Method and system for securely exchanging encryption key determination information

• US 8,200,974 B1
• Filed: 07/22/2010
• Issued: 06/12/2012
• Est. Priority Date: 02/14/2001
• Status: Active Grant

• Current Assignee: Anixa Biosciences, Inc. (f/k/a ITUS Corporation)
• Original Assignee: Anixa Biosciences, Inc. (f/k/a ITUS Corporation)
• Inventors: DiSanto, Frank J., Krusos, Denis A.
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US12/804,484
• Time in Patent Office: 691 Days
• Field of Search: 713/171
• US Class Current: 713/171
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation

Abstract

A system and method for securely exchanging plurality of information items used to generate a plurality of encryption keys used in a public key-and-private key system. In accordance with the principles of the invention, elements of exchanged information items, such as public key and synchronizing indictors are encrypted before the exchange. The information item element is encrypted using an encryption key determined from information items that were previously exchanged. The encryption of information items used to determine subsequent encryption keys provides additional security to the encryption key used in the transmission of informational data as the encrypted elements of the information item must be decrypted before the data message encryption key can be decrypted. The process of exchanging encrypted information items can be repeated until an agreed upon number of encrypting keys is determined.

Claims

1. A method for securely exchanging information items used to generate encryption keys among at least two parties using a public/private encryption key system over a communication network, each of said parties retaining an initial private key and transmitting an initial corresponding information item used by each receiving party to determine, and retain, an initial encryption key, said method comprising the steps of:

configuring at least one processor to perform the functions of;

a. determining a next private key and a next corresponding information item set, wherein said next private key is retained among said retained next private keys and said corresponding information item set includes a public key and a synchronization indicator, said synchronization indicator altering a starting position of an encryption sequence in said public key;

b. encrypting at least one element of said next information item using an encryption key selected from said retained encryption keys;

c. transmitting said encrypted next information item over said network;

d. decrypting a received encrypted information item element using a private key selected from said retained private keys; and

e. determining a next encryption key from said next private key and said received information item, wherein said next encryption key is retained among said retained encryption keys.

2. The method as recited in claim 1, wherein

steps a-e are repeated until a known number of encryption keys are determined.

3. The method as recited in claim 1 wherein the step of encrypting further comprises:

selecting at least one of said retained encryption keys alternatively.

4. The method as recited in claim 3, wherein said encryption keys are selected in a known sequence.

5. The method as recited in claim 4, wherein said known sequence corresponds to an order of retention of said encryption keys.

6. The method as recited in claim 4, wherein said known sequence corresponds to an order pre-selected by said parities.

7. The method as recited in claim 1, wherein the step of encrypting further comprises:

selecting a known encryption key.

8. The method as recited in claim 7 wherein said known encryption key is such that an output value is the same as an input value.

9. A system for securely exchanging information items used to generate encryption keys among at least two parties using a public/private encryption key system over a communication network, each of said parties retaining an initial private key in a memory and transmitting an initial corresponding information item used by each receiving party to determine and retain in said memory, an initial encryption key, said system comprising:

a receiving device operative to receive a plurality of information items over said network;

a processor in communication with said memory operative to;

determine at least one next private key and at least one next corresponding information item set, wherein said at least one next private key is retained in said memory and said corresponding information item set includes a public key and a synchronization indicator, said synchronization indicator altering a starting position of an encryption sequence in said public key;

encrypt at least one element of each of said at least one next information item using an encryption key selected from encryption keys retained in said memory;

decrypt each of at least one received information item element using a private key selected from said private keys retained in said memory; and

determine at least one next encryption key from corresponding said at least one next private key and said at least one received information item, wherein said at least one next encryption key is retained in said memory; and

a transmitting device operative to transmit each of said at least one information items.

10. The system as recited in claim 9 wherein said processor is further operative to alternatively select at least one of said at least one retained next encryption key.

11. The system as recited in claim 9, wherein said processor is further operative to select a known encryption key.

12. The system as recited in claim 9 wherein said known encryption key renders an output value the same as an input value.

13. The system as recited in claim 9 wherein said encryption keys are elected in a known sequence.

14. The system as recited in claim 13 wherein said encryption keys are selected in a known order determined by said parties.

15. The system as recited in claim 13 wherein said known sequence corresponds to an order of retaining each of said next encryption keys in said memory.

16. A device for securely exchanging information items used to generate encryption keys among at least two parties using a public/private encryption key system over a communication network, each of said parties retaining an initial private key in a memory and transmitting an initial corresponding information items used by each receiving party to determine, and retain in said memory, an initial encryption key, said device in communication with a receiving device and a transmitting device, comprising;

a key generator to generate a next private key and a next information item wherein said next private key is stored in said memory in communication with said key generator and said next information item includes a public key and a synchronization indicator, said synchronization indicator altering a starting position of an encryption sequence in said public key;

an encryption device operative to encrypt at least one element of said next information item using an encryption key selected from encryption keys retained in said memory and communicate said next information item to said transmitting device;

a decrypting device to operative to receive information item from said receiving device and decrypt said received information item element using a private key selected from said private keys retained in said memory; and

an encryption key generator to determine a next encryption key from corresponding said next private key and said received information item, wherein next encryption key is retained in said memory.

17. The device as recited in claim 16, wherein said encryption device is further operative to:

alternatively select at least one of said retained encryption keys.

18. The device as recited in claim 17 wherein said encryption derive is operative to select said encryption keys in a known sequence.

19. The device as recited in claim 18 wherein said known sequence corresponds to an order said encryption keys are retained in said memory.

20. The device as recite in claim 18 wherein said known sequence corresponds to a pre-determined order established between said parties.

21. The device as recited in claim 16, wherein said encryption device is further operative to select a known encryption key.

22. The device as recited in claim 21, wherein said known encryption key is such that an output value is the same as an input value.