CA2241745A1 - Method and apparatus for controlling access to encrypted data files in a computer system - Google Patents

Method and apparatus for controlling access to encrypted data files in a computer system

Info

Publication number
CA2241745A1
CA2241745A1 CA002241745A CA2241745A CA2241745A1 CA 2241745 A1 CA2241745 A1 CA 2241745A1 CA 002241745 A CA002241745 A CA 002241745A CA 2241745 A CA2241745 A CA 2241745A CA 2241745 A1 CA2241745 A1 CA 2241745A1
Authority
CA
Canada
Prior art keywords
hashed
passwords
file
password
key
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CA002241745A
Other languages
French (fr)
Other versions
CA2241745C (en
Inventor
Alan D. Eldridge
Charles W. Kaufman
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
International Business Machines Corp
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Publication of CA2241745A1 publication Critical patent/CA2241745A1/en
Application granted granted Critical
Publication of CA2241745C publication Critical patent/CA2241745C/en
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/40—User authentication by quorum, i.e. whereby two or more security principals are required
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6227—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database where protection concerns the structure of data, e.g. records, types, queries
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2107—File encryption

Abstract

In a system in which encrypted information can be protected and maintained by multiple users using passwords in concert, a file with secure data contains both an unencrypted header and an encrypted data portion. The data portion contains both the secured data and a list of hashed passwords and is encrypted with a single file key. The unencrypted file header contains two tables. The first table is a list of passwords, where each password is cryptographically hashed using a second, different hashing technique than the hashed passwords in the data portion of the file. The second table is a list of cryptographically hashed combinations of cryptographically hashed passwords, where the combinations correspond to authorized user quorums and the passwords are hashed using the same technique as the passwords stored in the data portion of the file. Each hashed combination on the list is also used as a password key to encrypt the file key. During use of the system, an authorized user must enter a password which, when hashed, can be found in the first table. If the entered password is found in the first table, a check is made to determine if enough authorized users have entered passwords to form a quorum.
If there is a quorum, then passwords of the users in the quorum are hashed with the first hashing technique, combined and hashed again to form a password key. The file key can be decrypted with the password key and used to decrypt the file. The hashed passwords in the protected portion of the file can then be used to maintain the password lists.
CA002241745A 1995-12-28 1996-12-27 Method and apparatus for controlling access to encrypted data files in a computer system Expired - Fee Related CA2241745C (en)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US08/579,812 US5787169A (en) 1995-12-28 1995-12-28 Method and apparatus for controlling access to encrypted data files in a computer system
US08/579,812 1995-12-28
PCT/US1996/020487 WO1997024675A1 (en) 1995-12-28 1996-12-27 Method and apparatus for controlling access to encrypted data files in a computer system

Publications (2)

Publication Number Publication Date
CA2241745A1 true CA2241745A1 (en) 1997-07-10
CA2241745C CA2241745C (en) 2003-04-29

Family

ID=24318456

Family Applications (1)

Application Number Title Priority Date Filing Date
CA002241745A Expired - Fee Related CA2241745C (en) 1995-12-28 1996-12-27 Method and apparatus for controlling access to encrypted data files in a computer system

Country Status (7)

Country Link
US (2) US5787169A (en)
EP (1) EP0976049B1 (en)
JP (1) JP3807747B2 (en)
AT (1) ATE298436T1 (en)
CA (1) CA2241745C (en)
DE (1) DE69634880T2 (en)
WO (1) WO1997024675A1 (en)

Families Citing this family (167)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6023506A (en) * 1995-10-26 2000-02-08 Hitachi, Ltd. Data encryption control apparatus and method
JP3060996B2 (en) * 1997-05-30 2000-07-10 日本電気株式会社 Wireless data communication device
US6079021A (en) * 1997-06-02 2000-06-20 Digital Equipment Corporation Method and apparatus for strengthening passwords for protection of computer systems
US6064736A (en) * 1997-09-15 2000-05-16 International Business Machines Corporation Systems, methods and computer program products that use an encrypted session for additional password verification
US6230269B1 (en) * 1998-03-04 2001-05-08 Microsoft Corporation Distributed authentication system and method
JP4169822B2 (en) * 1998-03-18 2008-10-22 富士通株式会社 Data protection method for storage medium, apparatus therefor, and storage medium therefor
US7096358B2 (en) * 1998-05-07 2006-08-22 Maz Technologies, Inc. Encrypting file system
WO1999066383A2 (en) * 1998-06-15 1999-12-23 Dmw Worldwide, Inc. Method and apparatus for assessing the security of a computer system
WO2000025474A1 (en) * 1998-10-26 2000-05-04 Bradley Madison Company Doing Business As Evolv Adaptive Technology Cryptographic protocol for financial transactions
US6957330B1 (en) 1999-03-01 2005-10-18 Storage Technology Corporation Method and system for secure information handling
US6668323B1 (en) * 1999-03-03 2003-12-23 International Business Machines Corporation Method and system for password protection of a data processing system that permit a user-selected password to be recovered
US6292692B1 (en) 1999-04-30 2001-09-18 Medical Research Laboratories, Inc. Medical treatment device with functions, operated under passcode control
US6708272B1 (en) 1999-05-20 2004-03-16 Storage Technology Corporation Information encryption system and method
US6367010B1 (en) * 1999-07-02 2002-04-02 Postx Corporation Method for generating secure symmetric encryption and decryption
US7151832B1 (en) 1999-11-18 2006-12-19 International Business Machines Corporation Dynamic encryption and decryption of a stream of data
KR100380250B1 (en) * 2000-02-21 2003-04-18 트렉 2000 인터네셔널 엘티디. A Portable Data Storage Device
US7178021B1 (en) * 2000-03-02 2007-02-13 Sun Microsystems, Inc. Method and apparatus for using non-secure file servers for secure information storage
US6826686B1 (en) * 2000-04-14 2004-11-30 International Business Machines Corporation Method and apparatus for secure password transmission and password changes
US7278023B1 (en) * 2000-06-09 2007-10-02 Northrop Grumman Corporation System and method for distributed network acess and control enabling high availability, security and survivability
CA2351291A1 (en) * 2000-06-26 2001-12-26 Nadine Smolarski-Koff Data exchange method and communication protocol used during same
US7020773B1 (en) * 2000-07-17 2006-03-28 Citrix Systems, Inc. Strong mutual authentication of devices
US6947556B1 (en) 2000-08-21 2005-09-20 International Business Machines Corporation Secure data storage and retrieval with key management and user authentication
US7010689B1 (en) 2000-08-21 2006-03-07 International Business Machines Corporation Secure data storage and retrieval in a client-server environment
US6775668B1 (en) * 2000-09-11 2004-08-10 Novell, Inc. Method and system for enhancing quorum based access control to a database
US6986040B1 (en) 2000-11-03 2006-01-10 Citrix Systems, Inc. System and method of exploiting the security of a secure communication channel to secure a non-secure communication channel
WO2002037728A1 (en) * 2000-11-03 2002-05-10 Fusionone, Inc. Updating security schemes for remote client access
US7197765B2 (en) * 2000-12-29 2007-03-27 Intel Corporation Method for securely using a single password for multiple purposes
US20020122553A1 (en) * 2001-03-01 2002-09-05 International Business Machines Corporation Method and apparatus for lightweight rekeying of a master key in a single sign-on system
US7350078B1 (en) 2001-04-26 2008-03-25 Gary Odom User selection of computer login
ATE335236T1 (en) * 2001-06-28 2006-08-15 Trek 2000 Int Ltd DATA TRANSFER PROCEDURES AND FACILITIES
WO2003003295A1 (en) * 2001-06-28 2003-01-09 Trek 2000 International Ltd. A portable device having biometrics-based authentication capabilities
WO2003003278A1 (en) * 2001-06-28 2003-01-09 Trek 2000 International Ltd. A portable device having biometrics-based authentication capabilities
US7421411B2 (en) 2001-07-06 2008-09-02 Nokia Corporation Digital rights management in a mobile communications environment
US8117450B2 (en) * 2001-10-11 2012-02-14 Hewlett-Packard Development Company, L.P. System and method for secure data transmission
US7203317B2 (en) * 2001-10-31 2007-04-10 Hewlett-Packard Development Company, L.P. System for enabling lazy-revocation through recursive key generation
US20030093381A1 (en) * 2001-11-09 2003-05-15 David Hohl Systems and methods for authorization of data strings
US7370366B2 (en) * 2001-11-16 2008-05-06 International Business Machines Corporation Data management system and method
US8006280B1 (en) 2001-12-12 2011-08-23 Hildebrand Hal S Security system for generating keys from access rules in a decentralized manner and methods therefor
US10033700B2 (en) * 2001-12-12 2018-07-24 Intellectual Ventures I Llc Dynamic evaluation of access rights
US7930756B1 (en) 2001-12-12 2011-04-19 Crocker Steven Toye Multi-level cryptographic transformations for securing digital assets
US7562232B2 (en) 2001-12-12 2009-07-14 Patrick Zuili System and method for providing manageability to security information for secured items
US7921450B1 (en) 2001-12-12 2011-04-05 Klimenty Vainstein Security system using indirect key generation from access rules and methods therefor
US7921284B1 (en) 2001-12-12 2011-04-05 Gary Mark Kinghorn Method and system for protecting electronic data in enterprise environment
US7921288B1 (en) 2001-12-12 2011-04-05 Hildebrand Hal S System and method for providing different levels of key security for controlling access to secured items
US7178033B1 (en) 2001-12-12 2007-02-13 Pss Systems, Inc. Method and apparatus for securing digital assets
US7631184B2 (en) 2002-05-14 2009-12-08 Nicholas Ryan System and method for imposing security on copies of secured items
US7380120B1 (en) 2001-12-12 2008-05-27 Guardian Data Storage, Llc Secured data format for access control
US8065713B1 (en) 2001-12-12 2011-11-22 Klimenty Vainstein System and method for providing multi-location access management to secured items
USRE41546E1 (en) 2001-12-12 2010-08-17 Klimenty Vainstein Method and system for managing security tiers
US10360545B2 (en) 2001-12-12 2019-07-23 Guardian Data Storage, Llc Method and apparatus for accessing secured electronic data off-line
US7478418B2 (en) 2001-12-12 2009-01-13 Guardian Data Storage, Llc Guaranteed delivery of changes to security policies in a distributed system
US7260555B2 (en) 2001-12-12 2007-08-21 Guardian Data Storage, Llc Method and architecture for providing pervasive security to digital assets
US7565683B1 (en) 2001-12-12 2009-07-21 Weiqing Huang Method and system for implementing changes to security policies in a distributed security system
US7681034B1 (en) 2001-12-12 2010-03-16 Chang-Ping Lee Method and apparatus for securing electronic data
US7783765B2 (en) * 2001-12-12 2010-08-24 Hildebrand Hal S System and method for providing distributed access control to secured documents
US7143113B2 (en) * 2001-12-21 2006-11-28 Cybersoft, Inc. Apparatus, methods and articles of manufacture for securing and maintaining computer systems and storage media
US7950066B1 (en) 2001-12-21 2011-05-24 Guardian Data Storage, Llc Method and system for restricting use of a clipboard application
US7249379B2 (en) * 2002-02-01 2007-07-24 Systems Advisory Group Enterprises, Inc. Method and apparatus for implementing process-based security in a computer system
CN100520935C (en) * 2002-02-07 2009-07-29 特科2000国际有限公司 Portable data storage and image recording device capable of directy connecting to computer USB port
US8176334B2 (en) 2002-09-30 2012-05-08 Guardian Data Storage, Llc Document security system that permits external users to gain access to secured files
KR100450953B1 (en) * 2002-03-05 2004-10-02 삼성전자주식회사 User authentication method using password
ATE345530T1 (en) * 2002-03-12 2006-12-15 Trek 2000 Int Ltd SYSTEM AND APPARATUS FOR ACCESSING AND TRANSPORTING ELECTRONIC TRANSMISSIONS USING A PORTABLE STORAGE DEVICE
US8613102B2 (en) 2004-03-30 2013-12-17 Intellectual Ventures I Llc Method and system for providing document retention using cryptography
EP1454240B1 (en) * 2002-05-13 2006-02-08 Trek 2000 International Ltd System and apparatus for compressing and decompressing data stored to a portable data storage device
US20030212911A1 (en) * 2002-05-13 2003-11-13 International Business Machines Corporation Secure control of access to data stored on a storage device of a computer system
US7167980B2 (en) * 2002-05-30 2007-01-23 Intel Corporation Data comparison process
US20030226040A1 (en) * 2002-06-03 2003-12-04 International Business Machines Corporation Controlling access to data stored on a storage device of a trusted computing platform system
TW588243B (en) * 2002-07-31 2004-05-21 Trek 2000 Int Ltd System and method for authentication
WO2004034184A2 (en) * 2002-08-23 2004-04-22 Exit-Cube, Inc. Encrypting operating system
JP4553565B2 (en) * 2002-08-26 2010-09-29 パナソニック株式会社 Electronic value authentication method, authentication system and device
US7512810B1 (en) 2002-09-11 2009-03-31 Guardian Data Storage Llc Method and system for protecting encrypted files transmitted over a network
KR20040031463A (en) * 2002-10-07 2004-04-13 (주)메트로디알엠 System for packaging a digital contents file and method thereof
US8447990B2 (en) * 2002-10-25 2013-05-21 Cambridge Interactive Development Corp. Password encryption key
US7836310B1 (en) 2002-11-01 2010-11-16 Yevgeniy Gutnik Security system that uses indirect password-based encryption
US20040111610A1 (en) * 2002-12-05 2004-06-10 Canon Kabushiki Kaisha Secure file format
US20050235145A1 (en) * 2002-12-05 2005-10-20 Canon Kabushiki Kaisha Secure file format
US7577838B1 (en) 2002-12-20 2009-08-18 Alain Rossmann Hybrid systems for securing digital assets
US7890990B1 (en) 2002-12-20 2011-02-15 Klimenty Vainstein Security system with staging capabilities
GB2402234A (en) * 2003-04-29 2004-12-01 Little Cat Z Ltd Authorising a user who has forgotten their computer password
US8707034B1 (en) 2003-05-30 2014-04-22 Intellectual Ventures I Llc Method and system for using remote headers to secure electronic files
US7730543B1 (en) 2003-06-30 2010-06-01 Satyajit Nath Method and system for enabling users of a group shared across multiple file security systems to access secured files
WO2005003938A1 (en) * 2003-07-04 2005-01-13 Nokia Corporation Key storage administration
US7555558B1 (en) 2003-08-15 2009-06-30 Michael Frederick Kenrich Method and system for fault-tolerant transfer of files across a network
JP5058600B2 (en) * 2003-09-12 2012-10-24 イーエムシー コーポレイション System and method for providing contactless authentication
US7222312B2 (en) * 2003-09-26 2007-05-22 Ferguson John G Secure exchange of information in electronic design automation
US7353468B2 (en) * 2003-09-26 2008-04-01 Ferguson John G Secure exchange of information in electronic design automation
US7703140B2 (en) 2003-09-30 2010-04-20 Guardian Data Storage, Llc Method and system for securing digital assets using process-driven security policies
US8127366B2 (en) 2003-09-30 2012-02-28 Guardian Data Storage, Llc Method and apparatus for transitioning between states of security policies used to secure electronic documents
US7565702B2 (en) * 2003-11-03 2009-07-21 Microsoft Corporation Password-based key management
JP4587158B2 (en) * 2004-01-30 2010-11-24 キヤノン株式会社 Secure communication method, terminal device, authentication service device, computer program, and computer-readable recording medium
US9589117B2 (en) * 2004-02-17 2017-03-07 Hewlett-Packard Development Company, L.P. Computer security system and method
US20050204174A1 (en) * 2004-03-11 2005-09-15 International Business Machines Corporation Password protection mechanism
US20050210259A1 (en) * 2004-03-22 2005-09-22 Sharp Laboratories Of America, Inc. Scan to confidential print job communications
JP2005327235A (en) * 2004-04-13 2005-11-24 Hitachi Ltd Method for encryption backup and method for decryption restoration
US7707427B1 (en) 2004-07-19 2010-04-27 Michael Frederick Kenrich Multi-level file digests
US7784088B2 (en) * 2004-07-30 2010-08-24 Research In Motion Limited Method and system for managing delayed user authentication
TWI245223B (en) * 2004-07-30 2005-12-11 Transcend Information Inc Embedded software operating method and hardware architecture for portable disc drive
CA2575288C (en) 2004-07-30 2017-10-31 Research In Motion Limited Method and system for coordinating client and host security modules
KR100609701B1 (en) * 2004-08-05 2006-08-09 한국전자통신연구원 An transaction certification method and system to protect privacy on electronic transaction details
US7941671B2 (en) * 2004-10-14 2011-05-10 Oracle International Corporation Method and apparatus for accommodating multiple verifier types with limited storage space
US7802096B1 (en) * 2004-10-19 2010-09-21 Cisco Technology, Inc. Fallback key retrieval
US7814317B1 (en) * 2004-10-19 2010-10-12 Cisco Technology, Inc. Multiple password documents
US8789195B2 (en) 2004-12-22 2014-07-22 Telecom Italia S.P.A. Method and system for access control and data protection in digital memories, related digital memory and computer program product therefor
US8219823B2 (en) * 2005-03-04 2012-07-10 Carter Ernst B System for and method of managing access to a system using combinations of user information
US20060206919A1 (en) * 2005-03-10 2006-09-14 Axalto Sa System and method of secure login on insecure systems
EP1715404A1 (en) * 2005-04-22 2006-10-25 Siemens Aktiengesellschaft System for the storage and recovery of confidential information
US8272058B2 (en) 2005-07-29 2012-09-18 Bit 9, Inc. Centralized timed analysis in a network security system
US7895651B2 (en) 2005-07-29 2011-02-22 Bit 9, Inc. Content tracking in a network security system
US20070028291A1 (en) * 2005-07-29 2007-02-01 Bit 9, Inc. Parametric content control in a network security system
US8984636B2 (en) 2005-07-29 2015-03-17 Bit9, Inc. Content extractor and analysis system
US20070079143A1 (en) * 2005-09-29 2007-04-05 Avaya Technology Corp. Secure recoverable passwords
US20070143601A1 (en) * 2005-12-15 2007-06-21 Arroyo Diana J System and method for authorizing information flows
US7512792B2 (en) * 2005-12-15 2009-03-31 International Business Machines Corporation Reference monitor method for enforcing information flow policies
US7647630B2 (en) 2005-12-15 2010-01-12 International Business Machines Corporation Associating security information with information objects in a data processing system
KR100823631B1 (en) 2006-01-03 2008-04-21 노키아 코포레이션 Key storage administration
JP4829654B2 (en) * 2006-03-27 2011-12-07 富士通株式会社 Data concealment method, concealed data restoration method, data concealment program, concealed data restoration program, computer
US20090222927A1 (en) * 2006-04-30 2009-09-03 Pikus Fedor G Concealment of Information in Electronic Design Automation
US8775820B1 (en) * 2006-06-02 2014-07-08 Sprint Communications Company L.P. System and method of enterprise administrative password generation and control
US20080126808A1 (en) * 2006-07-05 2008-05-29 Cms Products, Inc. Encrypted dataset access by custodians
JP4642725B2 (en) * 2006-09-29 2011-03-02 Ｎｅｃパーソナルプロダクツ株式会社 Determination apparatus, determination method, and program
US8769637B2 (en) * 2007-03-23 2014-07-01 Sap Ag Iterated password hash systems and methods for preserving password entropy
US8744076B2 (en) * 2007-04-04 2014-06-03 Oracle International Corporation Method and apparatus for encrypting data to facilitate resource savings and tamper detection
US7996885B2 (en) * 2007-04-19 2011-08-09 International Business Machines Corporation Password application
US7822935B2 (en) * 2007-05-03 2010-10-26 Sandisk Il Ltd. Methods for data-smuggling
US8156332B2 (en) * 2007-05-29 2012-04-10 Apple Inc. Peer-to-peer security authentication protocol
EP2163030A2 (en) * 2007-06-27 2010-03-17 France Telecom Access management method
US20090158299A1 (en) * 2007-10-31 2009-06-18 Carter Ernst B System for and method of uniform synchronization between multiple kernels running on single computer systems with multiple CPUs installed
US20090168994A1 (en) * 2007-12-26 2009-07-02 Heuss Michael R Method for providing stronger encryption using conventional ciphers
TWI372340B (en) * 2008-08-29 2012-09-11 Phison Electronics Corp Storage system, controller and data protecting method thereof
WO2010071843A1 (en) * 2008-12-19 2010-06-24 Privatetree, Llc. Systems and methods for facilitating relationship management
JP5504635B2 (en) * 2009-01-29 2014-05-28 カシオ計算機株式会社 Display device, image display method, and program
KR101150415B1 (en) * 2009-08-22 2012-06-01 (주)엠더블유스토리 Method of managing for security universal serial bus, and program recording media for managing security universal serial bus
US8566952B1 (en) * 2009-12-24 2013-10-22 Intuit Inc. System and method for encrypting data and providing controlled access to encrypted data with limited additional access
CN102200948A (en) * 2010-03-23 2011-09-28 北京爱国者信息技术有限公司 Multi-partition memory device and access method thereof
US8788842B2 (en) 2010-04-07 2014-07-22 Apple Inc. System and method for content protection based on a combination of a user PIN and a device specific identifier
US8510552B2 (en) * 2010-04-07 2013-08-13 Apple Inc. System and method for file-level data protection
US8549314B2 (en) 2010-04-29 2013-10-01 King Saud University Password generation methods and systems
KR20110128567A (en) * 2010-05-24 2011-11-30 삼성전자주식회사 Method for controlling objects of user interface and apparatus of enabling the method
US9225520B2 (en) * 2010-05-28 2015-12-29 Adobe Systems Incorporated System and method for deterministic generation of a common content encryption key on distinct encryption units
US8484482B1 (en) 2011-03-07 2013-07-09 Sprint Communications Company L.P. Password generation and validation system and method
US20120284534A1 (en) * 2011-05-04 2012-11-08 Chien-Kang Yang Memory Device and Method for Accessing the Same
US9146881B2 (en) * 2011-06-03 2015-09-29 Commandhub, Inc. Mobile data vault
US9596244B1 (en) 2011-06-16 2017-03-14 Amazon Technologies, Inc. Securing services and intra-service communications
US9419841B1 (en) 2011-06-29 2016-08-16 Amazon Technologies, Inc. Token-based secure data management
JP6328058B2 (en) * 2012-01-19 2018-05-23 インテリジェント エナジー リミテッドＩｎｔｅｌｌｉｇｅｎｔ Ｅｎｅｒｇｙ Ｌｉｍｉｔｅｄ Remote authentication of replaceable fuel cartridges
US9271110B1 (en) 2012-07-09 2016-02-23 Sprint Communications Company L.P. Location awareness session management and cross application session management
KR102017828B1 (en) * 2012-10-19 2019-09-03 삼성전자 주식회사 Security management unit, host controller interface including the same, method for operating the host controller interface, and devices including the host controller interface
WO2014070134A2 (en) * 2012-10-29 2014-05-08 Empire Technology Development Llc Quorum-based virtual machine security
US9294267B2 (en) * 2012-11-16 2016-03-22 Deepak Kamath Method, system and program product for secure storage of content
US20140230028A1 (en) * 2013-02-10 2014-08-14 Stephen Oscar Petty Auxiliary password
US9355233B1 (en) 2014-01-27 2016-05-31 Sprint Communications Company L.P. Password reset using hash functions
KR102182894B1 (en) * 2014-02-28 2020-11-26 삼성전자주식회사 USER DEVICE PERFORMING PASSWROD BASED AUTHENTICATION AND PASSWORD Registration AND AUTHENTICATION METHOD THEREOF
US9639687B2 (en) 2014-11-18 2017-05-02 Cloudfare, Inc. Multiply-encrypting data requiring multiple keys for decryption
EP3702946B1 (en) 2014-12-31 2021-10-20 Citrix Systems Inc. Shared secret vault for applications with single sign on
US20160261412A1 (en) * 2015-03-04 2016-09-08 Avaya Inc. Two-Step Authentication And Activation of Quad Small Form Factor Pluggable (QFSP+) Transceivers
WO2016193962A1 (en) * 2015-06-02 2016-12-08 K2View Ltd Encryption directed database management system and method
US9736122B2 (en) 2015-09-02 2017-08-15 International Business Machines Corporation Bluesalt security
CN106549920B (en) * 2015-09-21 2021-06-01 华为终端有限公司 Login information input method, login information storage method and related device
US10476672B2 (en) 2016-03-14 2019-11-12 Callware Technologies, Inc Fragmented encryption of a secret
US11190505B2 (en) * 2016-07-12 2021-11-30 Patrick Tardif Password card hinting system
KR102296742B1 (en) * 2016-11-18 2021-09-03 삼성전자 주식회사 Component for provisioning of security data and product including the same
US11210678B2 (en) * 2016-11-18 2021-12-28 Samsung Electronics Co., Ltd. Component for provisioning security data and product including the same
US10592685B2 (en) * 2017-04-27 2020-03-17 Google Llc Encrypted search cloud service with cryptographic sharing
JP2022545809A (en) * 2019-08-23 2022-10-31 コモンウェルス サイエンティフィック アンド インダストリアル リサーチ オーガナイゼーション Secure environment for cryptographic key generation
US11328080B2 (en) * 2019-11-18 2022-05-10 Frostbyte, Llc Cryptographic key management
DE102019135380A1 (en) * 2019-12-20 2021-06-24 Fraunhofer-Gesellschaft zur Förderung der angewandten Forschung e.V. Method and data processing device for processing genetic data
CN111654362B (en) * 2020-06-04 2023-08-08 浙江传媒学院 Improved method of WEP (web-defined Power-Endoctrine) encryption algorithm

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5052040A (en) * 1990-05-25 1991-09-24 Micronyx, Inc. Multiple user stored data cryptographic labeling system and method
US5210795A (en) * 1992-01-10 1993-05-11 Digital Equipment Corporation Secure user authentication from personal computer
US5315658B1 (en) * 1992-04-20 1995-09-12 Silvio Micali Fair cryptosystems and methods of use
US5276737B1 (en) * 1992-04-20 1995-09-12 Silvio Micali Fair cryptosystems and methods of use
US5418854A (en) * 1992-04-28 1995-05-23 Digital Equipment Corporation Method and apparatus for protecting the confidentiality of passwords in a distributed data processing system
US5421006A (en) * 1992-05-07 1995-05-30 Compaq Computer Corp. Method and apparatus for assessing integrity of computer system software
US5319705A (en) * 1992-10-21 1994-06-07 International Business Machines Corporation Method and system for multimedia access control enablement
US5369707A (en) * 1993-01-27 1994-11-29 Tecsec Incorporated Secure network method and apparatus
WO1995005712A2 (en) * 1993-08-13 1995-02-23 Frank Thomson Leighton Secret key exchange
US5394471A (en) * 1993-09-17 1995-02-28 Bell Atlantic Network Services, Inc. Method and system for proactive password validation
US5517569A (en) * 1994-03-18 1996-05-14 Clark; Dereck B. Methods and apparatus for interfacing an encryption module with a personal computer
WO1996005674A1 (en) * 1994-08-12 1996-02-22 Frank Thomson Leighton Failsafe key escrow system
US5666415A (en) * 1995-07-28 1997-09-09 Digital Equipment Corporation Method and apparatus for cryptographic authentication

Also Published As

Publication number Publication date
US5787169A (en) 1998-07-28
JP3807747B2 (en) 2006-08-09
ATE298436T1 (en) 2005-07-15
JP2000502827A (en) 2000-03-07
EP0976049A1 (en) 2000-02-02
WO1997024675A1 (en) 1997-07-10
DE69634880T2 (en) 2006-05-11
CA2241745C (en) 2003-04-29
US6178508B1 (en) 2001-01-23
DE69634880D1 (en) 2005-07-28
EP0976049B1 (en) 2005-06-22

Similar Documents

Publication Publication Date Title
CA2241745A1 (en) Method and apparatus for controlling access to encrypted data files in a computer system
US7596222B2 (en) Encrypting data for access by multiple users
CA2253539C (en) A method for providing a secure non-reusable one-time password
US10176305B2 (en) Method and system for secure distribution of selected content to be protected
Kher et al. Securing distributed storage: challenges, techniques, and systems
Blaze Key Management in an Encrypting File System.
CA2438255C (en) Secure encryption key distribution
Blaze A cryptographic file system for UNIX
Fu Group sharing and random access in cryptographic storage file systems
Miller et al. Strong Security for {Network-Attached} Storage
JP4398145B2 (en) Method and apparatus for automatic database encryption
US5548721A (en) Method of conducting secure operations on an uncontrolled network
US8719954B2 (en) Method and system for secure distribution of selected content to be protected on an appliance-specific basis with definable permitted associated usage rights for the selected content
CA2151851A1 (en) Methods for providing secure access to shared information
US6336121B1 (en) Method and apparatus for securing and accessing data elements within a database
WO2004034184A3 (en) Encrypting operating system
WO2004040410A3 (en) Password encryption key
CA2341784A1 (en) Method to deploy a pki transaction in a web browser
EP1033711A3 (en) Software carrier for play on a system for authenticating software carriers
CA2568739A1 (en) System, method, and computer program product for providing digital rights management of protected content
CA2345688A1 (en) Automatic recovery of forgotten passwords
WO1999034554A3 (en) Administration and utilization of secret fresh random numbers in a networked environment
WO2001037478A3 (en) Encryption key management system using multiple smart cards
EP1223496A3 (en) Encryption scheme for limiting the maximum number of accesses to a digital file of predetermined content
AU2297597A (en) Function access control system with encryption using a plurality of dynamic variables

Legal Events

Date Code Title Description
EEER Examination request
MKLA Lapsed

Effective date: 20121227

MKLA Lapsed

Effective date: 20121227