One aspect relates to a process and associated device that provides a private key of an asymmetric key pair in a key device. A symmetric master key is derived from the private key of the asymmetric key pair. The symmetric master key is stored in a computer memory location. The symmetric master key is used to encrypt or decrypt a file encryption key. The file encryption key can encrypt or decrypt files. In another aspect, the user can still access the files even if a user deactivates the key device by encrypting or decrypting the file encryption key directly from the symmetric master key.

Deriving a symmetric key from an asymmetric key for file encryption or decryption

A method and apparatus for initiating secure operations in a microprocessor system is described. In one embodiment, one initiating logical processor initiates the process by halting the execution of the other logical processors, and then loading initialization and secure virtual machine monitor software into memory. The initiating processor then loads the initialization software into secure memory for authentication and execution. The initialization software then authenticates and registers the secure virtual machine monitor software prior to secure system operations.

System and method for execution of a secured environment initialization instruction

Embodiments of the present invention provide a secure remote password reset capability. In some embodiments, an exemplary method provides a remote reset of a password associated with a token in a computer system having a security server. A token-based authentication process is activated by connecting the token to the security server. A server-based authentication process is initiated in the security server by activating a password reset process in a security client. The server-based authentication process communicates with the token-based authentication process over a secure channel. An authentication credential is managed by a third party agent that supplies a query and the authentication credential as a correct response to the query to the security server. A prompt provided by the password reset process collects the authentication credential and a new password. After the authentication credential is validated mutually authentication is performed between the security server and the token. The token is updated with the new password based on a successful result of the mutual authentication.

Methods and systems for remote password reset using an authentication credential managed by a third party

Controlling access to disseminated messages includes implementing one or more key management policies that specify how various encryption keys are maintained and in particular, when encryption keys are made inaccessible. Deleting a particular key renders inaccessible all copies of messages, known or unknown, associated with the particular key, regardless of the location of the associated messages. A message may be directly or indirectly associated with a deleted key. Any number of levels of indirection are possible and either situation makes the message unrecoverable. The approach is applicable to any type of data in any format and the invention is not limited to any type of data or any type of data format.

Approach for managing access to messages using encryption key management policies

A feature is provided that facilitates securely creating and/or replacing cryptographic keys. A first key pair is created comprising first private key and first public key. A second (spare) key pair is created comprising second private key and second public key. The second key pair is associated with the first private key. The second key pair is divided into shares and distributed to at least two shareholders. When the first key pair is to be replace, the second key pair is recreated and authenticated with at least a portion of the distributed shares. A trust level is associated with the second key pair corresponding to a trust level of the first key pair. The first key pair may be invalidated upon authentication of the second key pair. Further configurations provide for the creation of additional spare key pair.

Certify and split system and method for replacing cryptographic keys

According to an embodiment of the present invention, an issue system previously issues a smart card, and sends an encrypted private key and a public key certificate to a user terminal, when issuing a new card or updating an old card. A user terminal inputs the received encrypted private key and public key certificate into a smart card. A smart card stores a public key certificate, and decrypts the inputted encrypted private key by an encryptor/decryptor based on a symmetric key, and stores the obtained private key. Therefore, collection and redistribution of a smart card becomes unnecessary, when updating a private key and a public key certificate, saving the time and labor.

Public key infrastructure (PKI) based system, method, device and program

In an encryption apparatus for encrypting a data body to contain an encrypted data body in transmission data and transmitting the transmission data to a receiver, the transmission data includes sender's key recovery data obtained by encrypting recovery information for recovering a key for decrypting the encrypted data body to allow a key recovery agent registered by a sender to decrypt the recovery information, and receiver's key recovery data obtained by encrypting the recovery information for recovering the key for decrypting the encrypted data body to allow a key recovery agent registered by a receiver to decrypt the recovery information.

Encryption apparatus, cryptographic communication system, key recovery system, and storage medium

PROBLEM TO BE SOLVED: To improve the safety by obstructing the leak of a key by analyzing an IC card device. SOLUTION: When PIN(personal identification number) data are inputted, an application software part 70 generates a temporary common key K used for cipher communication when the function of an IC card 20 is used and transfers the temporary common key K and inputted PIN data to the IC card 20. Thus, the cipher key which is temporarily effective is used only when the application software part 70 and IC card 20 are connected which hold no cipher key normally.

Ic card using device, ic card, and storage medium

PROBLEM TO BE SOLVED: To provide a coating composition for forming a coating film having an unprecedentedly high scratch resistance, concretely, scratch resistance durable to the scraping of the film surface with a strong external force in car washing or with flying sand during the running of a car. SOLUTION: The coating composition contains (A) an acrylic resin containing (a1) a short side-chain hydroxy group and (a2) a long side-chain hydroxy group and (C) a polyisocyanate prepolymer as essential components and optionally contains (B) a polylactone polyol. The ratio of the short side-chain hydroxy group (a1) to the long side-chain hydroxy group (a2), the total hydroxy value of the short side-chain hydroxy group (a1) and the long side-chain hydroxy group (a2), the solid content ratio of the acrylic resin (A) to the polylactone polyol B, and the amount of the polyisocyanate prepolymer (C) fall within respectively specific ranges. COPYRIGHT: (C)2007,JPO&INPIT

Coating composition, method for forming multilayer coating film by using the composition and coated article

PROBLEM TO BE SOLVED: To provide an attached device of a robot hand for providing sense of security to a cared parson when a care robot and the like take care of the cared person SOLUTION: The attached device 10 of the robot hand attached to the skeleton part of the robot hand of which the fingers can be bent and stretched by a joint mechanism to grip an object with the fingers or the entire hand includes an attached member made by soft material that can be attached and detached to/from the skeleton part of the robot hand, heaters 12, 13 attached to the attached member and heating the attached member by generating head with supplied power, a detection means detecting activation start or activation end of the robot hand, and a control means 11 controlling ON/OFF control of the heater in accordance with detection output of the detection means COPYRIGHT: (C)2010,JPO&INPIT

Tatsuya Ishihara

Papers

Public key infrastructure (PKI) based system, method, device and program

Encryption apparatus, cryptographic communication system, key recovery system, and storage medium

Ic card using device, ic card, and storage medium

Coating composition, method for forming multilayer coating film by using the composition and coated article

Attached device of robot hand