Cryptographic key split combiner

• US 6,885,747 B1
• Filed: 02/13/1998
• Issued: 04/26/2005
• Est. Priority Date: 02/13/1997
• Status: Expired due to Term

• Current Assignee: TecSec, Incorporated
• Original Assignee: TecSec, Incorporated
• Inventors: Wack, C. Jay, Scheidt, Edward M.
• Primary Examiner(s): Darrow, Justin T.
• Application Number:
  US09/023,672
• Time in Patent Office: 2,629 Days
• Field of Search: 380/21, 380/44, 380/46, 380/47, 380/200, 380/243, 380/268, 380/277, 380/264, 708/250, 708/254, 708/255, 713/185, 713/186
• US Class Current: 713/185
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]

Abstract

A cryptographic key split combiner, which includes a number of key split generators for generating cryptographic key splits and a key split randomizer for randomizing the cryptographic key splits to produce a cryptographic key, and a process for forming cryptographic keys. Each of the key split generators generates key splits from seed data. The key split generators may include a random split generator for generating a random key split based on reference data. Other key split generators may include a token split generator for generating a token key split based on label data, a console split generator for generating a console key split based on maintenance data, and a biometric split generator for generating a biometric key split based on biometric data. All splits may further be based on static data, which may be updated, for example by modifying a prime number divisor of the static data. The label data may be read from a storage medium, and may include user authorization data. The resulting cryptographic key may be, for example, a stream of symbols, at least one symbol block, or a key matrix.

Claims

1. A cryptographic key split combiner, comprising:

a) a plurality of key split generators for generating cryptographic key splits; and

b) a key split randomizer for randomizing the cryptographic key splits to produce a cryptographic key;

c) wherein each of said key split generators includes means for generating key splits from seed data.

2. The cryptographic key split combiner of claim 1, wherein said plurality of key split generators includes a random split generator for generating a random key split based on reference data.

3. The cryptographic key split combiner of claim 2, wherein said random split generator includes means for generating a random sequence based on the reference data.

4. The cryptographic key split combiner of claim 2, wherein said random split generator includes means for generating a pseudorandom sequence based on the reference data.

5. The cryptographic key split combiner of claim 2, wherein said random split generator includes means for generating a key split based on the reference data and on chronological data.

6. The cryptographic key split combiner of claim 2, wherein said random split generator includes means for generating a key split based on the reference data and on static data.

7. The cryptographic key split combiner of claim 6, further including means for updating the static data.

8. The cryptographic key split combiner of claim 7, wherein the means for updating the static data includes means for modifying a prime number divisor of the static data.

9. The cryptographic key split combiner of claim 1, wherein said plurality of key split generators includes a token split generator for generating a token key split based on label data.

10. The cryptographic key split combiner of claim 9, further comprising means for reading the label data from a storage medium.

11. The cryptographic key split combiner of claim 9, wherein the label data includes user authorization data.

12. The cryptographic key split combiner of claim 9, wherein said token split generator includes means for generating a random sequence based on the label data.

13. The cryptographic key split combiner of claim 9, wherein said token split generator includes means for generating a pseudorandom sequence based on the label data.

14. The cryptographic key split combiner of claim 9, wherein said token split generator includes means for generating a key split based on the label data and on organization data.

15. The cryptographic key split combiner of claim 9, wherein said token split generator includes means for generating a key split based on the label data and on static data.

16. The cryptographic key split combiner of claim 15, further including means for updating the static data.

17. The cryptographic key split combiner of claim 16, wherein the means for updating the static data includes means for modifying a prime number divisor of the static data.

18. The cryptographic key split combiner of claim 1, wherein said plurality of key split generators includes a console split generator for generating a console key split based on maintenance data.

19. The cryptographic key split combiner of claim 18, where said console split generator includes means for generating a random sequence based on the maintenance data.

20. The cryptographic key split combiner of claim 18, wherein said console split generator includes means for generating a pseudorandom sequence based on the maintenance data.

21. The cryptographic key split combiner or claim 18, wherein said console split generator includes means for generating a key split based on previous maintenance data and on current maintenance data.

22. The cryptographic key split combiner of claim 18, wherein said console split generator includes means for generating a key split based on the maintenance data and on static data.

23. The cryptographic key split combiner of claim 22, further including means for updating the static data.

24. The cryptographic key split combiner of claim 22, wherein the means for updating the state data includes means for modifying a prime number divisor of the static data.

25. The cryptographic key split combiner of claim 1, wherein said plurality of key split generators includes a biometic split generator for generating a biometric key split based on biometric data.

26. The cryptographic key split combiner of claim 25, wherein said biometric split generator includes means for generating a random sequence based on the biometric data.

27. The cryptographic key split combiner of claim 25, wherein said biometric split generator includes means for generating a pseudorandom sequence based on the biometric data.

28. The cryptographic key split combiner of claim 25, wherein said biometric split generator includes means for generating a key split based on biometric data vectors and on biometric combiner data.

29. The cryptographic key split combiner of claim 25, wherein said biometric split generator includes means for generating a key split based on the biometric data and an static data.

30. The cryptographic key split combiner of claim 29, further including means for updating the static data.

31. The cryptographic key split combiner of claim 30, wherein the means for updating the static data includes means for modifying a number divisor of the static data.

32. The cryptographic key split combiner of claim 1, wherein the cryptographic key is a stream of symbols.

33. The cryptographic key split combiner of claim 1, wherein the cryptographic key is at least one symbol block.

34. The cryptographic key split combiner of claim 1, wherein the cryptographic key is a key matrix.

35. A process for forming cryptographic keys, comprising:

a) generating a plurality of cryptographic key splits from seed data; and

b) randomizing the cryptographic key splits to produce a cryptographic key.

36. The process of claim 35, wherein generating a plurality of cryptographic key splits includes generating a random key split based on reference data.

37. The process of claim 36, where generating a random key split includes generating a random sequence based on the reference data.

38. The process of claim 36, wherein generating a random key split includes generating a pseudorandom sequence based on the reference data.

39. The process of claim 36, wherein generating a random key split includes generating a key split base on the reference data and on chronological data.

40. The process of claim 36, wherein generating a random key split includes generating a key split based on the reference data and on static data.

41. The process of claim 40, further including updating the static data.

42. The process of claim 41, wherein updating the static data includes modifying a prime number divisor of the static data.

43. The process of claim 35, wherein generating a plurality of cryptographic key splits includes generating a token key split based on label data.

44. The process of claim 43, further comprising reading the label data from a storage medium.

45. The process of claim 43, wherein the label data includes user authorization data.

46. The process of claim 43, wherein generating a token key split includes generating a random sequence based on the label data.

47. The process of claim 43, wherein generating a token key split includes generating a pseudorandom sequence based on the label data.

49. The process of claim 43, wherein generating a token key split includes generating a key split based on the label data and on static data.

50. The process of claim 49, further including updating the static data.

51. The process of claim 50, wherein updating the static data includes modifying a prime number divisor of the static data.

52. The process of claim 35, wherein generating a plurality of cryptographic key splits includes generating a console key split based on maintenance data.

53. The process of claim 52, wherein generating a console key split includes generating a random sequence based on the maintenance data.

54. The process of claim 52, wherein generating a console key split includes generating a pseudorandom sequence based on the maintenance data.

55. The process of claim 52, wherein generating a console key split include generating a key split based on previous maintenance data and on current maintenance data.

56. The process of claim 52, wherein generating a console key split includes generating a key split based on the maintenance data and on static data.

57. The process of claim 56, further including updating the static data.

58. The process of claim 56, wherein the updating the static at includes modifying a prime number divisor of the static data.

59. The process of claim 35, wherein generating a plurality of cryptographic key splits includes generating a biometric key split baud on biometric data.

60. The process of claim 59, wherein generating a biometric key split includes generating a random sequence based on the biometric data.

61. The process of claim 59, wherein generating a biometric key split includes generating a pseudorandom sequence based on the biometric data.

62. The process of claim 59, wherein generating a biometric key split includes generating a key split based on biometric data vectors and on biometric combiner.

63. The process of claim 59, wherein generating a biometric key split includes generating a key split based on the biometric data and on static data.

64. The process of claim 63, further including updating the static data.

65. The process of claim 63, wherein updating the static data includes modifying a prime number divisor of the static data.

48. The process of clam 43, wherein generating a token key split includes generating a key split based on the label data and on organization data.