Cryptographic key generation system and method
AssigneeVisa International Service Association
InventorQuan Wang
Life of this patent
Estimating the term…
Abstract
A computing device may be configured to receive a set of inputs from other computing devices. The set of inputs may include inputs derived by the computing devices utilizing cryptographic keys of the computing devices. The set of inputs may be stored in a blockchain such that the inputs are tamper resistant. A symmetric key may be generated (periodically, upon expiration of a timer, according to a protocol set, upon request, etc.) from two or more of the set of inputs. The generated symmetric key may be distributed to the computing devices. The symmetric key may be utilized to encrypt and decrypt communications between two computing devices.
Claims20
A computer-implemented method, comprising:
- obtaining, by a network device, a set of inputs derived using cryptographic keys associated with a plurality of computing devices in a set of computing devices;
- determining an index based on at least one of a counter or a time;
- identifying, from a protocol set associated with symmetric cryptographic key generation using the index, a function from a plurality of predefined functions and a combination of at least two of the set of inputs corresponding to the function, the protocol set comprising an indexed list of the plurality of predefined functions and an indication of a respective number and combination of two or more of the set of inputs to be utilized with each of the plurality of predefined functions, at least two of the plurality of predefined functions utilizing different numbers of inputs from the set of inputs;
- and
- generating, by the network device, a symmetric cryptographic key using the function identified from the protocol set and the at least two of the set of inputs, wherein the generated symmetric cryptographic key is thereafter used to encrypt communications between at least two computing devices of the set of computing devices.
A network device, comprising:
- a processor;
- and
- a memory including executable instructions that, when executed by the processor, cause the network device to:
- obtain, from a blockchain, a set of inputs derived using cryptographic keys associated with a plurality of computing devices in a set of computing devices;
- determine an index based on at least one of a counter or a time;
- identify, from a protocol set associated with symmetric cryptographic key generation using the index, a function from a plurality of predefined functions and a combination of at least two of the set of inputs, the protocol set comprising an indexed list of the plurality of predefined functions and an indication of a respective number and combination of two or more of the set of inputs to be utilized with each of the plurality of predefined functions, at least two of the plurality of predefined functions utilizing different numbers of inputs from the set of inputs;
- and
- generate a symmetric cryptographic key using the function identified from the protocol set and the at least two of the set of inputs, wherein the generated symmetric cryptographic key is thereafter used to encrypt communications between at least two computing devices of the set of computing devices.
Dependencies are inferred from the claim text.