Apparatus and method for establishing a crytographic link between elements of a system

• US 6,456,716 B1
• Filed: 05/02/2000
• Issued: 09/24/2002
• Est. Priority Date: 02/24/1994
• Status: Expired due to Term

• Current Assignee: Comcast Cable Communications LLC (Comcast Corporation)
• Original Assignee: The Merdan Group, Inc.
• Inventors: Arnold, Terry Sutton
• Primary Examiner(s): BARRON JR, GILBERTO
• Application Number:
  US09/563,800
• Time in Patent Office: 875 Days
• Field of Search: 380/277-281, 380/30, 380/44, 380/241, 713/155, 713/156
• US Class Current: 380/277
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

A hierarchical cryptographic system has distributed authority among different classes of units in the system. The system may comprise a trusted authority, a first unit authorized by the trusted authority to distribute public and private signature and encryption keys. A second unit accepts for use one or more of the keys only after performing a verification program using the public signature key of the trusted authority. The invention also comprises a unit of a cryptographic system having a processor and a read only memory. The read only memory has stored therein a verification program which includes a public signature key of a trusted authority, and the verification program is made a permanent part of the read only memory during the formation process of the read only memory prior to the application of electrical power to the read only memory.

Claims

1. A method of establishing access to a communication system between a dispersed plurality of operational units comprising:

producing a personalization station by creating a public signature key and a corresponding private signature key for use by said personalization station, and generating a certificate signed by a trusted authority, said certificate containing said public signature key for use by said personalization station and an authorization statement authorizing said personalization station to personalize operational units of said communication system; and

personalizing operational units of said communication system, wherein said personalizing comprises creating public and private keys for cryptographic communication, and communicating said public and private keys from said personalization station to said operational units of said communication system.