same to generate a second session key corresponding to the first session key generated by the gateway processor; and

further comprising the step of encrypting further communications between the respective parties using the first and second session keys.

6. A method as claimed in claim 5, wherein said first and second numbers are random numbers.

7. A method as claimed in claim 5, wherein the respective combining steps comprise the step of performing an exclusive or operation on the encrypted first number and the second number.