Diversifying a base symmetric key based on a public key
AssigneeCryptography Research, Inc.
InventorAmbuj Kumar
Life of this patent
Estimating the term…
Abstract
A symmetric key that is stored at a device may be received. A public key from a remote entity may also be received at the device. Furthermore, a derived key may be generated based on a one way function between the symmetric key that is stored at the device and the public key that is received from the remote entity. The derived key may be encrypted with the public key and transmitted to the remote entity. The encryption of the derived key with the public key may provide secure transmission of the derived key to an authorized remote entity with a private key that may be used to decrypt the encrypted derived key.
Claims21
(canceled)
A method comprising:
- receiving, by a device from a remote entity, a root signed block including a delegate public key, wherein the delegate public key is signed by a root private key;
- retrieving a root public key that corresponds to the root private key;
- verifying the root signed block with the root public key to retrieve the delegate public key;
- generating, by the device, an encrypted derived key based on a combination of the delegate public key and a symmetric base key stored at the device;
- and
- transmitting the encrypted derived key to the remote entity.
A system comprising:
- a memory storing a root public key;
- and
- a processing device operatively coupled to the memory, the processing device to:
- receive a root signed block including a delegate public key from a remote entity, wherein the delegate public key is signed by a root private key;
- retrieve the root public key that corresponds to the root private key;
- verify the root signed block with the root public key to retrieve the delegate public key;
- generate an encrypted derived key based on a combination of the delegate public key and a symmetric base key stored at the system;
- and
- transmit the encrypted derived key to the remote entity.
A non-transitory computer readable medium including data that, when accessed by a processing device, cause the processing device to perform operations comprising:
- receiving, from a remote entity, a root signed block including a delegate public key, wherein the delegate public key is signed by a root private key;
- retrieving a root public key that corresponds to the root private key;
- verifying the root signed block with the root public key to retrieve the delegate public key;
- generating an encrypted derived key based on a combination of the delegate public key and a symmetric base key stored at the processing device;
- and
- transmitting the encrypted derived key to the remote entity.
Dependencies are inferred from the claim text.