International cryptography framework

• US 5,835,596 A
• Filed: 03/21/1997
• Issued: 11/10/1998
• Est. Priority Date: 03/08/1995
• Status: Expired due to Term

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Company (HP Inc.)
• Inventors: Merckling, Roger, Klemba, Keith S.
• Primary Examiner(s): CAIN, DAVID C
• Application Number:
  US08/821,325
• Time in Patent Office: 599 Days
• Field of Search: 380/25, 380/23, 380/4, 380/52, 235/380
• US Class Current: 713/172
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A cryptographic framework consists of four basic service elements that include a national flag card, a cryptographic unit, a host system, and a network security server. Three of the four service elements have a fundamentally hierarchical relationship. The National Flag Card (NFC) is installed into the Cryptographic Unit (CU) which, in turn, is installed into a Host System (HS). Cryptographic functions on the Host System cannot be executed without a Cryptographic Unit, which itself requires the presence of a valid National Flag Card before it'"'"'s services are available. The fourth service element, a Network Security Server (NSS), can provide a range of different security services including verification of the other three service elements. The framework addresses national policies governing cryptography, where such policies can be independently developed and maintained using a such a framework. Furthermore, the common service elements provide the necessary focus for establishing interoperability while reconciling these different National policies.

Claims

1. An international cryptography framework, comprising:

a national flag card adapted to accommodate at least one defining parameter of any encryption scheme required by a particular national policy without affecting user system hardware, software, or data structures beyond anticipated adaptation.

2. The cryptographic function of claim 1, wherein said cryptographic function implements a key escrow policy where the keys or family keys used for cryptography are kept by a third party.

3. The cryptographic function of claim 1, said national flag card further comprising a key escrowed by a government agency at the time said national flag card is put into circulation.

4. The cryptographic function of claim 1, wherein said escrowed key is used to decrypt a suspicious message.

5. The cryptographic function of claim 1, further comprising:

an electronic stamp placed on a message sent within said framework to determine that the message was encrypted under national policy.

6. The cryptographic function of claim 1, wherein unique identification information provided within a specific national flag card is used to enable said cryptographic unit.

7. The cryptographic function of claim 6, wherein said unique identification information is used to enable a single, specific cryptographic unit.

8. The cryptographic function of claim 1, wherein said national flag card provides a fast technique for updating system security on a regular basis, such that a new usage policy or new encryption algorithm can be implemented before there is enough time to reverse engineer an old method.

9. The cryptographic function of claim 1, wherein a subscriber is provided with a replacement personalized national flag card at regular intervals that allows use of a service only for said interval.

10. The cryptographic function of claim 9, wherein said service may also include an additional national flag card of a promotional value.

11. The cryptographic function of claim 1, wherein said national flag card is produced independently and distributed by national agencies.

12. The cryptographic function of claim 1, wherein said framework comprises a software-only cryptographic unit.

13. The cryptographic function of claim 1, wherein unique or personal data are transferred to said national flag card at a time of purchase.

14. The cryptographic function of claim 1, wherein unique or personal data are transferred to said national flag card at a point of initial validation.

15. A cryptographic function for an international cryptography framework that includes a cryptographic unit, said cryptographic function comprising:

a national flag card for accommodating at least one defining parameter of a cryptographic scheme as required by a particular national policy without affecting user system hardware, software, or data structures beyond anticipated adaptation.

16. The cryptographic function of claim 15, wherein unique or personal data are transferred to said national flag card at a time of purchase.

17. The cryptographic function of claim 15, wherein unique or personal data are transferred to said national flag card at a point of initial validation.

18. The cryptographic function of claim 15, wherein said national flag card provides a fast technique for updating system security on a regular basis, such that a new usage policy or new encryption algorithm can be implemented before there is enough time to reverse engineer an old method.

19. The cryptographic function of claim 15, wherein unique identification information provided within a specific national flag card is used to enable said cryptographic unit.

20. The cryptographic function of claim 19, wherein said unique identification information is used to enable a single, specific cryptographic unit.