System and method for data recovery

• US 5,991,406 A
• Filed: 04/20/1998
• Issued: 11/23/1999
• Est. Priority Date: 08/11/1994
• Status: Expired due to Term

• Current Assignee: McAfee, Inc. (McAfee, LLC)
• Original Assignee: Network Associates, Inc.
• Inventors: Ellison, Carl M., Walker, Stephen T., Lipner, Steven B., Balenson, David M.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US09/062,748
• Time in Patent Office: 582 Days
• Field of Search: 380/21, 380/25, 380/30
• US Class Current: 380/286
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system and method for data escrow cryptography are described. An encrypting user encrypts a message using a secret storage key (KS) and attaches a data recovery field (DRF), including an access rule index (ARI) and KS, to the encrypted message. The DRF and the encrypted message are stored in a storage device. To recover KS, a decrypting user extracts and sends the DRF to a data recovery center (DRC) that issues a challenge based on access rules (ARs) originally defined by the encrypting user. If the decrypting user meets the challenge, the DRC sends KS in a message to the decrypting user. Generally, KS need not be an encryption key but could represent any piece of confidential information that can fit inside the DRF. In all cases, the DRC limits access to decrypting users who can meet the challenge defined in either the ARs defined by the encrypting user or the ARs defined for override access.

Claims

1. A system for controlling access by an emergency decrypting system to a user secret, the system comprising:

first means for retrieving at least part of a user secret;

second means for retrieving at least one access rule index, said at least one access rule index identifying an access rule, stored in a corresponding data recovery center that controls access by an emergency decrypting system to said at least part of said user secret, wherein an access rule includes an authentication test or a compound authorization rule; and

means for generating a data recovery field using said at least part of said user secret, said at least one access rule index and a data recovery center public key, wherein emergency decryption comprises decryption using a data recovery field.

2. The system of claim 1, wherein said means for generating generates a data recovery field that includes an encryption of a concatenation of said user secret and said access rule index using said data recovery center public key.

3. The system of claim 2, wherein said means for generating generates a data recovery field that includes a concatenation of said encryption and a key identifier, wherein said key identifier comprises a data recovery center identifier and a data recovery center public key number.

4. The system of claim 1, wherein said first means generates a plurality of parts of said user secret,

wherein said second means retrieves a plurality of access rule indexes, each of said plurality of access rule indexes identifying one or more access rules, stored in a corresponding one of a plurality of data recovery centers, that control access by an emergency decrypting system to said plurality of parts of said user secret;

and

wherein said means for generating generates a plurality of data recovery fields using said plurality of parts of said user secret, said plurality of access rule indexes, and a plurality of data recovery center public keys corresponding to said plurality of data recovery centers.

5. The system of claim 4, wherein said means for generating generates a plurality of data recovery fields, each data recovery field including an encryption of a concatenation of a part of said user secret and an access rule index using a data recovery center public key.

6. The system of claim 5, wherein said means for generating generates a plurality of data recovery fields, each data recovery field in said plurality of data recovery fields including a concatenation of an encryption of a part of said user secret and an access rule index using a data recovery center public key, and a key identifier, wherein said key identifier comprises a data recovery center identifier and a data recovery center public key number.

7. The system of claim 1, further comprising:

means for generating a data recovery field verification string, said data recovery field verification string including information that enables an entity to authenticate said data recovery field.

8. The system of claim 1, wherein said access rule index references an authentication test that verifies a user'"'"'s identity.

9. The system of claim 1, wherein said authentication test includes one of a shared secret, cryptographic authentication protocols, third party endorsements, and biometric tests.

10. The system of claim 1, wherein said access rule index references an access rule that comprises N prompt/reply pairs, wherein the numbers A and K (K≦

A≦

N) are specified such that said access rule is satisfied if an entity correctly responds to K of the A prompt/reply pairs that said data recovery center randomly selects.

11. The system of claim 1, wherein said access rule index references an access rule of the form [n, k, ARI1, ARI2, . . . , ARIn], k≦

n, such that said access rule is satisfied if k of the n access rule indexes are satisfied.

12. The system of claim 1, wherein said at least one access rule index is an address that references an access rule.

13. The system of claim 6, wherein said user secret is an encryption key.

14. The system of claim 13, further comprising:

means for attaching said data recovery field to a message encrypted with said encryption key.

15. A method for controlling access by an emergency decrypting system to a user secret, the method comprising the steps of:

(1) retrieving at least part of a user secret;

(2) retrieving at least one access rule index, said at least one access rule index identifying an access rule, stored in a corresponding data recovery center that controls access by an emergency decrypting system to said at least part of said user secret, wherein an access rule includes an authentication test or a compound authorization rule; and

(3) generating a data recovery field using said at least part of said user secret, said at least one access rule index and a data recovery center public key, wherein emergency decryption comprises decryption using a data recovery field.

16. The method of claim 15, wherein step (3) comprises the step of generating a data recovery field that includes an encryption of a concatenation of said user secret and said access rule index using said data recovery center public key.

17. The method of claim 16, wherein step (3) comprises the step of generating a data recovery field that includes a concatenation of said encryption and a key identifier, wherein said key identifier comprises a data recovery center identifier and a data recovery center public key number.

18. The method of claim 15, wherein step (1) comprises the step of generating a plurality of parts of said user secret,

wherein step (2) comprises the step of retrieving a plurality of access rule indexes, each of said plurality of access rule indexes identifying one or more access rules, stored in a corresponding one of a plurality of data recovery centers, that control access by an emergency decrypting system to said plurality of parts of said user secret;

and

wherein step (3) comprises the step of generating a plurality of data recovery fields using said plurality of parts of said user secret, said plurality of access rule indexes, and a plurality of data recovery center public keys corresponding to said plurality of data recovery centers.

19. The method of claim 18, wherein step (3) comprises the step of generating a plurality of data recovery fields, each data recovery field including an encryption of a concatenation of a part of said user secret and an access rule index using a data recovery center public key.

20. The method of claim 19, wherein step (3) comprises the step of generating a plurality of data recovery fields, each data recovery field in said plurality of data recovery fields including a concatenation of an encryption of a part of said user secret and an access rule index using a data recovery center public key, and a key identifier, wherein said key identifier comprises a data recovery center identifier and a data recovery center public key number.

21. The method of claim 15, further comprising the step of:

generating a data recovery field verification string, said data recovery field verification string including information that enables an entity to authenticate said data recovery field.

22. The method of claim 19, wherein step (2) comprises the step of retrieving at least one access rule index, said at least one access rule index identifying an access rule, stored in a corresponding data recovery center, that controls access by an emergency decrypting system to said at least part of said user secret, wherein said access rule index references an authentication test that verifies a user'"'"'s identity.

23. The method of claim 18, wherein step (2) comprises the step of retrieving at least one access rule index, said at least one access rule index identifying an access rule, stored in a corresponding data recovery center, that controls access by an emergency decrypting system to said at least part of said user secret, wherein said access rule index references an authentication test that includes one of a shared secret, cryptographic authentication protocols, third party endorsements, and biometric tests.

24. The method of claim 19, wherein step (2) comprises the step of retrieving at least one access rule index, said at least one access rule index identifying an access rule, stored in a corresponding data recovery center, that controls access by an emergency decrypting system to said at least part of said user secret, wherein said access rule index references an access rule that comprises N prompt/reply pairs, wherein an access rule defining system specifies the numbers A and K (K≦

A≦

N) such that said access rule is satisfied if an entity correctly responds to K of the A prompt/reply pairs that said data recovery center randomly selects.

25. The method of claim 19, wherein step (2) comprises the step of retrieving at least one access rule index, said at least one access rule index identifying an access rule, stored in a corresponding data recovery center, that controls access by an emergency decrypting system to said at least part of said user secret, wherein said access rule index references an access rule of the form [n, k, ARI1, ARI2, . . . , ARIn], k≦

n, such that said access rule is satisfied if k of the n access rule indexes are satisfied.

26. The method of claim 19, wherein step (2) comprises the step of retrieving at least one access rule index, said at least one access rule index identifying an access rule, stored in a corresponding data recovery center, that controls access by an emergency decrypting system to said at least part of said user secret, wherein said at least one access rule index is an address that references an access rule.

27. The method of claim 19, wherein step (1) comprises the step of retrieving at least part of an encryption key.

28. The method of claim 27, further comprising the step of attaching said data recovery field to a message encrypted with said encryption key.

29. A computer program product, comprising:

a computer usable medium having computer readable program code means embodied in said medium for implementing a method of controlling access by an emergency decrypting system to a user secret, said computer readable program code means comprising

computer readable first program code means for enabling a computer to effect a retrieval of at least part of a user secret;

computer readable second program code means for enabling a computer to effect a retrieval of at least one access rule index, said at least one access rule index identifying an access rule, stored in a corresponding data recovery center that controls access by an emergency decrypting system to said at least part of said user secret, wherein an access rule includes an authentication test or a compound authorization rule; and

computer readable third program code means for enabling a computer to effect a generation of a data recovery field using said at least part of said user secret, said at least one access rule index and a data recovery center public key, wherein emergency decryption comprises decryption using a data recovery field.

30. The computer program product of claim 29, wherein said computer readable third program code means enables a computer to effect a generation of a data recovery field, said data recovery field including an encryption of a concatenation of said user secret and said access rule index using said data recovery center public key.

31. The computer program product of claim 30, wherein said computer readable third program code means enables a computer to effect a generation of a data recovery field, said data recovery field including a concatenation of said encryption and a key identifier, wherein said key identifier comprises a data recovery center identifier and a data recovery center public key number.

32. The computer program product of claim 29, wherein said computer readable first program code means enables a computer to effect a creation of a plurality of parts of said user secret,

wherein said computer readable second program code means enables a computer to effect a retrieval of a plurality of access rule indexes, said plurality of access rule indexes identifying a plurality of access rules, stored in a corresponding plurality of data recovery centers, that control access by an emergency decrypting system to said plurality of parts of said user secret;

and

wherein said computer readable third program code means enables a computer to effect a generation of a plurality of data recovery fields using said plurality of parts of said user secret, said plurality of access rule indexes, and a plurality of data recovery center public keys corresponding to said plurality of data recovery centers.

33. The computer program product of claim 32, wherein said computer readable third program code means enables a computer to effect a generation of a plurality of data recovery fields, each data recovery field in said plurality of data recovery fields including an encryption of a concatenation of a part of said user secret and an access rule index using a data recovery center public key.

34. The computer program product of claim 33, wherein said computer readable third program code means enables a computer to effect a generation of a plurality of data recovery fields, each data recovery field in said plurality of data recovery fields including a concatenation of (1) an encryption of a part of said user secret and an access rule index using a data recovery center public key, and (2) a key identifier, wherein said key identifier comprises a data recovery center identifier and a data recovery center public key number.

35. The computer program product of claim 29, further comprising:

computer readable program code means that enables a computer to effect a generation of a data recovery field verification string, said data recovery field verification string including information that enables an entity to authenticate said data recover field.

36. The computer program product of claim 29, wherein said access rule index references an authentication test that verifies a user'"'"'s identity.

37. The computer program product of claim 29, wherein said authentication test includes one of a shared secret, cryptographic authentication protocols, third party endorsements, and biometric tests.

38. The computer program product of claim 29, wherein said access rule index references an access rule that comprises N prompt/reply pairs, wherein the numbers A and K (K≦

A≦

N) are specified such that said access rule is satisfied if an entity correctly responds to K of the A prompt/reply pairs that said data recovery center randomly selects.

39. The computer program product of claim 29, wherein said access rule index references an access rule of the form [n, k, ARI1, ARI2, . . . , ARIn], k≦

n, such th at said access rule is satisfied if k of the n access rule indexes are satisfied.

40. The computer program product of claim 29, wherein said at least one access rule index is an address that references an access rule.

41. The computer program product of claim 29, wherein said user secret is an encryption key.

42. The computer program product of claim 41, further comprising:

computer readable program code means that enables a computer to effect an attachment of said data recovery field to a message encrypted with said encryption key.