Amplifier device for a condenser microphone |
| It is an object of the invention to provide an amplifier with the above problems solved, or an ... |
|
Multichannel matrix logic and encoding systems |
| What is claimed is: 1. In a UMX encoder comprising means for encoding multidirectional source ... |
|
Expansion circuit for improved stereo and apparent monaural image |
| I claim: 1. An expander circuit for a multi-channel amplifier system including left and right ... |
|
Universal automotive electronic radio with display for tuning or time information |
| OF A PREFERRED EMBODIMENT OF THE INVENTION The invention is better understood with reference to ... |
|
Video disc encoding and decoding system providing intra-field track error correction |
| FIGS. 1 and 2 provide a comparison of a field-by-field track error correction method (FIG. 1) with ... |
|
Sound reproducing apparatus for use in vehicle |
| In consideration of the above-described problems, the present invention provides a sound ... |
|
Control arrangement for electronic appliance |
| Accordingly, it is an object of the present invention to provide an electronic appliance that ... |
|
Color video display for audio signals |
| The embodiments of the invention in which an exclusive property or privilege is claimed are defined ... |
|
Desk/wall mounted telephone subset |
| A telephone subset embodying the invention has a desk and wall mount capability and employs an east-... |
|
Source data compression and decompression in code symbol printing and decoding |
| In accordance with the teachings of the present invention, a coded symbol encoding and decoding ... |
|
|
Data communications system using public key cryptography in a web environment
| Details |
Inventors: Holloway, Christopher James;
Assignee: International Business Machines Corporation (Armonk, NY)
Primary Examiner: Barron, Jr.; Gilberto
Assistant Examiner:
Attorney, Agent or Firm: Ray-Yarletts; Jeanine S.
Described is a communications system in which messages may be processed using public key cryptography with a private key (SKu) unique to one or more users (150). The system comprises a server means (130) adapted for data communication with a client (110) via a network (100), the server means (130) comprising first data storage means in which is stored in a secure manner a private key for the or each user, the private key being encrypted with a key encrypting key. The server means further comprises second data storage means in which is stored applet code executable on the client. The server provides the applet code to the client via the network in response to connection of the client to the server via the network. The applet code comprises secure processing means operable, when executed in the client, to receive a message to be processed from the user, to retrieve the encrypted private key for the user from the server means via the network, to receive the key encrypting key from the user, to decrypt the private key using the key encrypting key, and to perform the public key processing for the message using the decrypted private key. The applet code and the associated keys are removed from the client on termination of the applet code. |
|
DETAILED DESCRIPTION To solve this problem, in accordance with the present invention there is now provided a communications system for processing messages using public key cryptography with a private key unique to one or more users, the system comprising: server means adapted for data communication with a client via a network, the server means comprising first data storage means for storing in a secure manner a private key for the or each user, the private key being encrypted with a key encrypting key; characterised in that the server means further comprises second data storage means in which is stored applet code executable on the client, the server providing the applet code to the client via the network in response to connection of the client to the server via the network; the applet code comprising secure processing means operable, when executed in the client, to receive a message to be processed from the user, to retrieve the encrypted private key for the user from the server means via the network, to receive the key encrypting key from the or each user, to decrypt the private key using the key encrypting key, and to perform the cryptographic key processing for the message using the decrypted private key; the applet code and the associated keys being removed from the client on termination of the applet code. Preferably, the secure processing means is operable, when executed in the client during initial registration of a registering user, to generate the private key and an associated public key, to receive a key encrypting key from the registering user, to encrypt the private key using the key encrypting key received from the registering user, and to send the encrypted private key and public key from the client to the server means for storage in the first data storage means. In preferred embodiments of the present invention, the server means comprises a key server for storing the encrypted private key, a web server connected to the network, and a fire-wall connecting the web server to the key server, the key server supplying the private key to the client via the web server
|
|