Cryptographic key split combiner

• US 6,549,623 B1
• Filed: 02/04/2002
• Issued: 04/15/2003
• Est. Priority Date: 02/13/1997
• Status: Expired due to Term

• Current Assignee: TecSec, Incorporated
• Original Assignee: TecSec, Incorporated
• Inventors: Wack, C. Jay, Scheidt, Edward M.
• Primary Examiner(s): Darrow, Justin T.
• Application Number:
  US09/917,802
• Time in Patent Office: 435 Days
• Field of Search: 380/44, 380/46, 380/47, 380/262, 380/264, 380/268, 380/280, 713/162, 713/185, 713/186, 708/250, 708/254, 708/255
• US Class Current: 380/44
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]

Abstract

A cryptographic key split combiner, which includes a number of key split generators for generating cryptographic key splits and a key split randomizer for randomizing the cryptographic key splits to produce a cryptographic key, and a process for forming cryptographic keys. Each of the key split generators generates key splits from seed data. The key split generators may include a random split generator for generating a random key split based on reference data. Other key split generators may include a token split generator for generating a token key split based on label data, a console split generator for generating a console key split based on maintenance data, and a biometric split generator for generating a biometric key split based on biometric data. All splits may further be based on static data, which may be updated, for example by modifying a prime number divisor of the static data. The label data may be read from a storage medium, and may include user authorization data. The resulting cryptographic key may be, for example, a stream of symbols, at least one symbol block, or a key matrix.

Claims

1. A cryptographic key split combiner, comprising:

a plurality of key split generators for generating cryptographic key splits; and

a key split randomizer for randomizing the cryptographic key splits to produce a cryptographic key;

wherein each of said key split generators includes means for generating key splits from seed data; and

wherein said plurality of key split generators includes a biometric split generator for generating a biometric key split based on biometric data.

2. The cryptographic key split combiner of claim 1, wherein said plurality of key split generators includes a random split generator for generating a random key split based on reference data.

3. The cryptographic key split combiner of claim 2, wherein said random split generator includes means for generating a random sequence based on the reference data.

4. The cryptographic key split combiner of claim 2, wherein said random split generator includes means for generating a pseudorandom sequence based on the reference data.

5. The cryptographic key split combiner of claim 2, wherein said random split generator includes means for generating a key split based on the reference data and on chronological data.

6. The cryptographic key split combiner of claim 2, wherein said random split generator includes means for generating a key split based on the reference data and on static data.

7. The cryptographic key split combiner of claim 6, further including means for updating the static data.

8. The cryptographic key split combiner of claim 7, wherein the means for updating the static data includes means for modifying a prime number divisor of the static data.

9. The cryptographic key split combiner of claim 1, wherein said plurality of key split generators includes a token split generator for generating a token key split based on label data.

10. The cryptographic key split combiner of claim 9, further comprising means for reading the label data from a storage medium.

11. The cryptographic key split combiner of claim 9, wherein the label data includes user authorization data.

12. The cryptographic key split combiner of claim 9, wherein said token split generator includes means for generating a random sequence based on the label data.

13. The cryptographic key split combiner of claim 9, wherein said token split generator includes means for generating a pseudorandom sequence based on the label data.

14. The cryptographic key split combiner of claim 9, wherein said token split generator includes means for generating a key split based on the label data and on organization data.

15. The cryptographic key split combiner of claim 9, wherein said token split generator includes means for generating a key split based on the label data and on static data.

16. The cryptographic key split combiner of claim 15, further including means for updating the static data.

17. The cryptographic key split combiner of claim 16, wherein the means for updating the static data includes means for modifying a prime number divisor of the static data.

18. The cryptographic key split combiner of claim 1, wherein said plurality of key split generators includes a console split generator for generating a console key split based on maintenance data.

19. The cryptographic key split combiner of claim 18, wherein said console split generator includes means for generating a random sequence based on the maintenance data.

20. The cryptographic key split combiner of claim 18, wherein said console split generator includes means for generating a pseudorandom sequence based on the maintenance data.

21. The cryptographic key split combiner of claim 18, wherein said console split generator includes means for generating a key split based on previous maintenance data and on current maintenance data.

22. The cryptographic key split combiner of claim 18, wherein said console split generator includes means for generating a key split based on the maintenance data and on static data.

23. The cryptographic key split combiner of claim 22, further including means for updating the static data.

24. The cryptographic key split combiner of claim 23, wherein the means for updating the static data includes means for modifying a prime number divisor of the static data.

25. The cryptographic key split combiner of claim 1, wherein said biometric split generator includes means for generating a random sequence based on the biometric data.

26. The cryptographic key split combiner of claim 1, wherein said biometric split generator includes means for generating a pseudorandom sequence based on the biometric data.

27. The cryptographic key split combiner of claim 1, wherein said biometric split generator includes means for generating a key split based on biometric data vectors and on biometric combiner data.

28. The cryptographic key split combiner of claim 1, wherein said biometric split generator includes means for generating a key split based on the biometric data and on static data.

29. The cryptographic key split combiner of claim 28, further including means for updating the static data.

30. The cryptographic key split combiner of claim 29, wherein the means for updating the static data includes means for modifying a prime number divisor of the static data.

31. The cryptographic key split combiner of claim 1, wherein the cryptographic key is a stream of symbols.

32. The cryptographic key split combiner of claim 1, wherein the cryptographic key is at least one symbol block.

33. The cryptographic key split combiner of claim 1, wherein the cryptographic key is a key matrix.

34. A process for forming cryptographic keys, comprising:

generating a plurality of cryptographic key splits from seed data; and

randomizing the cryptographic key splits to produce a cryptographic key;

wherein generating a plurality of cryptographic key splits includes generating a biometric key split based on biometric data.

35. The process of claim 34, wherein generating a plurality of cryptographic key splits includes generating a random key split based on reference data.

36. The process of claim 35, wherein generating a random key split includes generating a random sequence based on the reference data.

37. The process of claim 35, wherein generating a random key split includes generating a pseudorandom sequence based on the reference data.

38. The process of claim 35, wherein generating a random key split includes generating a key split based on the reference data and on chronological data.

39. The process of claim 35, wherein generating a random key split includes generating a key split based on the reference data and on static data.

40. The process of claim 39, further including updating the static data.

41. The process of claim 40, wherein updating the static data includes modifying a prime number divisor of the static data.

42. The process of claim 34, wherein generating a plurality of cryptographic key splits includes generating a token key split based on label data.

43. The process of claim 42, further comprising reading the label data from a storage medium.

44. The process of claim 42, wherein the label data includes user authorization data.

45. The process of claim 42, wherein generating a token key split includes generating a random sequence based on the label data.

46. The process of claim 42, wherein generating a token key split includes generating a pseudorandom sequence based on the label data.

47. The process of claim 42, wherein generating a token key split includes generating a key split based on the label data and on organization data.

48. The process of claim 42, wherein generating a token key split includes generating a key split based on the label data and on static data.

49. The process of claim 48, further including updating the static data.

50. The process of claim 49, wherein updating the static data includes modifying a prime number divisor of the static data.

51. The process of claim 34, wherein generating a plurality of cryptographic key splits includes generating a console key split based on maintenance data.

52. The process of claim 51, wherein generating a console key split includes generating a random sequence based on the maintenance data.

53. The process of claim 51, wherein generating a console key split includes generating a pseudorandom sequence based on the maintenance data.

54. The process of claim 51, wherein generating a console key split includes generating a key split based on previous maintenance data and on current maintenance data.

55. The process of claim 51, wherein generating a console key split includes generating a key split based on the maintenance data and on static data.

56. The process of claim 55, further including updating the static data.

57. The process of claim 56, wherein the updating the static data includes modifying a prime number divisor of the static data.

58. The process of claim 34, wherein generating a biometric key split includes generating a random sequence based on the biometric data.

59. The process of claim 34, wherein generating a biometric key split includes generating a pseudorandom sequence based on the biometric data.

60. The process of claim 34, wherein generating a biometric key split includes generating a key split based on biometric data vectors and on biometric combiner data.

61. The process of claim 34, wherein generating a biometric key split includes generating a key split based on the biometric data and on static data.

62. The process of claim 61, further including updating the static data.

63. The process of claim 62, wherein updating the static data includes modifying a prime number divisor of the static data.

64. A cryptographic key, formed by the process of claim 34.

65. The cryptographic key of claim 64, including a stream of symbols.

66. The cryptographic key of claim 64, including at least one symbol block.

67. The cryptographic key of claim 64, including a key matrix.