Key recovery system

A key recovery system comprising:

• a recoverer device for storing an encrypted sentence with key recovery information, transmitting a key recovery request when the key recovery request is received, transmitting authentication response information by a key recoverer's inputting authentication information when an authentication request is received, and recovering a key when key information is received;
• a key recovery information distribution device for obtaining access information according to the key recovery information and distributing the key recovery information when the key recovery information is received from said recoverer device, transmitting an authentication request to said recoverer device when the authentication request is received, transmitting an authentication response when the authentication response is received from said recoverer device, and transmitting the key information to said recoverer device when the key information is received;
• and
• at least one key recovery device, which is accessed based on said access information by said key recovery information distribution device, for obtaining the key information from the key recovery information when the key recovery information is received, decrypting a recovery condition according to the key information, transmitting the authentication request based on the recovery condition to said recoverer device through said key recovery information distribution device, authenticating a recoverer directly with said recoverer device by verifying the authentication response when the authentication response is received from said recoverer device, and transferring the key information to said recoverer device through said key recovery information distribution device when the recoverer is successfully authenticated.

A key recovery system comprising:

• a recoverer device for providing a key recovery request for a data key from a recoverer;
• a key recovery information distribution device for providing a communications line in response to the key recovery request;
• at least one key recovery device, connected to said recoverer device through said communications line, for decrypting the data key or data key information in key recovery information;
• means for transmitting the key recovery information from said recoverer device to each key recovery device through said communications line, and recovering the data key and a recovery condition;
• means for authenticating said recoverer by direct communications between said recoverer device and said key recovery device under the recovery condition;
• and
• means for transmitting to said recoverer device the data key or the data key information recovered by said key recovery device when the recoverer is authenticated.

A key recovery method comprising:

• a recoverer step for storing an encrypted sentence with key recovery information, transmitting a key recovery request when the key recovery request is received, transmitting authentication response information by a key recoverer's inputting authentication information when an authentication request is received, and recovering a key when key information is received;
• a key recovery information distributing step for obtaining access information about a key recovery step from a database according to the key recovery information and distributing the key recovery information to the key recovery step when the key recovery information is received from said recoverer step, and transmitting the key information to said recoverer step when the key information is received;
• and
• key recovery step for obtaining the key information when the key recovery information is received, transmitting an authentication request to said recoverer step through said key recovery information distributing step, verifying an authentication response when the authentication response is received from said recoverer step, and transferring the key information to said recoverer step through said key recovery information distributing step when the authentication response is successfully verified.

A key recovery method for recovering a data key when there is no key for decrypting the data key using a recoverer device for providing a key recovery request for the data key from a recoverer, a distribution device for providing a communication line for a corresponding key recovery device in response to said key recovery request, and at least one key recovery device for decrypting a part of data key information in key recovery information, said method comprising the steps of:

• transmitting the key recovery information from the recoverer device to each key recovery device through said communications line to recover the data key and a recovery condition;
• authenticating said recoverer by direct communications between the recoverer device and the key recovery device under the recovery condition;
• and
• transmitting the key recovered by the key recovery device to the recoverer device when the recoverer is successfully authenticated.

A computer-readable storage medium used to direct a computer to perform:

• a recoverer function for storing an encrypted sentence with key recovery information, transmitting a key recovery request when the key recovery request is received, transmitting authentication response information by a key recoverer's inputting authentication information when an authentication request is received, and recovering a key when key information is received;
• a key recovery information distributing function for obtaining access information about a key recovery function from a database according to the key recovery information and distributing the key recovery information to the key recovery function when the key recovery information is received from said recoverer function, transmitting an authentication request to said recoverer function when the authentication request is received, transmitting an authentication response to the recoverer function when the authentication response is received from said recoverer function in response to the authentication request, and transmitting the key information to said recoverer function when the key information is received;
• and
• key recovery function for obtaining the key information when the key recovery information is received, transmitting an authentication request to said recoverer function through said key recovery information distributing function, authenticating a recoverer directly with said recoverer function by verifying an authentication response when the authentication response is received from said recoverer function, and transferring the key information to said recoverer function through said key recovery information distributing function when the authentication response is successfully verified.

A computer-readable storage medium used to direct a computer to perform:

• a recoverer function for providing a key recovery request for a data key from a recoverer;
• a key recovery information distributing function for providing a communication line for a corresponding key recovery function in response to the key recovery request;
• at least one key recovery function for decrypting a part of data key information in key recovery information;
• a function of transmitting the key recovery information from the recoverer function to each key recovery function through said communications line to recover the data key and a recovery condition;
• a function of authenticating said recoverer by direct communication between said recoverer function and said key recovery function under the recovery condition;
• and
• a function of transmitting the key recovered by said key recovery function to said recoverer function when the recoverer is successfully authenticated.

A key recovery system for storing encrypted data and key recovery information containing data key for providing said encrypted data, retrieving the data key from the key recovery information, and decrypting the encrypted data, comprising:

• a recoverer device for providing a recovery request for said data key from a recoverer;
• a key recovery information distribution device for providing a communications line in response to said recovery request;
• and
• at least one key recovery device, connected to said communications line, for decrypting and retrieving all or a part of the data key from the key recovery information, authenticating said recoverer directly with the recoverer device, and providing key information corresponding to said data key to said recoverer device,
• wherein said key recovery information further comprises a key recovery condition;
• a recover request is transmitted to said key recovery device through said key recovery information distribution device;
• said recoverer is authenticated directly between said recoverer device and said key recovery device according to a recovery condition through said key recovery information distribution device;
• when said recoverer is authenticated, said key recovery information distribution device obtains the key information from said key recovery device;
• and said key recovery information distribution device recovers the data key according to the key information, and transmits the data key to said recoverer device, and
• wherein said key recovery information distribution device recovers data based on said data key.

A key recovery system for storing encrypted data and key recovery information containing data key for providing said encrypted data, retrieving the data key from the key recovery information, and decrypting the encrypted data, comprising:

• a recoverer device for providing a recovery request for said data key from a recoverer;
• a key recovery information distribution device for providing a communications line in response to said recovery request;
• and
• at least one key recovery device, connected to said communications line, for decrypting and retrieving all or a part of the data key from the key recovery information, authenticating said recoverer directly with the recoverer device, and providing key information corresponding to said data key to said recoverer device,
• wherein said key recovery information further comprises a key recovery condition;
• a recover request is transmitted to said key recovery device through said key recovery information distribution device;
• said recoverer is authenticated directly between said recoverer device and said key recovery device according to a recovery condition through said key recovery information distribution device;
• when said recoverer is authenticated, said key recovery information distribution device obtains the key information from said key recovery device;
• and said key recovery information distribution device recovers the data key according to the key information, and transmits the data key to said recoverer device, and
• wherein said recoverer is authenticated through a direct connection line between said recoverer device and said key recovery device without said key recovery information distribution device, and further
• wherein said key recovery information distribution device recovers data based on said data key.

A key recovery system for storing encrypted data and key recovery information containing data key for providing said encrypted data, retrieving the data key from the key recovery information, and decrypting the encrypted data, comprising:

• a recoverer device for providing a recovery request for said data key from a recoverer;
• a key recovery information distribution device for providing a communications line in response to said recovery request;
• and
• at least one key recovery device, connected to said communications line, for decrypting and retrieving all or a part of the data key from the key recovery information, authenticating said recoverer directly with the recoverer device, and providing key information corresponding to said data key to said recoverer device,
• wherein authority for said key recovery information is distributed in a serial method to each key recovery device.

A method for recovering an encryption key, comprising:

• storing an encrypted sentence including key recovery information;
• authenticating a recoverer directly with a key recovery function by transmitting a key recovery request when the key recovery request is received from the recoverer;
• transmitting authentication response information by the recoverer's inputting authentication information when an authentication request is received;
• and
• recovering a key when the authentication response is authenticated.