Method and apparatus for the generation of cryptographic keys

• US 7,415,110 B1
• Filed: 03/24/1999
• Issued: 08/19/2008
• Est. Priority Date: 03/24/1999
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Lee, David A.
• Primary Examiner(s): Vu; Kimyen
• Assistant Examiner(s): GYORFI, THOMAS A
• Application Number:
  US09/275,722
• Time in Patent Office: 3,436 Days
• Field of Search: 380/44, 380/277, 380/278, 380/279, 380/28, 713/155, 713/100, 707/9, 707/10, 707/1
• US Class Current: 380/44
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/3093 involving Lattices or polynomial equations, e.g. NTRU scheme
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method for formation of a shared secret key using a key matrix and a corresponding authentication protocol are described. The shared secret key formation scheme is a method in which sets of secret device keys are formed from arithmetic operations on matrix keys of a key matrix. The contents of the key matrix are held in confidence by the certification authority. The selection of which matrix keys to use is based on a key selection vector assigned by the certification authority. From the secret device keys, a shared secret key may be formed in accordance with a selected authentication protocol.

Claims

1. A method comprising:

receiving, by a computing device, a key matrix having N rows and M columns of matrix keys, where N>

2 and M>

2;

for each column of the key matrix, performing, by the computing device, arithmetic operations utilizing matrix keys of at least two selected rows of the key matrix to produce a secret device key which is part of a first set of secret device keys;

producing in memory of the computing device, by the computing device, a shared secret key based on arithmetic operations on selected secret device keys of the first set of secret device keys, the selected secret device keys being a portion of the first set of secret device keys and being determined based on a first key selection vector received from a recipient digital platform; and

using the shared secret key to provide a secure communication channel between a first digital platform and a second digital platform.

2. The method of claim 1, wherein the arithmetic operations include modular addition.

3. The method of claim 1, further comprising, prior to performing the arithmetic operations,

generating a second key selection vector identifying the at least two selected rows of the key matrix from which to produce the first set of secret device keys.

4. The method of claim 3, wherein the second key selection vector is uniquely assigned to a sender digital platform.

5. The method of claim 4, further comprising, prior to producing the shared secret key,

receiving the first key selection vector from the recipient digital platform in communication with the sender digital platform;

and

analyzing contents of the first key selection vector from the recipient digital platform to determine the selected secret device keys of the first set of secret device keys.

6. The method of claim 1, further comprising, prior to performing arithmetic operations on keys of at least two selected rows,

dedicating the rows of the key matrix to a first classification;

and

dedicating the columns of the key matrix to a second classification.

7. The method of claim 6, wherein the first classification includes digital platforms designed to provide information to other digital platforms.

8. The method of claim 7, wherein the second classification includes digital platforms designed to receive information from other digital platforms.

9. The method of claim 1, wherein the producing of the shared secret key comprises:

analyzing contents of the first key selection vector; and

performing arithmetic operations on the selected secret device keys located in columns of the key matrix identified by the contents of the first key selection vector.

10. The method of claim 9, wherein the producing of the shared secret key further comprises:

performing a hash operation on results of the arithmetic operations of the selected secret device keys located in the column of the key matrix identified by the contents of the first key selection vector.