System and method for synchronizing one time pad encryption keys for secure communication and access control

• US 6,445,794 B1
• Filed: 06/24/1998
• Issued: 09/03/2002
• Est. Priority Date: 06/24/1998
• Status: Expired due to Term

• Current Assignee: Benyamin Ron
• Original Assignee: Benyamin Ron, Worcop Investment Limited
• Inventors: Shefi, Adam
• Primary Examiner(s): Hayes, Gail
• Assistant Examiner(s): DI LORENZO, ANTHONY
• Application Number:
  US09/104,014
• Time in Patent Office: 1,532 Days
• Field of Search: 380/262, 380/277, 380/278, 380/268, 705/44
• US Class Current: 380/46
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner

Abstract

A method for generating an identical electronic one-time pad at a first location and a second location, the method comprising the steps of: (a) providing a first electronic device at the first location and a second electronic device at the second location, each of the first and the second electronic devices having: (i) a non-volatile memory; (ii) a processor; (iii) at least one table of true random numbers being stored on the non-volatile memory, the table being identical for the first and the second electronic devices; and (iv) at least one software program for obtaining a true random number from the table, the software program being stored on the non-volatile memory and the at least one software program being operated by the processor; (b) providing a communication channel for communication between the first electronic device and the second electronic device; (c) selecting a selected true random number from the table at the first and the second electronic devices according to a selection procedure, the selection procedure being identical for the first and the second electronic devices, the selection procedure including exchanging at least a portion of a key between the first and the second electronic devices over the communication channel, such that the selected true random number is identical for the first and the second electronic devices; and (d) forming at least a portion of the identical electronic one-time pad at the first and the second locations with the selected true random number.

Claims

1. A method for generating an identical electronic one-time pad at a first location and at a second location, the method comprising the steps of:

(a) providing a first electronic device at the first location and a second electronic device at the second location, each of said first and said second electronic devices having;

(i) a non-volatile memory;

(ii) a processor;

(iii) at least one table of true random numbers being stored on said non-volatile memory said table being identical for said first and said second electronic devices; and

(iv) at least one software program for obtaining a true random number from said table, said software program being stored on said non-volatile memory and said at least one software program being operated by said processor;

(b) providing a communication channel for communication between said first electronic device and said second electronic device;

(c) selecting a selected true random number from said table at said first and said second electronic devices according to a selection procedure, said selection procedure being identical for said first and said second electronic devices, said selection procedure including exchanging at least a portion of a key between said first and said second electronic devices over said communication channel, such that said selected true random number is identical for said first and said second electronic devices;

(d) forming at least a portion of the identical electronic one-time pad at the first and the second locations with said selected true random number; and

(e) repeating steps (c) and (d) at least once until the identical electronic one-time pad is formed at the first and the second locations, the identical electronic one-time pad being of a desired length, such that steps (c) and (d) are repeated until said desired length is reached.

2. The method of claim 1, wherein the step of selecting said selected true random number from said table includes the steps of:

(i) generating a first true random number at said first electronic device and a second true random number at said second electronic device; and

(ii) sending said first true random number to said second electronic device and said second true random number to said first electronic device through said channel, said first and said second true random numbers forming said at least a portion of said key.

3. The method of claim 2, further comprising the step of:

(iii) obtaining an obtained true random number from said table with a pointer, said pointer being substantially identical to said key, such that said selected true random number is selected according to said obtained true random number.

4. The method of claim 3, wherein said selected true random number is said obtained true random number.

5. The method of claim 2, further comprising the step of:

(ii-a) merging said first and said second true random numbers to form said at least a portion of said key.

6. The method of claim 2, wherein at least one of said first and said second electronic devices includes a source of physical random phenomena, such that at least one of said first and said second true random numbers is generated from said source of physical random phenomena.

7. The method of claim 6, wherein said source of physical random phenomena is selected from the group consisting of a source of acoustic noise and a source of thermal noise.

8. The method of claim 2, wherein at least one of said first and said second electronic devices features a pseudorandom number generator being operated by said processor according to at least one software program being stored in said non-volatile memory, said pseudorandom number generator being operated substantially continuously for an undefined period of time, the step of generating at least one of said first and said second true random numbers including the step of outputting an output number from said pseudorandom number generator.

9. The method of claim 1, further comprising the steps of:

(d) encrypting a message by said first electronic device according to the one-time pad to form an encrypted message by merging at least a portion of said message with said selected true random number from the one-time pad according to a merging function; and

(e) sending said encrypted message to said second electronic device through said communication channel.

10. The method of claim 9, further comprising the steps of:

(f) receiving said encrypted message by said second electronic device; and

(g) decrypting said encrypted message by performing the inverse function on said encrypted message to obtain said at least a portion of said message.

11. The method of claim 10, wherein said message is divisible into a plurality of bytes, and said at least a portion of said message is one of said plurality of bytes.

12. The method of claim 11, wherein said merging function includes the step of performing XOR operation with said selected true random number and said byte of said message.

13. The method of claim 1, further comprising the steps of:

(d) encrypting an identifier by said first electronic device according to the one-time pad to form an encrypted identifier by merging said identifier with said selected true random number from the one-time pad according to a merging function;

(e) sending said encrypted identifier to said second electronic device;

(f) receiving said encrypted identifier by said second electronic device;

(g) decrypting said encrypted identifier by performing a reverse-function on said encrypted identifier to obtain said identifier, said reverse-function being a reverse of said merging function; and

(h) determining access to an access-controlled module according to said identifier by said second electronic device.

14. The method of claim 13, wherein said merging function includes the step of performing XOR operation with said selected true random number and said identifier.

15. The method of claim 13, wherein said access-controlled module is selected from the group consisting of a physical space, an electronic device, and data.

16. The method of claim 15, wherein said physical space is selected from the group consisting of a room, a safe, an automobile, a building and a secure installation.

17. The method of claim 15, wherein said electronic device is selected from the group consisting of a computer, an automatic money machine, a television, a cellular phone and a regular phone.

18. The method of claim 15, wherein said data is selected from the group consisting of information related to a bank account, electronic mail (e-mail) and voice mail.

24. The method of claim 1, wherein said desired length is determined according to communication between the first and the second locations.

19. A method for secure transmission of a message, the method comprising the steps of:

(a) providing a first electronic device at the first location and a second electronic device at the second location, each of said first and said second electronic devices having;

(i) a non-volatile memory;

(ii) a processor;

(iii) at least one table of true random numbers being stored on said non-volatile memory, said table being identical for said first and said second electronic devices; and

(iv) at least one software program for obtaining a true random number from said table, said software program being stored on said non-volatile memory and said at least one software program being operated by said processor;

(b) providing a communication channel for communication between said first electronic device and said second electronic device;

(c) selecting a selected true random number from said table at said first and said second electronic devices according to a selection procedure, said selection procedure being identical for said first and said second electronic devices, said selection procedure including exchanging at least a portion of a key between said first and said second electronic devices over said communication channel, such that said selected true random number is identical for said first and said second electronic devices;

(d) encrypting the message by said first electronic device by merging at least a portion of said message with said selected true random number according to a merging function to form an encrypted message;

(e) repeating steps (c) and (d) at least once until the identical electronic one-time pad is formed at the first and the second locations, the identical electronic one-time pad being of a desired length, such that steps (c) and (d) are repeated until said desired length is reached; and

(f) sending said encrypted message to said second electronic device over said communication channel.

20. The method of claim 19, wherein the message is divisible into a plurality of bytes, and said at least a portion of the message is one of said plurality of bytes.

21. The method of claim 20, wherein said merging function includes the step of performing an XOR operation with said selected true random number and said byte of the message.

25. The method of claim 19, wherein said desired length is determined according to communication between said first and said second electronic devices.

22. A method for generating an identical electronic one-time pad at a first location and at a second location, the method comprising the steps of:

(a) providing a first electronic device at the first location and a second electronic device at the second location, each of said first and said second electronic devices having;

(i) a non-volatile memory;

(ii) a processor;

(iii) at least one table of true random numbers being stored on said non-volatile memory, said table being identical for said first and said second electronic devices; and

(iv) at least one software program for obtaining a true random number from said table, said software program being stored on said non-volatile memory and said at least one software program being operated by said processor;

(b) providing a communication channel for communication between said first electronic device and said second electronic device;

(c) selecting a selected true random number from said table at said first and said second electronic devices according to a selection procedure, said selection procedure being identical for said first and said second electronic devices, said selection procedure including exchanging at least a portion of a key between said first and said second electronic devices over said communication channel, such that said selected true random number is identical for said first and said second electronic devices, further comprising the steps of;

(i) generating a first true random number at said first electronic device and a second true random number at said second electronic device, wherein at least one of said first and said second electronic devices includes a source of physical random phenomena, such that at least one of said first and said second true random numbers is generated from said source of physical random phenomena; and

(ii) sending said first true random number to said second electronic device and said second true random number to said first electronic device through said channel, said first and said second true random numbers forming at least a portion of said key; and

(d) forming at least a portion of the identical electronic one-time pad at the first and the second locations with said selected true random number; and

(e) repeating steps (c) and (d) at least once until the identical electronic one-time pad is formed at the first and the second locations, the identical electronic one-time pad being of a desired length, such that steps (c) and (d) are repeated until said desired length is reached.

23. A method for generating an identical electronic one-time pad at a first location and at a second location, the method comprising the steps of:

(a) providing a first electronic device at the first location and a second electronic device at the second location, each of said first and said second electronic devices having;

(i) a non-volatile memory;

(ii) a processor;

(iii) at least one table of true random numbers being stored on said non-volatile memory, said table being identical for said first and said second electronic devices; and

(iv) at least one software program for obtaining a true random number from said table, said software program being stored on said non-volatile memory and said at least one software program being operated by said processor;

(b) providing a communication channel for communication between said first electronic device and said second electronic device;

(c) selecting a selected true random number from said table at said first and said second electronic devices according to a selection procedure, said selection procedure being identical for said first and said second electronic devices, said selection procedure including exchanging at least a portion of a key between said first and said second electronic devices over said communication channel, such that said selected true random number is identical for said first and said second electronic devices, further comprising the steps of;

(i) generating a first true random number at said first electronic device and a second true random number at said second electronic device, wherein at least one of said first and said second electronic devices features a pseudorandom number generator being operated by said processor according to at least one software program being stored in said non-volatile memory, said pseudorandom number generator being operated substantially continuously for an undefined period of time, such that the step of generating at least one of said first and said second true random numbers includes the step of outputting an output number from said pseudorandom number generator; and

(ii) sending said first true random number to said second electronic device and said second true random number to said first electronic device through said channel, said first and said second true random numbers forming at least a portion of said key; and

(d) forming at least a portion of the identical electronic one-time pad at the first and the second locations with said selected true random number; and

(e) repeating steps (c) and (d) at least once until the identical electronic one-time pad is formed at the first and the second locations, the identical electronic one-time pad being of a desired length, such that steps (c) and (d) are repeated until said desired length is reached.