System and method for controlling access to a user secret

• US 5,745,573 A
• Filed: 01/10/1997
• Issued: 04/28/1998
• Est. Priority Date: 08/11/1994
• Status: Expired due to Term

• Current Assignee: McAfee, Inc. (McAfee, LLC)
• Original Assignee: Trusted Information Systems, Inc. (McAfee, LLC)
• Inventors: Ellison, Carl M., Walker, Stephen T., Lipner, Steven B., Balenson, David M.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/781,626
• Time in Patent Office: 473 Days
• Field of Search: 380/21, 380/23-25, 380/30
• US Class Current: 380/286
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system and method for data escrow cryptography are described. An encrypting user encrypts a message using a secret storage key (KS) and attaches a data recovery field (DRF), including an access rule index (ARI) and KS, to the encrypted message. The DRF and the encrypted message are stored in a storage device. To recover KS, a decrypting user extracts and sends the DRF to a data recovery center (DRC) that issues a challenge based on access rules (ARs) originally defined by the encrypting user. If the decrypting user meets the challenge, the DRC sends KS in a message to the decrypting user. Generally, KS need not be an encryption key but could represent any piece of confidential information that can fit inside the DRF. In all cases, the DRC limits access to decrypting users who can meet the challenge defined in either the ARs defined by the encrypting user or the ARs defined for override access.

Claims

1. A data recovery center, comprising:

means for receiving an access rule from an access rule defining system in communication with the data recovery center, wherein said access rule includes an authentication test or a compound authorization rule, said access rule defining at least a portion of a procedure for authenticating an identity of an emergency decryptor, wherein emergency decryption comprises decryption using a data recovery field;

means for generating an access rule index and associating said access rule index with said access rule, wherein an access rule index is included within a data recovery field and allows the data recovery center to locate an access rule that control access, by an emergency decryptor, to a secret within a data recovery field; and

means for communicating said access rule index to said access rule defining system.

2. The data recovery center of claim 1, further comprising access rule re-definition means for enabling said access rule defining system to re-define an existing access rule, said access rule re-definition means comprising:

means for receiving from said access rule defining system a request to re-define said existing access rule, said request comprising a previously created access rule index associated with said existing access rule and a new access rule;

means for retrieving from a storage device coupled to said data recovery center said existing access rule using said previously created access rule index as an index into said storage device;

means for interacting with said access rule defining system in accordance with said existing access rule definition retrieved from said storage device to determine whether said access rule defining system is authorized to re-define said existing access rule; and

means for replacing said existing access rule with said new access rule if said access rule defining system is determined to be authorized to re-define said existing access rule.

3. The data recovery center of claim 1, wherein said access rule is an authentication test that verifies a person'"'"'s identity.

4. The data recovery center of claim 1, wherein said access rule comprises N prompt/reply pairs and is satisfied when said access rule defining system the numbers A and K (K≦

A≦

N) such that said access rule definition is satisfied if a user provides correct responses to K of the A prompt/reply pairs (K≦

A≦

N) that said data recovery center randomly selects.

5. The data recovery center of claim 1, wherein said access rule is a compound authorization rule of the form, k≦

n, such that said access rule definition is satisfied if k of the n access rules identified by k of the n access rule indexes are satisfied.

6. The data recovery center of claim 1, wherein said access rule index is an address at which said access rule definition is stored.

7. The data recovery center of claim 1, wherein said secret is an encryption key.

8. A method in a data recovery center, comprising the steps of:

(1) receiving an access rule from an access rule defining system in communication with the data recovery center, wherein said access rule includes an authentication test or a compound authorization rule, said access rule defining at least a portion of a procedure for authenticating an identity of an emergency decryptor, wherein emergency decryption comprises decryption using a data recovery field;

(2) generating an access rule index and associating said access rule index with said access rule, wherein an access rule index is included within a data recovery field and allows the data recovery center to locate an access rule that control access, by an emergency decryptor, to a secret within a data recovery field; and

(3) communicating said access rule index to said access rule defining system.

9. The method of claim 8, further comprising the step of:

(4) enabling a access rule defining system to re-define an existing access rule;

step (4) comprising the steps of;

(a) receiving from said access rule defining system a request to re-define said existing access rule, said request comprising a previously created access rule index associated with said existing access rule and a new access rule;

(b) retrieving from a storage device coupled to said data recovery center said existing access rule using said previously created access rule index as an index into said storage device;

(c) interacting with said access rule defining system in accordance with said existing access rule retrieved from said storage device to determine whether said access rule defining system is authorized to re-define said existing access rule; and

(d) replacing said existing access rule with said new access rule if said access rule defining system is determined to be authorized to re-define said existing access rule.

10. The method of claim 8, wherein said step (1) comprises the step of receiving an access rule from an access rule defining system in communication with the data recovery center, wherein said access rule is an authentication test that verifies a person'"'"'s identity.

11. The method of claim 8, wherein said step (1) comprises the step of receiving an access rule from an access rule defining system in communication with the data recovery center, wherein said access rule comprises N prompt/reply pairs and is satisfied when said access rule defining system provides correct responses to K of the A prompt/reply pairs (K≦

A≦

N) that said data recovery center randomly selects.

12. The method of claim 8, wherein said step (1) comprises the step of receiving an access rule from an access rule defining system in communication with the data recovery center, wherein said access rule is of the form, k≦

n, such that said access rule is satisfied if k of the n access rules identified by k of the n access rule indexes are satisfied.

13. The method of claim 8, wherein said step (2) comprises the step of generating an access rule index and associating said access rule index with said access rule, wherein said access rule index is an address that references an access rule.

14. In an environment comprising a data recovery center and a access rule defining system, a method in said access rule defining system comprising the steps of:

(1) generating an access rule, said access rule including an authentication test or a compound authorization rule, said access rule defining at least a portion of a procedure for authenticating an identity of an emergency decryptor, wherein emergency decryption comprises decryption using a data recovery field;

(2) registering said access rule with said data recovery center;

(3) receiving from said data recovery center registration information resulting from registering said access rule with said data recovery center; and

(4) storing said registration information in an access rule index file, wherein registration information is included within a data recovery field and allows said data recovery center to locate an access rule that controls access, by an emergency decryptor, to a secret within the data recovery field.

15. The method of claim 14, wherein said step (1) comprises the step of generating an authentication test that verifies a person'"'"'s identity.

16. The method of claim 14, wherein said step (1) comprises the step of generating an access rule that comprises N prompt/reply pairs, wherein said access rule comprises N prompt/reply pairs and is satisfied when said access rule defining system provides correct responses to K of the A prompt/reply pairs (K≦

A≦

N) that said data recovery center randomly selects.

17. The method of claim 14, wherein said step (1) comprises the step of generating an access rule of the form, k≦

n, such that said access rule is satisfied if k of the n access rules identified by k of the n access rule indexes are satisfied.

18. The method of claim 14, wherein said step (3) comprises the step of receiving from said data recovery center registration information resulting from registering said access rule with said data recovery center, wherein said registration information is an address that references an access rule.

19. A controller for enabling a processor to control access to user secret data, comprising:

means for enabling said processor to generate an access rule, said access rule including an authentication test or a compound authorization rule, said access rule defining at least a portion of a procedure for authenticating an identity of an emergency decryptor, wherein emergency decryption comprises decryption using a data recovery field;

means for enabling said processor to register said access rule with a data recovery center;

means for enabling said processor to receive from said data recovery center registration information resulting from registering said access rule with said data recovery center; and

means for enabling said processor to store said registration information in an access rule index file, wherein registration information is included within a data recovery field and allows said data recovery center to locate an access rule that control access, by an emergency decryptor, to a secret within the data recovery field.

20. The controller of claim 19, wherein said access rule is an authentication test that verifies a person'"'"'s identity.

21. The controller of claim 19, wherein said access rule comprises N prompt/reply pairs and is satisfied when said access rule defining system numbers A and K (K≦

A≦

N) such that said access rule definition is satisfied if a user correctly provides correct responses to K of the A prompt/reply pairs (K≦

A≦

N) that said data recovery center randomly selects.

22. The controller of claim 19, wherein said access rule is a compound authorization rule of the form, k≦

n, such that said access rule definition is satisfied if k of the n access rules identified by k of the n access rule indexes are satisfied.

23. The controller of claim 19, wherein said access rule index is an address at which said access rule definition is stored.

24. The controller of claim 19, wherein said secret is an encryption key.

25. A controller for enabling a processor to register a access rule defining system for data access control operations, comprising:

means for enabling said processor to receive an access rule from an access rule defining system in communication with the data recovery center, wherein said access rule includes an authentication test or a compound authorization rule, said access rule defining at least a portion of a procedure for authenticating an identity of an emergency decryptor, wherein emergency decryption comprises decryption using a data recovery field;

means for enabling said processor to generate an access rule index and associating said access rule index with said access rule, wherein an access rule index is included within a data recovery field and allows the data recovery center to locate an access rule that control access, by an emergency decryptor, to a secret within a data recovery field; and

means for enabling said processor to communicate said access rule index to said access rule defining system.

26. The controller of claim 25, wherein said access rule is an authentication test that verifies a person'"'"'s identity.

27. The controller of claim 25, wherein said access rule comprises N prompt/reply pairs and is satisfied when said access rule defining system numbers A and K (K≦

A≦

N) such that said access rule definition is satisfied if a user correctly provides correct responses to K of the A prompt/reply pairs (K≦

A≦

N) that said data recovery center randomly selects.

28. The controller of claim 25, wherein said access rule is a compound authorization rule of the form, k≦

n, such that said access rule definition is satisfied if k of the n access rules identified by k of the n access rule indexes are satisfied.

29. The controller of claim 25, wherein said access rule index is an address at which said access rule definition is stored.

30. The controller of claim 25, wherein said secret is an encryption key.

31. An access rule defining system comprising:

means for generating an access rule, said access rule including an authentication test or a compound authorization rule, said access rule defining at least a portion of a procedure for authenticating an identity of an emergency decryptor, wherein emergency decryption comprises decryption using a data recovery field;

means for registering said access rule with said data recovery center;

means for receiving from said data recovery center registration information resulting from registering said access rule with said data recovery center; and

means for storing said registration information in an access rule index file, wherein registration information is included within a data recovery field and allows said data recovery center to locate an access rule that controls access, by an emergency decryptor, to a secret within the data recovery field.

32. The access rule defining system of claim 31, wherein said access rule is an authentication test that verifies a person'"'"'s identity.

33. The access rule defining system of claim 31, wherein said access rule comprises N prompt/reply pairs and is satisfied when said access rule defining system provides correct responses to K of the A prompt/reply pairs (K≦

A≦

N) that said data recovery center randomly selects.

34. The access rule defining system of claim 31, wherein said access rule is of the form, k≦

n, such that said access rule is satisfied if k of the n access rules identified by k of the n access rule indexes are satisfied.

35. The access rule defining system of claim 31, wherein said registration information is an address that references an access rule.