Outputting a key based on an authorized sequence of operations

Patent metadata

Field	Value
Publication number	US-11811908-B2
Application number	US-202016786796-A
Country	US
Kind code	B2
Filing date	Feb 10, 2020
Priority date	Aug 4, 2014
Publication date	Nov 7, 2023
Grant date	Nov 7, 2023

Abstract

Values and a sequence of operations associated with generating a key may be received. A determination may be made as to whether the sequence of operations associated with the key matches an authorized sequence of operations. The key may be outputted when the received sequence of operations matches the authorized sequence of operations and the key may not be outputted when the received sequence of operations does not match the authorized sequence of operations.

First claim

What is claimed is:

1. A method comprising:
receiving a plurality of values associated with generating a key;
receiving a sequence of operations associated with generating the key using the received plurality of values;
determining, by a processing device, whether the received sequence of operations corresponds to an authorized sequence of operations associated with generating the key, wherein the received sequence of operations specifies an order of the received plurality of values that are inputs to respective operations in the received sequence of operations; and
in response to determining that the received sequence of operations corresponds to the authorized sequence of operations by determining that the received sequence of operations was performed in the specified order, providing the key based on the received sequence of operations and the received plurality of values.

2. The method of claim 1 , wherein determining whether the received sequence of operations corresponds to the authorized sequence of operations comprises:
generating a first hash value based on the received sequence of operations;
receiving a second hash value based on the authorized sequence of operations; and
determining whether the first hash value matches the second hash value, wherein the received sequence of operations corresponds to the authorized sequence of operations responsive to the first hash value matching the second hash value.

3. The method of claim 1 , wherein the order of operations is used to generate the key.

4. The method of claim 1 , further comprising:
receiving status information associated with a component providing at least one of the received plurality of values;
determining whether the status information is different than a prior status information associated with the generating of a prior key; and
transmitting a request for a hash value in response to determining that the status information is different than the prior status information and not transmitting the request for the hash value in response to determining that the status information is not different than the prior status information.

5. The method of claim 1 , further comprising:
in response to determining that the received sequence of operations does not correspond to the authorized sequence of operations, refraining from providing the key based on the received sequence of operations and the plurality of values.

6. The method of claim 1 , further comprising:
decrypting data with the provided key in response to determining that the received sequence of operations corresponds to the authorized sequence of operations.

7. The method of claim 1 , wherein determining whether the received sequence of operations corresponds to the authorized sequence of operations comprises:
determining whether one or more sources of the received plurality of values match one or more sources of values specified by the authorized sequence of operations, wherein the received sequence of operations corresponds to the authorized sequence of operations responsive to the one or more sources of the received plurality of values matching the one or more sources of the values specified by the authorized sequence of operations.

8. A system comprising:
a memory; and
a processing device, operatively coupled with the memory, to:
receive a plurality of values associated with generating a key;
receive a sequence of operations associated with generating the key using the received plurality of values;
determine whether the received sequence of operations corresponds to an authorized sequence of operations associated with generating the key, wherein the received sequence of operations specifies an order of the received plurality of values that are inputs to respective operations in the received sequence of operations; and
in response to determining that the received sequence of operations corresponds to the authorized sequence of operations by determining that the received sequence of operations was performed in the specified order, providing the key based on the received sequence of operations and the received plurality of values.

9. The system of claim 8 , wherein to determine whether the received sequence of operations corresponds to the authorized sequence of operations, the processing device is further to:
generate a first hash value based on the received sequence of operations;
receive a second hash value based on the authorized sequence of operations; and
determine whether the first hash value matches the second hash value, wherein the received sequence of operations corresponds to the authorized sequence of operations responsive to the first hash value matching the second hash value.

10. The system of claim 8 , wherein the order of operations is used to generate the key.

11. The system of claim 8 , wherein the processing device is further to:
in response to determining that the received sequence of operations does not correspond to the authorized sequence of operations, refrain from providing the key based on the received sequence of operations and the plurality of values.

12. The system of claim 8 , wherein the processing device is further to:
receive status information associated with a component providing at least one of the received plurality of values;
determine whether the status information is different than a prior status information associated with the generating of a prior key; and
transmit a request for a hash value in response to determining that the status information is different than the prior status information and not transmitting the request for the hash value in response to determining that the status information is not different than the prior status information.

13. The system of claim 8 , wherein the processing device is further to:
decrypt data with the provided key in response to determining that the received sequence of operations corresponds to the authorized sequence of operations.

14. The system of claim 8 , wherein to determine whether the received sequence of operations corresponds to the authorized sequence of operations, the processing device is further to:
determine whether one or more sources of the received plurality of values match one or more sources of values specified by the authorized sequence of operations, wherein the received sequence of operations corresponds to the authorized sequence of operations responsive to the one or more sources of the received plurality of values matching the one or more sources of the values specified by the authorized sequence of operations.

15. A non-transitory computer readable medium comprising instructions, which when executed by a processing device, cause the processing device to:
receive a plurality of values associated with generating a key;
receive a sequence of operations associated with generating the key using the received plurality of values;
determine whether the received sequence of operations corresponds to an authorized sequence of operations associated with generating the key, wherein the received sequence of operations specifies an order of the received plurality of values that are inputs to respective operations in the received sequence of operations; and
in response to determining that the received sequence of operations corresponds to the authorized sequence of operations by determining that the received sequence of operations was performed in the specified order, providing the key based on the received sequence of operations and the received plurality of values.

16. The non-transitory computer readable medium of claim 15 , wherein to c

Assignees

• Cryptography Res Inc

Inventors

• Wachs Megan Anneke
• Kumar Ambuj
• Jun Benjamin Che-Ming

Classifications

• H04L9/0631 Primary

  Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms · CPC title

• H04L9/0643

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title

• H04L9/0861

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title

• H04L9/3236

  using cryptographic hash functions · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title