Recovery of Expired Decryption Keys
AssigneeFrance Telecom
InventorsJulie H. Loc'H, David Arditti, Sylvie Camus
Life of this patent
Estimating the term…
Abstract
At least one expired decryption key intended to be used for asymmetrical decryption of encrypted data is recovered in a terminal after generation of a cryptographic encryption key/decryption key pair stored in a cryptographic medium such as a microchip card. The expired decryption key is stored in a database accessible to a user of the terminal and encrypted beforehand as a function of the new generated encryption key. In the terminal connected to the cryptographic medium, the encrypted expired encryption key is decrypted as a function of the decryption key stored in the cryptographic medium so that the encrypted data is decrypted as a function of the thus decrypted expired decryption key.
Claims12
A method of recovering at least one expired decryption key intended to be used for asymmetrical decryption of encrypted data in a terminal, after generation of a cryptographic encryption key decryption key pair the decryption key thereof is intended to be used for the asymmetrical decryption of other data in the terminal, said method including decrypting a encrypted expired decryption key as a function of the generated decryption key, executed at least in part in a cryptographic medium connected to said terminal, to obtain said expired decryption key.
A system for recovering at least one expired decryption key intended to be used for asymmetrically decrypting data encrypted in a terminal, after generation of a cryptographic encryption key/decryption key pair the decryption key whereof is intended to be used for asymmetrical decryption of other data in the terminal, said system including:
- a memory arrangement for storing (a) said generated cryptographic encryption key/decryption key pair in a cryptographic medium intended for a user of said terminal, (b) an encrypted expired decryption key as a function of the generated encryption key in a database accessible to said user of said terminal;
- and
- a decryption management module for obtaining the expired decryption key by commanding decryption of the encrypted expired decryption key as a function of the generated decryption key, executed at least in part in said cryptographic medium connected to said terminal.
A decryption management module for recovering at least one expired decryption key intended to be used for asymmetrically decrypting data encrypted in a terminal, after generation of a cryptographic encryption key/decryption key pair the decryption key whereof is intended to be used for asymmetrical decryption of other data in the terminal, said decryption management module including means for obtaining said expired decryption key by commanding decryption of an encrypted expired decryption key, executed at least in part in a cryptographic medium connected to said terminal, as a function of the generated encryption key stored in said cryptographic medium.
A data processing terminal including a decryption management module for recovering at least one expired decryption key intended to be used for asymmetrically decrypting data, after generation of a cryptographic encryption key/decryption key pair the decryption key whereof is intended to be used for asymmetrical decryption of other data in the terminal, and means for obtaining said expired decryption key by commanding decryption of an encrypted expired decryption key, executed at least in part in a cryptographic medium connected to said terminal, as a function of the generated encryption key stored in said cryptographic medium.
A computer arrangement adapted to be performed in a system for recovering at least one expired decryption key intended to be used for asymmetrically decrypting data encrypted in a terminal, after generation of a cryptographic encryption key/decryption key pair the decryption key whereof is intended to be used for asymmetrical decryption of other data in the terminal, said computer arrangement including a machine-readable medium or storage device including instructions adapted to cause the computer arrangement to perform the following operation:
- decrypting an encrypted expired decryption key as a function of the generated decryption key, executed at least, executed at least in part in a cryptographic medium connected to said terminal, to obtain said expired decryption key.
Dependencies are inferred from the claim text.