Method and system for cheon resistant static diffie-hellman security

    公开(公告)号:US10129026B2

    公开(公告)日:2018-11-13

    申请号:US15145428

    申请日:2016-05-03

    Applicant: Certicom Corp.

    Abstract: A method for providing Cheon-resistance security for a static elliptic curve Diffie-Hellman cryptosystem (ECDH), the method including providing a system for message communication between a pair of correspondents, a message being exchanged in accordance with ECDH instructions executable on computer processors of the respective correspondents, the ECDH instructions using a curve selected from a plurality of curves, the selecting including choosing a range of curves; selecting, from the range of curves, curves matching a threshold efficiency; excluding, within the selected curves, curves which may include intentional vulnerabilities; and electing, from non-excluded selected curves, a curve with Cheon resistance, the electing comprising a curve from an additive group of order q, wherein q is prime, such that q−1=cr and q+1=ds, where r and s are primes and c and d are integer Cheon cofactors of the group, such that cd≤48.

    Data card verification system
    42.
    发明授权

    公开(公告)号:US09990796B2

    公开(公告)日:2018-06-05

    申请号:US14629395

    申请日:2015-02-23

    Applicant: Certicom Corp.

    Abstract: A method of verifying a pair of correspondents in electronic transaction, the correspondents each including first and second signature schemes and wherein the first signature scheme is computationally more difficult in signing than verifying and the second signature scheme is computationally more difficult in verifying than signing. The method comprises the step of the first correspondent signing information according to the first signature scheme and transmitting the first signature to the second correspondent, the second correspondent verifying the first signature received from the first correspondent, wherein the verification is performed according to the first signature scheme. The second correspondent then signs information according to the second signature scheme and transmits the second signature to the first correspondent, the first correspondent verifies the second signature received from the second correspondent, wherein the verification is performed according to the second signature algorithm; the transaction is rejected if either verification fails. The method thereby allows one of the correspondents to participate with relatively little computing power while maintaining security of the transaction.

    Authenticated encryption method using working blocks

    公开(公告)号:US09917695B2

    公开(公告)日:2018-03-13

    申请号:US13793810

    申请日:2013-03-11

    CPC classification number: H04L9/30 H04L9/0637 H04L9/0643 H04L2209/125

    Abstract: A computer-implemented authenticated encryption method for converting a plaintext message into a ciphertext message. The method includes dividing the plaintext message into at least two working blocks, each working block having a mathematical relationship to the plaintext message. For each working block, a working block ciphertext is computed as a function of such working block, a deterministic working block initialization vector, and a deterministic working block encryption key. For each working block, a message authentication tag is computed as a function of a deterministic working block message authentication key and at least one of (a) the working block ciphertext computed for such working block and an indication corresponding to the mathematical relationship of such working block to the plaintext message and (b) such working block. The method further includes computing a global message authentication tag as a function of the message authentication tag computed for each working block and a global message authentication key. The ciphertext message comprises the working block ciphertext computed for each working block and the global message authentication tag.

    Disabling header compression over point-to-point protocol (PPP)

    公开(公告)号:US09629024B2

    公开(公告)日:2017-04-18

    申请号:US14470851

    申请日:2014-08-27

    Applicant: Certicom Corp.

    Abstract: A system and method for disabling header compression during an establishment and configuration of a communication protocol and communication channel between a pair of correspondents. The system comprises an initiating correspondent transmitting at least one PPP negotiation packet having at least one acceptable TCP/IP header compression option type. A software module of a responding correspondent intercepts and examines said at least one PPP negotiation packet before said at least one PPP negotiation packet reaches a PPP layer of the responding correspondent and modifies said acceptable TCP/IP header compression option type to an unacceptable TCP/IP header compression option type and transmits same to said PPP layer of the responding correspondent. The responding correspondent rejects said unacceptable TCP/IP header compression option type. Said software module receiving said modified PPP negotiation packet modifies same to said acceptable TCP/IP header compression option type, and transmitting said PPP negotiation packet to said initiating correspondent.

    SYSTEM AND METHOD OF LAWFUL ACCESS TO SECURE COMMUNICATIONS
    48.
    发明申请
    SYSTEM AND METHOD OF LAWFUL ACCESS TO SECURE COMMUNICATIONS 有权
    系统和方法进行安全通信

    公开(公告)号:US20160344775A1

    公开(公告)日:2016-11-24

    申请号:US15225543

    申请日:2016-08-01

    CPC classification number: H04L63/306 H04L9/0861 H04L2209/80

    Abstract: The present disclosure relates to systems and methods for secure communications. In some aspects, a method of signalling an interception time period is described. At least one keying information used by a KMF to regenerate a key is stored. A start_interception message is signaled from an ADMF to a CSCF. A halt_message is signaled from the ADMF to the CSCF.

    Abstract translation: 本公开涉及用于安全通信的系统和方法。 在一些方面,描述了用于发信号通知截取时间段的方法。 存储KMF用于重新生成密钥的至少一个密钥信息。 从ADMF向CSCF发送start_interception消息。 从ADMF向CSCF发出halt_message信号。

    Systems and Methods for Managing Lost Devices
    49.
    发明申请
    Systems and Methods for Managing Lost Devices 有权
    管理丢失设备的系统和方法

    公开(公告)号:US20160323844A1

    公开(公告)日:2016-11-03

    申请号:US15210341

    申请日:2016-07-14

    Applicant: Certicom Corp.

    Abstract: A method for a device to determine that it has been lost is provided. The method comprises the device determining its current location, the device comparing its current location to a plurality of stored locations, and the device determining that it has been lost when its current location is a stored location that has been designated as a location where the device is unlikely to be located or is not a stored location that has been designated as a location where the device is likely to be located.

    Abstract translation: 提供了一种用于确定其已经丢失的装置的方法。 该方法包括确定其当前位置的设备,该设备将其当前位置与多个存储位置进行比较,并且该设备确定当其当前位置是被指定为该设备的位置时的存储位置已丢失的设备 不太可能被定位或不被指定为设备可能位于的位置的存储位置。

Patent Agency Ranking