US 5,142,577 AGranted

Method and apparatus for authenticating messages

OwnerJose Pastorinventor

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method and system for authenication of communications. More particularly the subject application discloses a method and apparatus whereby a third party may validate that a communication is an authentic communication from a second party sent with the authorization of a first party. For example, the third party may be a postal service, the second party may be a mailer, and the communication may be a postal indicia showing that a mail piece has been properly franked. The first party and the second party share an encryption key, or a series of keys. The first party also has a second encryption key which the third party has the ability to decrypted. In the subject invention the first party encrypts a key shared with the second party with the first party's second key and transmits this to the second party. The second party then uses its copy of the key to encrypt information and appends its encrypted information to the message received from the first party and transmits all this to the third party. The third party may then decrypt the copy of the key encrypted by the first party and use this information to decrypt the information encrypted by the second party. The known technique of eliptical logarithms may be used to provide highly secure encryption of short messages. The second party may be a mailer and the apparatus of the subject invention may include a postage meter which prints the information transmitted to the third party, who may be a postal service, on a mail piece as a postal indicia.

Claims21

Dependent claims

A method for authenticating communications comprising the steps of:

generating:
an encryption/decryption key pair consisting of key E.sub.s and D.sub.s said keys being of a first order selected to provide a predetermined level of security;
a set numbers of {a'} wherein numbers a' which are members of set {a'} are approximately of said first order, and have the property that when encrypted with said key E.sub.s resulting encrypted numbers D.sub.s [a'] are of a second order substantially less than said first order;
hashing function H for mapping number of said first order onto a third, smaller order;
and,
an encrypting key K.sub.i :
providing said key E.sub.s, said set {a'} said hashing function H and said key K.sub.i to a first party;
providing said key K.sub.i to a second party;
providing said key D.sub.s and said hashing function H to a third party;
said first party:
selecting a particular one of said numbers a';
encrypting said selected number a' with said key E.sub.s to obtain a particular value E.sub.s [a'];
operating on said selected number a' with said hashing function H to obtain a second encrypting key K.sub.j, equal to H(a');
forming a first level message M1 including said encryption key K.sub.i ;
encrypting said first level message M1 with said second encrypting key K.sub.j ;
forming a second level message M2 including said encrypted first level message K.sub.j [M1 ] and said particular value E.sub.s [a'];
sending said second level message M2 to said second party;
said second party then:
encrypting information P with said key K.sub.j ;
combining said second level message M2 with said encrypted information K.sub.i [P] to form a third level message M3;
and
sending a communication comprising said third level message M3 to said third party;
said third party then:
recovering said particular value E.sub.s [a'] from said second level message M2 comprised in said third level message M3;
decrypting said particular value E.sub.s [a'] with said key D.sub.s to obtain said selected number a';
operating on said selected number a' with said hashing function H to obtain said second encryption key K.sub.j ;
recovering said encrypted first level message K.sub.j [M1] from said second level message M2 and decrypting said encrypted first level message K.sub.j [M1] with said second encryption key K.sub.j to obtain said first level message M1;
recovering said encrypted information K.sub.i [P] from said third level message M3 and said encryption key K.sub.i from said first level message M1;
and
decrypting said encrypted information K.sub.i [P] with said encryption key K.sub.i to obtain said information P;
whereby said third party acquires a basis to believe that said information P is an authentic communication sent by said second party with the authorization of said first party.

28 more elements

A system for authenticating postal indicia, comprising:

authorizing apparatus, said authorizing apparatus further comprising:
first storage means for storing one key E.sub.s, D.sub.s, and keys E.sub.s, D.sub.s, being of a first order selected to provide a predetermined level of security;
second storage means for storing:
a set of number {a'} each number a' having the property that when encrypted with said key E.sub.s the resulting values E.sub.s [a '] are of a second order substantially less than said first order;
a hashing function H for mapping number a' onto numbers of a third smaller order;
and,
an encryption key K.sub.i ;
first data processing means for:
selecting a particular one of said number a';
encrypting said selected number a' with said key E.sub.s to obtain a particular value E.sub.s [a'];
operating on said selected number a' with said hashing function H to obtain a second encryption key K.sub.j, equal to H(a');
forming a first level message M1 including said encryption key k.sub.j ;
encrypting said first level message M1 with said second encryption key K.sub.j [M1];
forming a second level message M2 including said encrypted first level message K.sub.j [M1] and said particular value E.sub.s [a'];
and,
transmission means responsive to said first data processing means for sending said second level message M2;
franking apparatus, for franking a mail piece, said franking apparatus comprising:
first receiving means for receiving said second level message M2
second receiving means for receiving postal information P relating to a mail piece;
accounting means responsive to said second receiving means for accounting for funds expended in franking said mail piece;
encryption means responsive to said accounting means for encrypting said postal information P with said key K.sub.i only if said funds have been accounted for by said accounting means;
second data processing means responsive to said first and second receiving means and to said encryption means for:
inputting said encrypted postal information K.sub.i [P] from said encryption means;
inputting said second level message M2 from said first receiving means
inputting said postal information P from said second receiving means;
and
forming a third level message M3 including said second level message M2 and said encrypted postal information K.sub.i [P];
and,
printing means responsive to said second data processing means for printing an indicia on said mail piece, said second data processing means controlling said printing means to print said indicia including said third level message M3 and said postal information P in plain text;
and,
authenticating apparatus, said authenticating apparatus further comprising:
scanning means for scanning said indicia, upon receipt of said mail piece, to read said third level message M3 and said postal information P form said plain text;
third storage means for securely storing said key D.sub.s ;
fourth storage means for storing said hashing function H;
third data processing means responsive to said third and forth storage means, and said scanning means for:
recovering said particular value E.sub.s [a'] from said third level message M3;
decrypting said particular value E.sub.s [a'] with said key D.sub.s to obtain said selected number a';
operating on said selected number a' with said hashing function H to obtain H(a') equal to said second encryption key K.sub.j ;
recovering said encrypted first level message K.sub.j [M1] from said third level message M3;
decrypting said encrypted first level message K.sub.j [M1] with said key K.sub.j to obtain said first level message M1;
recovering said encryption key K.sub.i from said first level message M1;
decrypting said encrypted postal information K.sub.i [P] to obtain said information P,
inputting said information P as scanned from said plane text and comparing said information P, as input, with said information P, as decrypted, to authenticate said indicia.

40 more elements

Dependencies are inferred from the claim text.

Facts

Application: 07/628,820Filed 17 Dec 1990
Granted: 25 Aug 1992
Term ends: Not estimatedThe source records don’t support an estimate.

Classification11 codes

G07B 17/00733
Franking apparatus: cryptography or similar special procedures in a franking system
H04L 9/302
Underlying computational problems or public-key parameters: involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes
H04L 9/321
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…
G06F 7/725
Finite field arithmetic: over elliptic curves