Cryptography inventions 04/08

20080095359 - Security system for wireless networks: The invention relates to a device (21) for managing guest key records (6) in wireless home networks (1), comprising at least one interface (211) for connecting a guest key transmitter (GKT) (5), a key generator (212) and a transmission unit (213) for transmitting a generated key record (6) to the... Agent: Philips Intellectual Property & Standards

20080095361 - Security-enhanced key exchange: A unique identifier of a remote device is not sent in clear text on a local interlace between the remote device and a device that can communicate with a wireless network, but a procedure for establishing an encryption key in both devices is still based on the unique identifier. Thus,... Agent: Potomac Patent Group PLLC

20080095360 - Signature system and signature method: A signature system in which size of data to be transmitted is small and data can be processed efficiently in a Merkle signature system having high security. A processing part 112 of a smartcard 110 divides a message to be signed into groups of specific numbers of bits, starting from... Agent: Antonelli, Terry, Stout & Kraus, LLP

20080095362 - Cryptographic key management in communication networks: An authentication server and a system and method for managing cryptographic keys across different combinations of user terminals, access networks, and core networks. A Transformation Coder Entity (TCE) creates a master key (Mk), which is used to derive keys during the authentication procedure. During handover between the different access types,... Agent: Ericsson Inc.

20080095357 - Cryptographic computation method, cryptographic system, and computer program: A system and method for achieving secure and fast computation in hyperelliptic cryptography is realized. Fast scalar multiplication is achieve by executing computing operations including halving as computing processing in scalar multiplication with respect to a divisor D in hyperelliptic curve cryptography. For example, computing operations including halving are executed... Agent: Bell, Boyd & Lloyd, LLP

20080095358 - Method and device for restoring degraded information: The present invention provides a technology which precisely restores a distribution of original information by carrying out an iterative calculation based on a distribution of degraded information and a transfer function including a phase characteristic of a transfer system. A method according to the present invention restores the original information... Agent: Oliff & Berridge, PLC

20080095363 - System and method for causing distortion in captured images: An image display system including an image generator configured to generate display information for at least four display primaries by applying distortion information to an input signal, where the distortion information configured to compensate for variations in human cone responses, and a display device including the at least four display... Agent: Hewlett Packard Company

20080095364 - Partial encryption: A multiple partial encryption device consistent with certain embodiments has an input for receiving a unencrypted video signal. An encryption arrangement produces a partially multiple encrypted video signal from the unencrypted video signal. An output provides the partially multiple encrypted video signal. This abstract is not to be considered limiting,... Agent: Miller Patent Services

20080095365 - Method and apparatus for supporting multiple broadcasters independently using a single conditional access system: A method and apparatus for brokering the enablement of the communication of encrypted media programs from a plurality of independent broadcasters to a plurality of receivers is disclosed. The system makes use of a pairing key for each provided service, which is differently encrypted by a pairing server and by... Agent: Gates & Cooper LLP Howard Hughes Center

20080095366 - Digital video receiver, ecm extract equipment, emm extract equipment, scramble key extract equipment, cci extract equipment, digital video receiving system, ecm extract method, emm extract method, scramble key extract method, cci extract method, digital v: A decryption process chip has a memory in which a first decryption control unit for decrypting a scramble key by using an ECM and an EMM is downloaded from outside and stored. A stream input unit extracts a packet including the ECM based on first information obtained from the first... Agent: Ratnerprestia

20080095367 - Methods and apparatus for confidentiality protection for fibre channel common transport: Methods and apparatus are provided for improving message-based security in a Fibre Channel network. More specifically, the present invention relates to methods and apparatus for providing confidentiality for Fibre Channel control messages encapsulated within Common Transport Information Units. Control messages transported with the Fibre Channel Common Transport protocol, and passed... Agent: Beyer Weaver LLP

20080095368 - Symmetric key generation apparatus and symmetric key generation method: Asymmetric key generation apparatus generates asymmetric key based on a different key material for each piece of data. The symmetric key generation apparatus is configured to generate a symmetric key of a practically different value for a key material of a different value. An encrypted piece of data has a... Agent: Staas & Halsey LLP

20080095369 - Method of configuring a node, related node and configuration server: y

20080095371 - Ends-messaging protocol that recovers and has backward security: The presented messaging protocol uses three new public keys in a signed and encrypted message to achieve backward security and recovery in an environment where an attacker now and then obtains the security parameters in exposed, decrypted form. Backward security is understood to mean that an adversary cannot decrypt those... Agent: Pentti Vataja

20080095370 - Method for securely extending key stream to encrypt high-entropy data: A stream stretcher is provided for securely expanding a key stream to match fee length of a data block to be encrypted and/or decrypted. A key stream is obtained having a length of LZ bits. A length LD corresponding, to a data block to be encrypted/decrypted is obtained, where LD>LZ.... Agent: Qualcomm Incorporated

20080095373 - Mobile terminal and gateway for remotely controlling data transfer from secure network: A data transfer system including mobile terminals and gateways for transferring data from a secure network to an external network under remote control using the mobile terminals. A first gateway produces and sends a first key to a second gateway through first and second mobile terminals. The second gateway produces... Agent: Staas & Halsey LLP

20080095372 - Playback apparatus and key management method: According to one embodiment, a playback apparatus includes a memory, a key deriving unit which derives first key information for decrypting the encrypted data, and a decrypting unit which decrypts the encrypted data by using the first key information derived by the key deriving unit. the key deriving unit produces... Agent: Knobbe Martens Olson & Bear LLP

20080095374 - Method and system for setting up a secure environment in wireless universal plug and play (upnp) networks: The invention describes a method of setting up a secure environment in wireless Universal Plug and Play (UPnP) networks, comprising a UPnP security console and UPnP controlled devices defined in the UPnP Device Security specification, wherein the entry of information concerning the UPnP security bootstrap as required in the UPnP... Agent: Philips Intellectual Property & Standards

20080095375 - Secret information management apparatus and secret information management system: In a secret information management system, a secret information management apparatus comprises a secret distribution unit which secretly distributes a data key k using a (k, n) threshold secret sharing scheme and creates n distributed keys B1, B2, . . . , Bn in the decryption of data D input... Agent: Finnegan, Henderson, Farabow, Garrett & Dunner LLP

20080089515 - Apparatus and method for inter-program authentication using dynamically-generated public/private key pairs: In a multi-tiered computing environment, a first program may authenticate with a second program using dynamically-generated public/private key pairs. An authentication token is constructed that includes user information and information about the first program and the second program. The first program then digitally signs the authentication token using the dynamically-generated... Agent: Martin & Associates, LLC

20080089514 - Signature generation device, key generation device, and signature generation method: There is provided a signature generation apparatus capable of preventing transcript attack on signature data. The signature generation apparatus for generating signature data for message data (i) acquires, according to a predetermined acquisition method, a private key, which is different from a private key used in a previous digital signature... Agent: Wenderoth, Lind & Ponack L.L.P.

20080089516 - Method and apparatus for providing secure internet protocol media services: A method and apparatus for securely and remotely enabling the playing of a media program encrypted by a content encryption key over the Internet is disclosed. A license encryption key and a content decryption key are separately and securely transmitted to the receiver. The license encryption key is stored in... Agent: Gates & Cooper LLP Howard Hughes Center

20080089517 - Method and system for access control and data protection in digital memories, related digital memory and computer program product therefor: A digital memory such as a memory card for mobile communication equipment, is adapted to be accessed by a plurality of users and have protected data stored therein. The memory is dynamically partitionable in private memory areas for storing data therein and has associated therewith a secrecy tool for securely... Agent: Finnegan, Henderson, Farabow, Garrett & Dunner LLP

20080089518 - Method and system for enhancing cryptographic capabilities of a wireless device using broadcasted random noise: A secret stream of bits begins by receiving a public random stream contained in a wireless communication signal at a transmit/receive unit. The public random stream is sampled and specific bits are extracted according to a shared common secret. These extracted bits are used to create a longer secret stream.... Agent: Volpe And Koenig, P.C. Dept. Icc

20080089519 - Secure key exchange algorithm for wireless protocols: A system for establishing encryption keys in a manner suitable for linking low complexity and/or power constrained wireless devices. The present invention uses a combination of encryption algorithms and events, possibly including user manual intervention, to create a randomized encryption key that is substantially more difficult for a third party... Agent: Morgan & Finnegan, L.L.P.

20080089520 - Methods and system for storing and retrieving identity mapping information: System and method for storing identity mapping information in an identity management system to enable a user authenticated at a first domain to access a second domain. The method may include digitally signing the identity mapping information by the user; providing the mapping information to an identity management system; and... Agent: Meyertons, Hood, Kivlin, Kowert & Goetzel, P.C.

20080089521 - Universal secure messaging for cryptographic modules: An anonymous secure messaging method and system for securely exchanging information between a host computer system and a functionally connected cryptographic module. The invention comprises a Host Security Manager application in processing communications with a security executive program installed inside the cryptographic module. An SSL-like communications pathway is established between... Agent: Stevens, Davis, Miller & Mosher, L.L.P.

20080084996 - Authenticated encryption method and apparatus: An authenticated encryption method and apparatus are described in which plaintext data is encrypted, using a secret key, to form ciphertext data. A message authentication code, MAC, is also formed in dependence on a combination of the ciphertext data and data characteristic of the plaintext data. The ciphertext data and... Agent: Hewlett Packard Company

20080084995 - Method and system for variable and changing keys in a code encryption system: Methods and systems are disclosed for decrypting segmented code of varying segment lengths wherein each segment of code may be protected with a different set of decryption parameters. Sets of decryption parameter information may be embedded subsequent to and contiguous with corresponding code segments. Sets of decryption algorithm parameter information... Agent: Mcandrews Held & Malloy, Ltd

20080084997 - Computing endomorphism rings of abelian surfaces over finite fields: Computing endomorphism rings of Abelian surfaces over finite fields is described. In one aspect, an endomorphism ring of an Abelian surface over a finite field is probabilistically computed. A genus-two curve is generated based on the probabilistically determined endomorphism ring. The genus-2 curve is used for encryption and decryption operations... Agent: Lee & Hayes Pllc

20080084998 - Encryption key management device and encryption key management method: According to one embodiment, an encryption key management device comprises a means for applying encryption processing by a common key system to a first key by using a second key generated from a random seed and an input password to record the encrypted first common key on an information recording... Agent: Pillsbury Winthrop Shaw Pittman, LLP

20080085000 - Content selection for partial encryption: A method of selecting data for multiple carriage partial encryption consistent with certain embodiments involves examining unencrypted packets of data in a digital audio/video data stream to identify a packet type; and selecting packets of the identified packet type for multiple partial encryption, wherein the amount of data to be... Agent: Miller Patent Services

20080084999 - Encoders and image encoding methods: An encoder. A first encoding unit discrete cosine transforms an input frame, quantizes the transformation result, and generates a first frame according to a motion vector. The first encoding unit includes a first feedback unit dequantizing the transformation result, generating a processing signal and a first reconstruction signal according to... Agent: Birch Stewart Kolasch & Birch

20080085001 - Method of mutual authentication between a communication interface and a host processor of an nfc chipset: An authentication method between a secure host processor and a controller of an NFC system, the controller being equipped with an NFC interface circuit sending and receiving contactless data, includes connecting the host processor to the controller and checking that there is a predefined relation between a first secret data... Agent: Panitch Schwarze Belisario & Nadel LLP

20080085002 - Digital local network, notably digital home network, and method for creating and updating such a network: presentation devices (2, 3) for receiving the data flowing in the network and presenting them at a point of the network. The data flow in the network in encrypted form and all the devices of the network use a single key, the local key of the network, for the encryption... Agent: Joseph J. Laks Thomson Licensing Llc

20080085003 - Key production system: A key production system to determine a cryptographic key for a selected cryptoperiod being later than or equal to a cryptoperiod-A, and earlier than or equal to a different cryptoperiod-B, the system including a first receiver to receive a first key-component, associated with cryptoperiod-A, forming part of a first hash-chain... Agent: Welsh & Katz, Ltd

20080085004 - Cryptographic key management in a communication network: A communication network (22) includes a central node (30) loaded with a trusted key (26) and key material (56) corresponding to an asymmetric key agreement protocol (48). The network (22) further includes vulnerable nodes (32) loaded with key material (69) corresponding to the protocol (48). Successive secure connections (68, 70)... Agent: Meschkow & Gresham, P.L.C

20080085005 - Method and apparatus for broadcast encryption using bilinear map: A method and apparatus are provided for broadcast encryption using a bilinear map, defined on elliptic curves. The method for the broadcast encryption using the bilinear map includes generating a first random number for all nodes except for a plurality of leaf nodes of an a-ary tree structure, configured in... Agent: Roylance, Abrams, Berdo & Goodman, L.l.p.

20080080706 - Code conversion apparatus, code conversion method, and computer product: A code conversion apparatus, a disk drive, a code buffer, and an encryption buffer are included in a storage. The code buffer stores therein first encrypted data present in the disk drive, and the encryption buffer stores therein first unencrypted data present in the disk drive. An encrypting unit encrypts... Agent: Staas & Halsey LLP

20080080707 - Rsa signature authentication with reduced computational burden: Methods and apparatuses enable quick authentication of a Rivest, Shamir, and Adleman (RSA) compliant signature by performing non-modular arithmetic operations on one or more pre-computed constants in place of at least one modular arithmetic operation. In one embodiment, the signature is authenticated by computing SE (mod N) by performing k... Agent: Intel/blakely

20080080708 - Key wrapping system and method using encryption: A method for enabling secure communication between a first node in a distributed network and at least one second node in the distributed network by using a cryptographic key, including the steps of using an encrypting key to encrypt the cryptographic key to generate a wrap key in a secure... Agent: Triangle Patents, P.l.l.c.

20080080709 - Method for encrypting information and device for realization of the method: The cryptographic system and method for securing data from unauthorized access includes, in one embodiment, an iterative probabilistic cipher for converting plaintext into ciphertext comprising at least two components, a core and a flag. A corresponding key and the core and flag may be output in one or more data... Agent: Bardmesser Law Group, P.C.

20080080710 - Method for generating secure elliptic curves using an arithmetic-geometric mean iteration: Methods for determining whether an arbitrary elliptic curve over a binary field is secure, by using a novel non-converging Arithmetic-Geometric Mean iteration to determine the exact number of points on the curve. The methods provide rapid generation of secure curves for Elliptic-Curve Cryptography by selecting a secure curve from among... Agent: Townsend And Townsend And Crew, LLP

20080080711 - Dual conditional access module architecture and method and apparatus for controlling same: A method apparatus for providing conditional access to media programs is disclosed. The apparatus comprises a first conditional access module that is integral with a receiver; a second conditional access module that is removably communicatively coupleable with the receiver; and a conditional access kernel that controls the conditional access operations... Agent: Gates & Cooper LLP Howard Hughes Center

20080080712 - System and methods for secure communication using an enhanced gps receiver: An enhanced GPS receiver is provided for secure location information communication. The GPS receiver includes a GPS signal receiving unit, a GPS signal processing unit, and en encryption module. The GPS signal receiving unit is used to receive the GPS signals. The GPS signal processing unit coupled to the GPS... Agent: Wang Law Firm, Inc.

20080080713 - Method for managing traffic encryption key in wireless portable internet system and protocol configuration method thereof, and operation method of traffic encryption key state machine in subscriber station: Disclosed is a traffic encryption key (TEK) management method for automatically generating a TEK for a multicast or broadcast service by a base station to periodically update a TEK used by a subscriber station. The base station transmits the first Key Update Command message for updating a group key encryption... Agent: The Farrell Law Firm, P.C.

20080080714 - Universal key authority point with key distribution/generation capability to any form of encryption: System and methods for simplified management of secured data and communications networks with a universal key authority point for the generation and distribution of keys and management of same within the network.... Agent: Triangle Patents, P.l.l.c.

20080080715 - Apparatus and method for high-speed, large-volume data encryption using secure memory: Provided are an apparatus and a method for data encryption using a secure memory, and more particularly, to an apparatus and a method for high-speed, large-volume data encryption using a security function included in the secure memory in response to an encryption/decryption request of a user application program. Conventional data... Agent: Ladas & Parry LLP

20080080716 - Back-up for key authority point for scaling and high availability for stateful failover: System and methods for simplified management of secured data and communications networks with a back-up for a key authority point for scalability and availability for stateful failover.... Agent: Triangle Patents, P.l.l.c.

20080080717 - Information processing apparatus, control method therefor and program: An information processing apparatus has a decrypting part configured to receive decrypting key information from a managing apparatus which manages the decrypting key information for decrypting information to decrypt the information; a monitoring part configured to communicate with the managing apparatus, after the decrypting until the information is encrypted again,... Agent: Staas & Halsey LLP

20080080718 - Data security in an off-premise environment: A system that enables a cloud-based data repository to function as a secure ‘drop-box’ for data that corresponds to a user is provided. The ‘drop box’ can be facilitated through the use of cryptographic keying technologies. For instance, data that is ‘dropped’ by or on behalf of a particular user... Agent: Amin. Turocy & Calvin, LLP