Method and apparatus for data validation

• US 7,330,969 B2
• Filed: 10/11/2002
• Issued: 02/12/2008
• Est. Priority Date: 10/15/2001
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Harrison, Keith Alexander, Sadler, Martin, Mont, Marco Casassa
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): POLTORAK, PIOTR
• Application Number:
  US10/270,037
• Publication Number:
  US 20030093674A1
• Time in Patent Office: 1,950 Days
• Field of Search: 380/265, 380/278, 380/44
• US Class Current: 713/155
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority

Abstract

A method for encrypting data comprising deriving a public key using a first data set provided by a second party; encrypting a second data set with the public key; providing the encrypted third data set to the second party; providing the public key to a third party to allow validation of the first data set such that on validation of the first data set the third party provides an associated private key to the second party to allow decryption of the encrypted second data set.

Claims

1. A computer system comprising:

a first computer entity arranged to derive a public key using first data and to encrypt second data using as encryption parameters both the public key and third-party public data;

a second computer entity arranged to make the first data available to the first computing entity and to receive the encrypted second data from the first computer entity; and

a third computer entity arranged to receive the public key and on validation of the first data received in the public key, to generate an associated private key, and to provide said associated private key to the second computer entity to allow decryption of the encrypted second data, the third computer entity being arranged to generate the private key in dependence both on private data related to said third-party public data, and on the public key.

2. A data validation method comprising:

receiving at a first party first data provided by a second party;

encrypting second data supplied by the first party, this encrypting being effected by the first party using as encryption parameters both public data of a third party and a public key comprising said first data;

providing the encrypted second data to the second party;

providing the public key to the third party which checks the validity of the first data in the public key, and after validating the first data, providing the second party with a private key for decrypting the encrypted second data, the third party generating the private key using the public key and private data related to said public data of the third party; and

decrypting the encrypted second data provided to the second party using the private key.

3. A method according to claim 2, wherein the second data is a nonce.

4. A method according to claim 2, wherein the first data is provided to the first party via a web site associated with the second party.

5. A method according to claim 2, wherein the first data is a web page associated with the second party.

6. A method according to claim 2, wherein the public key further comprises dynamic information.

7. A method according to claim 2 wherein the public key is provided to the third party by the second party.

8. A method according to claim 2 providing the decrypted second data from the second party to the first party, decryption of the encrypted second data causing the first party to accept the first data as validated by the third party.

9. A method according to claim 2 providing the decrypted second data from the second party to the first party, correct decryption of the encrypted second data causing the first party to accept the first data as validated by the third party.