Hybrid symmetric/asymmetric cryptography with user authentication
AssigneeTyfone, Inc.
InventorsSiva Narendra, Prabhakar Tadepalli, Thomas Spitzer
Life of this patent
Estimating the term…
Abstract
A device uses a user authentication factor to generate an asymmetric decryption key for use in cryptography. An asymmetric encryption key is generated from the asymmetric decryption key using a one-way function, and the asymmetric encryption key is used to encrypt a symmetric key.
Claims41
A method for encrypting data comprising:
- receiving at least one user authentication factor;
- generating an asymmetric decryption key from the at least one user authentication factor;
- generating an asymmetric encryption key from a one-way function of the asymmetric decryption key;
- and
- encrypting a symmetric key using the asymmetric encryption key.
A method for decrypting data comprising:
- receiving at least one user authentication factor;
- generating an asymmetric decryption key from the at least one user authentication factor;
- and
- decrypting a stored symmetric key using the asymmetric decryption key.
An apparatus with a machine accessible medium having instructions stored thereon that when accessed result in a machine performing:
- receiving at least one user authentication factor;
- generating an asymmetric decryption key from the at least one user authentication factor;
- generating an asymmetric encryption key from a one-way function of the asymmetric decryption key;
- and
- encrypting a symmetric key using the asymmetric encryption key.
An apparatus with a machine accessible medium having instructions stored thereon that when accessed result in a machine performing:
- receiving at least one user authentication factor;
- generating an asymmetric decryption key from the at least one user authentication factor;
- and
- decrypting a stored symmetric key using the asymmetric decryption key.
A computer system for storing and accessing encrypted data, comprising:
- a user authentication factor collection component to receive at least one user authentication factor;
- an asymmetric decryption key generation component to generate an asymmetric decryption key from the at least one user authentication factor;
- an asymmetric encryption key generation component to generate an asymmetric encryption key from the asymmetric decryption key using a one-way function;
- a symmetric encryption/decryption process component to encrypt data using a symmetric encryption key;
- and
- an asymmetric encryption/decryption process component to encrypt the symmetric key using the asymmetric encryption key.
An apparatus comprising:
- means for collecting at least one user authentication factor;
- means for generating an asymmetric decryption key from the at least one user authentication factor;
- means for generating an asymmetric encryption key from the asymmetric decryption key using a one-way function;
- means for encrypting a symmetric key using the asymmetric encryption key;
- and
- means for encrypting data using the symmetric key.
A handheld device to store encrypted data, comprising:
- a biometric collection device to collect a biometric user authentication factor;
- and
- a hybrid symmetric/asymmetric cryptography engine to generate an asymmetric decryption key from the biometric user authentication factor, to generate an asymmetric encryption key from the asymmetric decryption key, and to encrypt a symmetric key using the asymmetric encryption key.
Dependencies are inferred from the claim text.