Anonymous verifiable public key certificates

• US 9,621,341 B2
• Filed: 11/26/2008
• Issued: 04/11/2017
• Est. Priority Date: 11/26/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Bromley, Dennis N., Grigorovitch, Alexandre V.
• Primary Examiner(s): Rahman, Mahfuzur
• Application Number:
  US12/324,647
• Publication Number:
  US 20100131765A1
• Time in Patent Office: 3,058 Days
• Field of Search: 379 3203, 713175
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 63/0414 during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

The anonymity of a user at a client computer may be preserved when authenticating with an on-line service or content provider through the use of an anonymous and verifiable (i.e., “blind”) certificate set that is created by a certificate authority from a fixed-size set of PKI key pairs. The certificate authority randomly selects a subset of PKI key pairs to generate the blind certificate set where each certificate in the set includes a respective public key from the PKI key pair subset. The certificate authority also sends the private keys from the PKI key pair subset to the user. During authentication, the client computer is configured to randomly select a subset of one or more certificates from the set to present to the provider. The provider will encrypt content using the public keys in the subset of certificates and the client will decrypt the content with the corresponding private keys.

Claims

1. A computer-readable medium, not consisting of a propagated signal, containing instructions which, when executed by one or more processors disposed in an electronic device, perform a method comprising the steps of:

generating a set of blind certificates for a user in a population of users by a certificate authority;

utilizing a fixed-size PKI key set that is accessed by the certificate authority for generating the set of blind certificates on a per-user basis, each of the blind certificates arranged to limit the discloser of identifying information pertaining to the user, each of the blind certificates in the set being verifiable and providing anonymity for the user when used for authenticating the user, the fixed-size PKI key set being sized smaller than the user population so that identical public keys are simultaneously and commonly provided to each of a plurality of users in the population to cause the occurrence of keyset collisions to prevent tracing of the users;

randomly selecting a subset of key pairs from the fixed-size PKI key set on a per-user basis;

generating each blind certificate in the set of blind certificates by using respective public keys from the subset of key pairs, each blind certificate including a description including a listing and/or a limitation on a number of authorized devices to receive and render downloaded media content; and

providing the set of blind certificates and private keys from the subset of key pairs to the user.

2. The computer-readable medium of claim 1 in which the generating further includes signing each of the blind certificates.

3. The computer-readable medium of claim 1 in which each of the blind certificates further includes a description of at least one of access rights, usage rights, terms of use, terms of service, limitations, or authorized devices.

4. The computer-readable medium of claim 1 in which the method further includes the steps of identifying a user whose access rights are revoked and placing one or more of the public keys that are associated with the identified user on a revocation list.

5. The computer-readable medium of claim 4 in which the method further includes a step of publishing the revocation list to an authenticating party.

6. The computer-readable medium of claim 4 in which the method further includes a step of providing new blind certificates and private keys to a user having existing public keys on the revocation list but whose access rights are not legitimately revoked.

7. The computer-readable medium of claim 4 in which the method further includes a step of rejecting a request for new blind certificates and private keys from a user having existing public keys on the revocation list and whose access rights are legitimately revoked.

8. The computer-readable medium of claim 1 in which the public keys associated with the provided set of blind certificates are subject to revocation, the revocation utilizing a revocation list being shared between the certificate authority and a service provider.

9. A computer-readable medium, not consisting of a propagated signal, containing instructions which, when executed by one or more processors disposed in an electronic device, perform a method for using blind certificates among a population of users, the method comprising the steps of:

generating a set of blind certificates for a user in the population of users by a certificate authority

making a request to a certificate authority for blind certificates;

receiving a set of blind certificates from the certificate authority, the blind certificates being generated on a per-user basis using public keys from a randomly selected subset of key pairs of a fixed-size PKI key set, each of the blind certificates arranged to limit the disclosure of identifying information pertaining to the user, and the blind certificates further being verifiable and providing anonymity for the user when used to authenticate the user, the fixed-size PKI key set being sized smaller than the user population so that identical public keys are simultaneously and commonly provided to each of a plurality of users in the population to cause the occurrence of keyset collisions to prevent tracing of the users;

presenting more than one blind certificate from the set from the user to the authenticating party so that the authenticating party authenticates the user using the more than one blind certificates; and

receiving content that is encrypted using public keys from each of the corresponding more than one presented blind certificates presented in said presenting step.

10. The computer-readable medium of claim 9 in which the method further includes a step of receiving private keys from the subset of key pairs from the certificate authority.

11. The computer-readable medium of claim 10 in which the method further includes a step of decrypting the encrypted content using respective one or more private keys.

12. The computer-readable medium of claim 11 in which the method further includes a step of rendering the decrypted content on the electronic device.

13. The computer-readable medium of claim 9 in which the authenticating party is selected from one of content provider, service provider, or an organization to which the user seeks to be authenticated as a member.

14. The computer-readable medium of claim 9 in which the request is made in an automated manner as part of a registration procedure with a service provider or content provider.

15. The computer-readable medium of claim 9 in which the-public keys associated with the received set of blind certificates are subject to revocation, the revocation utilizing a revocation list being shared between the certificate authority and an authenticating party.

16. A computer-readable medium, not consisting of a propagated signal, containing instructions which, when executed by one or more processors disposed in an electronic device, perform a method comprising the steps of:

authenticating a user in a population of users with blind certificates by an authenticating party,

receiving more than one blind certificate from a user seeking to be authenticated, each of the blind certificates arranged to limit the disclosure of identifying information pertaining to the user, the blind certificates being generated by a certificate authority on a per-user basis using public keys from a randomly selected subset of key pairs of a fixed-size PKI key set and being signed by the certificate authority with a signature, the fixed-size PKI key set being sized smaller than the user population so that identical public keys are simultaneously and commonly provided to each of a plurality of users in the population to cause the occurrence of keyset collisions to prevent tracing of the users;

verifying the more than one blind certificates;

authenticating the user using the verified more than one blind certificates; and

binding content to more than one of the public keys so as to encrypt the content where the encrypted content is decrypted using corresponding multiple private keys from the subset of key pairs and consumed by the user.

17. The computer-readable medium of claim 16 in which the encryption is performed by binding the content to two or more public keys in a sequential manner.

18. The computer-readable medium of claim 16 including a further step of transmitting the encrypted content to the user over a network.

19. The computer-readable medium of claim 16 in which the encryption is performed as a function of a multiplicity of PKI key pairs.

20. The computer-readable medium of claim 16 in which the user is authenticated in association with downloading of media content under digital rights management provisions.

21. The computer-readable medium of claim 16 in which the public keys associated with the received set of blind certificates are subject to revocation, the revocation utilizing a revocation list being shared between the certificate authority and an authenticating party.