Apparatus and method for secure distribution of data

• US 5,956,408 A
• Filed: 02/12/1998
• Issued: 09/21/1999
• Est. Priority Date: 09/15/1994
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Arnold, Todd Weston
• Primary Examiner(s): Hayes, Gail O.
• Assistant Examiner(s): SAYADIAN, HRAYR
• Application Number:
  US09/022,650
• Time in Patent Office: 586 Days
• Field of Search: 380/4, 380/49, 380/25, 380/50
• US Class Current: 713/189
• CPC Class Codes: G06F 21/1011 to devices
• CPC Class Codes: G06F 21/125 by manipulating the program code, e.g. source code, compiled code, interpreted code, machine code
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/302 involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme

Abstract

Data, including a program and software updates, is encrypted by a public key encryption system using the private key of the data sender. The data is also digitally signed by the sender. The receiver decrypts the encrypted data, using the public key of the sender, and verifies the digital signature on the transmitted data. The program interacts with basic information stored within the confines of the receiver. As result of the interaction, the software updates are installed within the confines of the user, and the basic information stored within the confines of the user are changed.

Claims

1. A method for securely controlling the configuration of a computer system so that features of the system may be enabled or disabled, said method including the steps of:

providing memory which is located within a secured area, said memory being protected from physical and direct electrical access said memory storing basic information;

encrypting data, said data including a program and software updates as specific features at another computer system under the private key of a public key encryption system; and

digitally signing said data;

decrypting the data and verifying the digital signature of said data within the secured area with a public key of the public key encryption system, wherein said public key is stored within said secured area;

executing said program within said secured area, said program interacting with the basic information stored in said memory and installing in said memory in the secured area, as result of said interaction, said specific features which are the software updates; and

changing said basic information stored in the memory of the secured area, which change results as part of the interaction of said program with the basic information existing before said interaction.