公开(公告)号：DE69311581T2

公开(公告)日：1997-12-11

申请号：DE69311581

申请日：1993-07-27

Applicant: IBM

Inventor： JANSON PHILIPPE ,  TSUDIK GENE

IPC: G09C1/00 ,  H04L9/08 ,  H04L9/32

Abstract: PCT No. PCT/EP93/01989 Sec. 371 Date Jan. 24, 1996 Sec. 102(e) Date Jan. 24, 1996 PCT Filed Jul. 27, 1993 PCT Pub. No. WO95/04416 PCT Pub. Date Feb. 9, 1995A method and system for providing secure authenticated cryptographic key distribution in a communication system having properties very similar to a Two-Party Authentication Protocol. A new group key is distributed by a server to a selected group of users in the system. A braided structure of the messages, sent by the server to each user, allows authentication and, at the same time, secure and secret key distribution. Moreover, the braided structure makes it possible to construct minimal-length protocol messages.

公开(公告)号：DE69312328T2

公开(公告)日：1998-01-08

申请号：DE69312328

申请日：1993-09-20

Applicant: IBM

Inventor： HAUSER RALF ,  JANSON PHILIPPE ,  MOLVA REFIK ,  TSUDIK GENE ,  VAN HERREWEGHEN ELSIE

IPC: G06F21/20 ,  G06F1/00 ,  G06F15/00 ,  G09C1/00 ,  H04L9/08 ,  H04L9/32

Abstract: A robust and secure password (or key) change method between a user and an authentication server in a distributed communication network is disclosed. The protocol requires the exchange of only two messages between the user desiring the key change and the server, the user's request including, at least partly encrypted, an identification of the sending user, old and new keys, and two nonces, at least one including a time indication. The authentication server's response includes a possibly encrypted accept/reject indication and the regularly encrypted request from the user.

公开(公告)号：DE69311581D1

公开(公告)日：1997-07-17

申请号：DE69311581

申请日：1993-07-27

Applicant: IBM

Inventor： JANSON PHILIPPE ,  TSUDIK GENE

IPC: G09C1/00 ,  H04L9/08 ,  H04L9/32

Abstract: PCT No. PCT/EP93/01989 Sec. 371 Date Jan. 24, 1996 Sec. 102(e) Date Jan. 24, 1996 PCT Filed Jul. 27, 1993 PCT Pub. No. WO95/04416 PCT Pub. Date Feb. 9, 1995A method and system for providing secure authenticated cryptographic key distribution in a communication system having properties very similar to a Two-Party Authentication Protocol. A new group key is distributed by a server to a selected group of users in the system. A braided structure of the messages, sent by the server to each user, allows authentication and, at the same time, secure and secret key distribution. Moreover, the braided structure makes it possible to construct minimal-length protocol messages.

公开(公告)号：DE10020093A1

公开(公告)日：2001-03-22

申请号：DE10020093

申请日：2000-04-22

Applicant: IBM

Inventor： JANSON PHILIPPE ,  SCHERZER HELMUT

IPC: G06Q40/02 ,  G06F17/60 ,  G06F11/30

Abstract: A computerized transaction, such as bank or reservation transaction, is initiated to modify available data set on a smart-card. The transaction is then processed, and monitored whether it is successfully concluded on the smart-card. An error resistant scheme error recovery, particularly an error resistant data set index swap scheme, is provided on the smart-card. The method implements a data integrity scheme for a transaction using an error correction scheme. Independent claims are also included for the following: (a) a smart-card for application in transaction system; (b) a transaction processing system; (c) and a computer readable recording medium used in storing program for management of transaction data.

公开(公告)号：DE69312328D1

公开(公告)日：1997-08-21

申请号：DE69312328

申请日：1993-09-20

Applicant: IBM

Inventor： HAUSER RALF ,  JANSON PHILIPPE ,  MOLVA REFIK ,  TSUDIK GENE ,  VAN HERREWEGHEN ELSIE

IPC: G06F21/20 ,  G06F1/00 ,  G06F15/00 ,  G09C1/00 ,  H04L9/08 ,  H04L9/32

Abstract: A robust and secure password (or key) change method between a user and an authentication server in a distributed communication network is disclosed. The protocol requires the exchange of only two messages between the user desiring the key change and the server, the user's request including, at least partly encrypted, an identification of the sending user, old and new keys, and two nonces, at least one including a time indication. The authentication server's response includes a possibly encrypted accept/reject indication and the regularly encrypted request from the user.