Electronic identifiers for network terminal devices

• US 6,005,943 A
• Filed: 10/29/1996
• Issued: 12/21/1999
• Est. Priority Date: 10/29/1996
• Status: Expired due to Term

• Current Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Inventors: du Breuil, Thomas L., Dean, Cecil A., Poteat, Vance Eugene, Cohen, Joshua L., Maher, David P., Heer, Daniel Nelson, Rance, Robert John
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/739,371
• Time in Patent Office: 1,148 Days
• Field of Search: 380/4, 380/21, 380/30
• US Class Current: 380/30
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]

Abstract

The generation of electronic identifiers for network interface units connected to a data network for use in detecting unauthorized decryption of encrypted data transmitted over the data network. A random number is generated for use as a private key decryption code and is stored in memory in each network interface unit. A public key is calculated from the stored private key using a non-invertible mathematical formula. If the calculated public key is unique, then a portion of the public key (e.g. a subset of its bits) is stored in a data provider database as an electronic identifier for use in detecting unauthorized decryption of data by the interface unit.

Claims

1. A method of generating an electronic identifier for a single-chip network interface unit (NIU) connected to a data network for use in detecting unauthorized decryption by the NIU of encrypted data transmitted over the data network, said method comprising the steps of:

generating a random number by using a random generator comprising a component of the NIU on the NIU chip;

storing said generated random number in a memory of the network interface unit, said stored random number comprising a private key for use by the NIU in decrypting received encrypted data so that said stored random number is inaccessible outside of the NIU;

calculating a public key from the private decryption key using a non-invertible mathematical formula;

determining if said calculated public key is unique; and

storing, as an electronic identifier of the NIU, at least a portion of the unique public key in a database accessible by the data network.

2. The method of claim 1, wherein said public key comprises a set of a predetermined number of bits and wherein said electronic identifier comprises a predetermined subset of bits of said public key set of bits.

3. The method of claim 1, wherein said public key is stored in said memory of the NIU.

4. The method of claim 1, wherein said public key is calculated using the mathematical formula

public key=x.sup.(private key) mod(p),

wherein p is a large prime number and x is an integer.

5. The method of claim 1, wherein said memory is tamper-proof.

6. The method of claim 1, wherein said determining step comprises comparing said calculated public key to other public keys contained in said database accessible by the data network.

7. The method of claim 1, further comprising the step of affixing the electronic identifier to the NIU.

9. The device of claim 1, wherein said calculating means comprises a microprocessor, and wherein said mathematical formula is

public key=x.sup.(private key) mod(p),

wherein p is a large prime number and x is an integer.

10. The device of claim 7, wherein said memory is contained in the NIU and wherein said memory is tamper-proof.

8. A device for generating an electronic identifier for a single-chip network interface unit (NIU) connected to a data network, for use in detecting unauthorized decryption by the network interface unit of encrypted data transmitted over the data network, said device comprising:

a random number generator contained on the single chip with the NIU and forming a component of the NIU for generating a random number comprising a private key for use by the NIU in decrypting received encrypted data from the data network;

a memory connected to said random number generator and formed on said single chip;

means for storing said generated random number in said memory so that said stored random number is inaccessible outside of the NIU, said storing means being connected between said random number generator and said memory;

means for calculating a public key from the private decryption key in accordance with a non-invertible mathematical formula;

means for determining whether said calculated public key is unique; and

means for storing, in a database accessible by the data network, at least a portion of the unique calculated public key.