Method of setting up secure communications and associated encryption/decryption system

• US 5,956,406 A
• Filed: 03/20/1997
• Issued: 09/21/1999
• Est. Priority Date: 03/21/1996
• Status: Expired due to Term

• Current Assignee: Alcatel SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent USA, Inc. (Nokia Corporation)
• Inventors: Maldy, Jacques
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/821,072
• Time in Patent Office: 915 Days
• Field of Search: 380/30, 380/21
• US Class Current: 380/30
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

A method of establishing secure communication between users by means of a public key encryption/decryption system comprises the following steps: a center generates a pair of keys comprising a secret key and a public key, the center'"'"'s public key is supplied to a user, this user generates a pair of keys specific to this user comprising a secret key and a public key but the public key of this user is encrypted with the center'"'"'s public key, this user transmits to the center their own public key encrypted with the public key of the center, and the center decrypts the public key of this user and if this user is approved by the center, the center retransmits to this user the public key of this user encrypted with itself. This method provides centralized control of users'"'"' public keys.

Claims

1. A method of establishing secure communication between users by means of a public key encryption/decryption system comprising the following steps:

a center generates a pair of keys comprising a secret key and a public key,

said public key of said center is supplied to a user,

said user generates a pair of keys specific to said user comprising a secret key and a public key but said public key of said user is encrypted with said public key of said center,

said user transmits to said center said public key specific to said user encrypted with said public key of said center, and

said center decrypts said public key of said user and if said user is approved by said center, said center retransmits to said user said public key of said user encrypted with itself.

2. A method as claimed in claim 1 comprising the further step of said center transmitting to each approved user a list of public keys encrypted with said public key of the corresponding user.

3. A method as claimed in claim 1 further including the step of said center transmitting to a particular approved user a list of public keys encrypted with said public key of that particular user and said particular user transmitting to another user said list of public keys encrypted with said public key of that other user.

4. A method as claimed in claim 1 wherein said user transmits to said center the secret key specific to said user encrypted with said public key of said center.

5. A public key encryption/decryption system for implementing the method as claimed in claim 1, comprising equipment for generating a pair of keys comprising a secret key and a public key, said equipment being designed so that said public key generated is automatically encrypted with another key supplied with said equipment.

6. The system claimed in claim 5 wherein said equipment is designed to accept as input only public keys encrypted with the public key that it has generated.

7. The system claimed in claim 6 wherein said equipment is designed to hold in memory each public key encrypted with the public key that it has generated.

8. The system claimed in claim 5 wherein said other key is said public key of a center.