专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US06408075B1 Information processing equipment and IC card 有权
标题翻译：信息处理设备和IC卡
公开(公告)号：US06408075B1
公开(公告)日：2002-06-18
申请号：US09525014
申请日：2000-03-14
申请人： Masaru Ohki , Yasuko Fukuzawa , Susumu Okuhara , Masahiro Kaminaga
发明人： Masaru Ohki , Yasuko Fukuzawa , Susumu Okuhara , Masahiro Kaminaga
IPC分类号： H04L928
CPC分类号： H04L9/003 , G06F7/72 , G06F7/721 , G06F7/723 , G06F9/3838 , G06F2207/7233 , G06F2207/7247 , G06F2207/7252 , G06F2207/7257 , G06K19/07363 , G06Q20/341 , G07F7/082 , G07F7/1008 , H04L2209/08 , H04L2209/127
摘要： An IC card having a storage memory including a program storage unit for storing a program and a data storage unit for storing data and a central processing unit for executing a predetermined process in accordance with the program to process the data, the program including one or more data process units each having a process instruction for giving an execution instruction to the central processing unit, wherein a data process order is randomly exchanged and a dummy process is added to thereby reduce the dependency of consumption current of an IC chip upon the data process.
摘要翻译：一种具有存储存储器的IC卡，包括用于存储程序的程序存储单元和用于存储数据的数据存储单元，以及用于根据程序执行预定处理以处理数据的中央处理单元，所述程序包括一个或多个每个具有用于向中央处理单元发出执行指令的处理指令的数据处理单元，其中随机交换数据处理顺序并且添加虚拟处理，从而减少IC芯片的消耗电流对数据处理的依赖性。

12. 发明授权

US06370247B1 Hash value generating method and device, data encryption method and device, data decryption method and device 失效
标题翻译：哈希值生成方法和设备，数据加密方法和设备，数据解密方法和设备
公开(公告)号：US06370247B1
公开(公告)日：2002-04-09
申请号：US09655712
申请日：2000-09-05
申请人： Kazuo Takaragi , Hiroyuki Kurumatani
发明人： Kazuo Takaragi , Hiroyuki Kurumatani
IPC分类号： H04L928
CPC分类号： H04L9/0643 , H04L2209/043 , H04L2209/12 , H04L2209/30
摘要： Hash values, keys and cipher text which have a high degree of data scrambling are generated rapidly. When a message is sent, divisional data of the message are input, and injection extension processing is performed so that the data length of output data is longer than the data length of input data. Further, hash values are generated by a hash function containing multiplication processing, cyclic shift processing, etc.
摘要翻译：快速生成具有高数据加扰度的哈希值，密钥和密文。当发送消息时，输入消息的分割数据，并且执行注入扩展处理，使得输出数据的数据长度长于输入数据的数据长度。此外，哈希值由包含乘法处理，循环移位处理等的哈希函数生成。

13. 发明授权

US06337909B1 Generation of session keys for El Gamal-like protocols from low hamming weight integers 失效
标题翻译：从低汉明重量整数生成El Gamal样协议的会话密钥
公开(公告)号：US06337909B1
公开(公告)日：2002-01-08
申请号：US08948796
申请日：1997-10-10
申请人： Scott A. Vanstone , Donald B. Johnson , Robert J. Lambert , Ronald C. Mullin
发明人： Scott A. Vanstone , Donald B. Johnson , Robert J. Lambert , Ronald C. Mullin
IPC分类号： H04L928
CPC分类号： H04L9/3013 , G06F7/725 , H04L9/3066
摘要： The public key, either short term “session” key or long term key, is generated by combining a pair of components. A first component is obtained by utilizing an integer with a relatively low Hamming weight as an exponent to facilitate exponentiation. The second component is a precomputed secret value that is of the form resulting from the exponentiation of the generator of the group element by an integer that has the requisite Hamming weight. The two components are combined to provide the public key and the two exponents combined to provide the corresponding private key.
摘要翻译：通过组合一对组件来生成公钥，短期“会话”密钥或长期密钥。通过利用具有相对较低的汉明重量的整数作为指数来获得第一分量以促成取幂。第二个组件是预先计算的秘密值，其形式是由组元素的生成器乘以具有所需汉明权重的整数而产生的。组合两个组件以提供公钥和两个指数组合以提供相应的私钥。

14. 发明授权

US06304657B1 Data encryption apparatus using odd number of shift-rotations and method 有权
标题翻译：数据加密装置使用奇数位移轮换和方法
公开(公告)号：US06304657B1
公开(公告)日：2001-10-16
申请号：US09474531
申请日：1999-12-29
申请人： Kaoru Yokota , Motoji Ohmori , Atsuko Miyaji
发明人： Kaoru Yokota , Motoji Ohmori , Atsuko Miyaji
IPC分类号： H04L928
CPC分类号： H04L9/0625 , H04L2209/125 , H04L2209/24
摘要： A data converting unit includes a key adding unit for performing an arithmetic addition modulo 232 for input data F and subkey data Ki and outputting the outcome as data G, and a data substituting unit for performing an exclusive-OR operation for corresponding bits in data Rot7(G) obtained by shift-rotating the data G by 7 bits toward higher-order bit positions, data Rot1(G) obtained by shift-rotating the data G by 1 bit toward higher-order bit positions, and the data G itself.
摘要翻译：数据转换单元包括：密钥附加单元，用于对输入数据F和子密钥数据Ki执行算术加法模232，并输出结果作为数据G;以及数据替换单元，用于对数据Rot7中的相应位执行异或运算（G）通过将数据G向高阶位位移动7位，通过将数据G向高阶位置移位1位而获得的数据Rot1（G）和数据G本身。

15. 发明授权

US06285761B1 Method for generating pseudo-random numbers 失效
标题翻译：用于产生伪随机数的方法
公开(公告)号：US06285761B1
公开(公告)日：2001-09-04
申请号：US09034829
申请日：1998-03-04
申请人： Sarvar Patel , Ganapathy Subramanian Sundaram
发明人： Sarvar Patel , Ganapathy Subramanian Sundaram
IPC分类号： H04L928
CPC分类号： G06F7/586 , G06F2207/581 , H04L9/0662 , H04L9/3013
摘要： The present invention is a method for outputting larger bit size pseudo-random number zi that is cryptographically secure. Since larger bit size pseudo-random numbers are being outputted, larger bit size segments of messages may be encrypted resulting in a speedier encryption process than encryption processes of the prior art. In one embodiment, the present invention is a pseudo-random number generator defined by a modular exponential function xi=gxi−1 mod p. The output of the pseudo-random number generator being a pseudo-random number zi comprising a j−1 bit size segment of xi. The value of j being less than or equal to m−2c (i.e., j≦m−2c). In an embodiment of the present invention, the pseudo-random number zi includes the j least significant bits of xi excluding the least significant bit of xi.
摘要翻译：本发明是用于输出密码安全的较大位大小的伪随机数zi的方法。由于正在输出较大的比特大小的伪随机数，所以消息的较大的比特大小的段可能被加密，导致比现有技术的加密处理更快的加密过程。在一个实施例中，本发明是由模数指数函数定义的伪随机数发生器。伪随机数发生器的输出是包含xi的j-1位大小段的伪随机数zi。 j的值小于或等于m-2c（即，j <= m-2c）。在本发明的一个实施例中，伪随机数zi包括不包括xi的最低有效位的xi的j个最低有效位。

16. 再颁专利

USRE37178E1 Method and apparatus for authentication of client server communication 失效
标题翻译：客户端服务器通信认证方法和装置
公开(公告)号：USRE37178E1
公开(公告)日：2001-05-15
申请号：US08778151
申请日：1996-09-20
申请人： Kevin Kingdon
发明人： Kevin Kingdon
IPC分类号： H04L928
CPC分类号： H04L69/16 , H04L9/0827 , H04L9/3236 , H04L9/3247 , H04L63/061 , H04L63/067 , H04L63/083 , H04L63/12
摘要： The present invention provides a method and apparatus for message packet authentication to prevent the forging of message packets. After a message packet is created, a secret session key is preappended to the message, and a message digesting algorithm is executed on the altered message to create a message digest. A portion of the message digest, referred to as the signature, is then appended to the actual message when it is sent over the wire. The receiving station strips the signature from the message, preappends the same secret session key and creates its own message digest. The signature of the digest created by the receiving station is compared to the signature of the digest appended by the sending station. If there is a match, an authentic message is assumed. If there is no match, the message is considered as invalid and discarded. An advantage of the present invention is that the session key is never transmitted over the wire. The receiving station (server) already has the key and uses the key along with the message data to recalculate the message digest upon receiving the packet. The shared secret key (session key) is generated during initiation of the NCP session. In addition, cumulative state information is maintained by both the sending station and the receiving station. This state information is also used to authenticate messages.
摘要翻译：本发明提供了一种用于消息分组认证的方法和装置，以防止消息分组的伪造。在创建消息分组之后，将秘密会话密钥预先插入消息，并且对改变的消息执行消息摘要算法以创建消息摘要。当通过电线发送时，将消息摘要的一部分（称为签名）附加到实际消息。接收站从消息中剥离签名，预先安装相同的秘密会话密钥并创建自己的消息摘要。由接收站创建的摘要的签名与由发送站附加的摘要的签名进行比较。如果有匹配，则假定一个真实的消息。如果没有匹配，该消息被认为是无效的并被丢弃。本发明的优点是会话密钥从不通过线路传输。接收站（服务器）已经具有密钥并且随着消息数据使用该密钥，以便在接收到该数据包时重新计算消息摘要。共享密钥（会话密钥）是在NCP会话开始期间生成的。此外，发送站和接收站两者都维持累积状态信息。该状态信息也用于验证消息。

17. 发明授权

US06836548B1 Communications security and trusted path method and means 失效
标题翻译：通信安全和可信路径的方法和手段
公开(公告)号：US06836548B1
公开(公告)日：2004-12-28
申请号：US07970556
申请日：1992-11-04
申请人： Mark Stephen Anderson , John Desborough Yesberg , Damian Marriott , Lisa Nayda , Ken Hayman , Malcolm Stevens , Brendan Beahan
发明人： Mark Stephen Anderson , John Desborough Yesberg , Damian Marriott , Lisa Nayda , Ken Hayman , Malcolm Stevens , Brendan Beahan
IPC分类号： H04L928
CPC分类号： G06F21/72 , G06F21/73 , G06F21/84
摘要： A trusted path device is described which may be used stand alone or may be retrofitted to a users untrusted computer console or workstation so that an untrusted data input may be displayed on an untrusted display and verified by the user, following which the trusted data can be output to an untrusted or trusted device or network. The output may be encrypted or not, by means of an encryption device which may or may not use a ‘one time pad’ key provided from a structured array of retrievable “one time pad” keys having associated uniquely there with, a serial number which itself need not be encrypted but with which the input data and encrypted output data are uniquely associated. Sufficient “one time pad” keys are provided on a commonly available and physically manageable medium so as to allow much simplified key management procedures while still maintaining high levels of correctness and effectiveness of the encryption processes. Trusted devices as per ITSEC Level 6 may be used to implement the trusted path and encryption devices since the apparatus according to the invention are inherently simple in functionality thereby simplifying conformance with the relevant ITSEC and security equivalent requirements.
摘要翻译：描述了可信路径设备，其可以被单独使用或者可以被改造到用户不可信计算机控制台或工作站，使得不可信数据输入可以显示在不可信的显示器上并被用户验证，随后可信数据可以是输出到不受信任的或可信任的设备或网络。可以通过加密设备来加密输出，该加密设备可以使用或不使用从具有与其唯一相关联的可检索“一次性密码”键的结构化阵列提供的“一次性密钥”密钥，序列号本身不需要加密，而是与输入数据和加密输出数据唯一相关联。在一个普遍可用和物理上可管理的介质上提供了足够的“一次性”键，以便允许大量简化的密钥管理过程，同时仍然保持加密过程的高水平的正确性和有效性。根据本发明的设备本身就具有简单的功能性，从而简化了与相关ITSEC和安全等效要求的一致性，因此可以使用根据ITSEC 6级的可信设备来实现可信路径和加密设备。

18. 发明授权

US06816593B1 Method and apparatus for transposing bits 有权
标题翻译：用于转置位的方法和装置
公开(公告)号：US06816593B1
公开(公告)日：2004-11-09
申请号：US09471350
申请日：1999-12-23
申请人： DeForest Tovey , Stephen C. Purcell
发明人： DeForest Tovey , Stephen C. Purcell
IPC分类号： H04L928
CPC分类号： G06F13/4072 , G06F2221/2141
摘要： A method and apparatus for transposing bits include processing that begins by receiving a multiple bit input. The multiple bit input may be received from memory for executing a read operation from a processing device or for a write operation to memory. The processing continues by determining whether a transposed bit function is enabled. When the transposed bit function is enabled, a set of tri-state transposed drivers are enabled to couple out bit lines to the multiple bit input in a transposed fashion. In addition, a set of tri-state non-transposed drivers are disabled such that they are not coupled to the output bit lines. When the transposed bit function is not enabled, the non-transposed drivers are enabled and the tri-state transposed drivers are disabled such that the multiple bit input, when coupled to the output bit lines, is not transposed.
摘要翻译：用于转置位的方法和装置包括通过接收多位输入开始的处理。可以从存储器接收多位输入，以执行来自处理装置的读取操作或对存储器的写入操作。通过确定转置位功能是否被使能来继续处理。当转置位功能使能时，一组三态转置驱动器被使能，以转置方式将位线耦合到多位输入。此外，一组三态非转置驱动器被禁用，使得它们不耦合到输出位线。当转置位功能未使能时，非转置驱动器被使能，并且三态转置驱动器被禁止，使得当耦合到输出位线时，多位输入不被转置。

19. 发明授权

US06714648B2 IC card equipped with elliptic curve encryption processing facility 失效
标题翻译： IC卡配有椭圆曲线加密处理设备
公开(公告)号：US06714648B2
公开(公告)日：2004-03-30
申请号：US10252669
申请日：2002-09-24
申请人： Seiji Miyazaki , Kazuo Takaragi
发明人： Seiji Miyazaki , Kazuo Takaragi
IPC分类号： H04L928
CPC分类号： G06F7/725 , G06F7/728
摘要： In an IC card incorporating residual multiplier hardware for implementing a high-speed algorithm for a residual multiplication arithmetic, a method and a device capable of executing a public key encryption processing such as an elliptic curve encryption processing at a high speed. Residual arithmetic succeeding to generation of a random number and residual arithmetic in a signature generating processing can be executed by using a residual multiplier. Further, in order to use effectively the residual multiplier for arithmetic operation on an elliptic curve, the point on the elliptic curve is transformed from a two-dimensional affine coordinate system to a three-dimensional coordinate system. Additionally, multiplicative inverse arithmetic for realizing reverse transformation from the three-dimensional coordinate system to the two-dimensional affine coordinate system as well as for determining a signature s can be executed only with the residual multiplication arithmetic. By making use of the residual multiplier in this manner, the processing speed can be increased. Computation complexity can be reduced by storing previously those parameters which are used frequently and constant multiplies of a base point of the elliptic curve in the form of tables, which also contributes to increasing of processing speed.
摘要翻译：在包含用于实现用于残余乘法运算的高速算法的残余乘法器硬件的IC卡中，能够以高速执行诸如椭圆曲线加密处理的公钥加密处理的方法和装置。可以通过使用剩余乘数来执行在签名生成处理中继续生成随机数和残差算术的剩余算术。此外，为了有效地使用用于椭圆曲线上的算术运算的剩余乘数，将椭圆曲线上的点从二维仿射坐标系变换为三维坐标系。另外，用于实现从三维坐标系到二维仿射坐标系的反向变换以及用于确定签名s的乘法逆运算只能用剩余乘法运算来执行。通过以这种方式利用剩余乘数，可以提高处理速度。可以通过先前存储经常使用的那些参数和椭圆曲线的基点的恒定倍数以表的形式来减少计算复杂度，这也有助于提高处理速度。

20. 发明授权

US06424712B1 Accelerated signature verification on an elliptic curve 失效
公开(公告)号：US06424712B1
公开(公告)日：2002-07-23
申请号：US08953637
申请日：1997-10-17
申请人： Scott A. Vanstone , Donald B. Johnson
发明人： Scott A. Vanstone , Donald B. Johnson
IPC分类号： H04L928
摘要： A public key encryption system exchanges information between a pair of correspondents. The recipient performs computations on the received data to recover the transmitted data or verify the identity of the sender. The data transferred includes supplementary information that relates to intermediate steps in the computations performed by the recipient.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式