Method and device using one-time pad data

• US 20070016794A1
• Filed: 06/16/2006
• Published: 01/18/2007
• Est. Priority Date: 06/16/2005
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Inventors: Tofts, Christopher, Harrison, Keith, Spiller, Timothy, Munro, William
• Granted Patent: US 9,191,198 B2
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: H04L 2209/127 Trusted platform modules [TPM]
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0656 Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher
• CPC Class Codes: H04L 9/0852 Quantum cryptography transmission systems employing electromagnetic waves other than radio waves, e.g. light, infrared H04B10/00; wavelength-division multiplex systems H04J14/02; WDM arrangements H04J14/03
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

In carrying out a task that consumes data from a one-time pad, task inputs comprising at least first data and second data from the pad, are combined together to form an output from which the data used from the pad cannot be recovered without knowledge of at least one of the first and second data. The task concerned can be, for example, the encrypting of a message or the creating of an attribute verifier.

Claims

1. A method of using one-time pad data, comprising combining together inputs comprising at least first and second data from the pad, to form an output from which the data used from the pad cannot be recovered without knowledge of at least one of the first and second data.

2. A method according to claim 1, wherein the inputs are combined together by Exclusive ORing.

3. A method according to claim 1, wherein the inputs further comprise a message to be encrypted, said output being the encrypted message.

4. A method according to claim 3, wherein each message bit is encrypted by being combined with both a bit from said first data and a bit from said second data by Exclusive OR operations.

5. A method according to claim 1, wherein said output is an attribute verifier formed by combining the first data and the second data.

6. A method of decrypting a message encrypted according to the method of claim 3, the decryption method comprising combining together the encrypted message and one-time pad data comprising at least third and fourth data, the third and fourth data corresponding to said first and second data respectively.

12. A device for decrypting a message encrypted according to the method of claim 3, the device comprising a memory for storing one-time pad data comprising at least third data and fourth data respectively corresponding to said first data and said second data, and a data processor arranged to combine together the encrypted message and one-time pad data comprising at least said third and fourth data.

7. A device comprising a memory for holding one-time pad data, and a data processor arranged to receive inputs comprising at least first and second data from the pad, and to combine together these inputs to form an output from which the data used from the pad cannot be recovered without knowledge of at least one of the first and second data.

8. A device according to claim 7, wherein the data processor is arranged to combine together said inputs by Exclusive ORing.

9. A device according to claim 7, wherein the inputs further comprise a message to be encrypted, said output being the encrypted message.

10. A device according to claim 9, wherein the data processor is arranged to encrypt each message bit by combining it with both a bit from said first data and a bit from said second data by Exclusive OR operations.

11. A device according to claim 7, wherein said output is an attribute verification attribute formed by combining the first data and the second data.