Method for associating a password with a secured public/private key pair

• US 6,718,468 B1
• Filed: 11/12/1999
• Issued: 04/06/2004
• Est. Priority Date: 11/12/1999
• Status: Expired due to Term

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Challener, David Carroll, Ward, James Peter, Dayan, Richard Alan, Vanover, Michael
• Primary Examiner(s): Barron, Gilberto
• Assistant Examiner(s): Zand, Kambiz
• Application Number:
  US09/439,236
• Time in Patent Office: 1,607 Days
• Field of Search: 713/184, 713/202, 713/182, 713/183
• US Class Current: 713/184
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A method for associating a password with a secured public/private key pair is disclosed. A user public/private key pair is first established for a user. The user public/private key pair includes a user public key and a user private key. Then, the user public/private key pair is encrypted along with a random password, utilizing a chip public key. Next, a first password is generated by hashing a pass phrase. Finally, the random password is encrypted along with the first password, also utilizing the chip public key. As a result, a user can assess the user private key to perform an authentication function by providing the pass phrase.

Claims

1. A method for associating a password with a secured user public/private key pair within a computer system, said method comprising:

establishing a user public/private key pair for a user, wherein said user public/private key pair includes a user public key and a user private key;

encrypting said user private key along with a random password;

generating a first password by hashing a first pass phrase;

encrypting said random password along with said first password; and

utilizing said first pass phrase to access said user private key for performing an authentication function;

generating a second password by hashing a second pass phrase;

encrypting said random password along with said second password; and

providing said second pass phrase to access said user private key for performing an authentication function.

2. The method according to claim 1, wherein encrypting said user private key along with said random password is performed utilizing a chip public key.

3. The method according to claim 1, wherein encrypting said random password along with said first pass phrase is performed utilizing a chip public key.

4. The method according to claim 1, wherein encrypting said user private key along with a random password further includes encrypting said user private key and said random password along with said user public key.

5. The method according to claim 1, wherein encrypting said random password along with said second pass phrase is performed utilizing a chip public key.

6. A computer system having a password associated with a secured user public/private key pair, said computer system comprising:

means for establishing a user public/private key pair for a user, wherein said user public/private key pair includes a user public key and a user private key;

means for encrypting said user private key along with a random password;

means for generating a first password by hashing a first pass phrase;

means for encrypting said random password along with said first password; and

means for utilizing said first pass phrase to access said user private key for performing an authentication function;

means for generating a second password by hashing a second pass phrase;

means for encryption said random password along with said second password; and

means for providing said second pass phrase to access said user private key for performing an authentication function.

7. The computer system according to claim 6, wherein means for encrypting said user private key performs an encryption utilizing a chip public key.

8. The computer system according to claim 6, wherein means for encrypting said random password performs an encryption utilizing a chip public key.

9. The computer system according to claim 6, wherein means for encrypting said user private key along with a random password further includes a means for encrypting said user private key and said random password along with said user public key.

10. The computer system according to claim 6, wherein means for encrypting said random password along with said second pass phrase is performed utilizing a chip public key.

11. A computer program product for associating a password with a secured user public/private key pair within a computer system, said computer program product comprising:

program code means for establishing a user public/private key pair for a user, wherein said user public/private key pair includes a user public key and a user private key;

program code means for encrypting said user private key along with a random password;

program code means for generating a first password by hashing a first pass phrase;

program code means for encrypting said random password along with said first password; and

program code means for utilizing said first pass phrase to access said user private key for performing an authentication function;

program code means for generating a second password by hashing a second pass phrase;

program code means for encrypting said random password along with said second password; and

program code means for providing said second pass phrase to access said user private key for performing an authentication function.

12. The computer program product according to claim 11, wherein program code means for encrypting said user private key performs an encryption utilizing a chip public key.

13. The computer program product according to claim 11, wherein program code means for encrypting said random password performs an encryption utilizing a chip public key.

14. The computer program product according to claim 11, wherein said program code means for encrypting said user private key along with a random password further includes encrypting said user private key and said random password along with said user public key.

15. The computer program product according to claim 11, wherein said program code means for encrypting said random password along with said second pass phrase performs an encryption utilizing a chip public key.