Method for enhancing security in distributed systems

Patent metadata

Field	Value
Publication number	US-9967091-B2
Application number	US-201514620235-A
Country	US
Kind code	B2
Filing date	Feb 12, 2015
Priority date	Feb 12, 2015
Publication date	May 8, 2018
Grant date	May 8, 2018

Abstract

A method and system secures an encryption key for utilization on a secured network by receiving, at a trusted node, an encryption key request from a requesting node, the encryption key request including a public encryption key of a public/private encryption key pair associated with the requesting node; determining, at the trusted node, if the requesting node has previously supplied enough virtual currency to support the request; choosing an encryption key for distributing to the requesting node when it is determined the requesting node has enough virtual currency; encrypting the chosen encryption key with the public encryption key of a public/private encryption key pair associated with the requesting node; and sending the encrypted encryption key to the requesting node.

First claim

What is claimed is:

1. A method for providing trusted transference of data, using an encryption key, on a secured network, the secured network being comprised of member computers, each member computer having a microprocessor and an associated storage device, comprising:
(a) receiving, at a first computer, the first computer being one of the member computers of the secured network, an encryption key request from a second computer having a microprocessor and an associated storage device, the second computer not being one of the member computers of the secured network, the first computer of the secured network having the encryption key for utilization on the secured network;
(b) determining, by the first computer, if the second computer has at least a predetermined amount of digital money associated with a self-created virtual currency, associated the second computer, to fulfill the encryption key request, the self-created virtual currency being a peer-to-peer protocol that transfers of the digital money associated with the self-created virtual currency from one internet protocol address on the secured network to another internet protocol address on the secured network and validates the transfers, the self-created virtual currency being only used within the secured network;
(c) sending, from the first computer of the secured network to the second computer, a payment request for the predetermined amount of digital money associated with the self-created virtual currency;
(d) sending an encryption key, from the first computer of the secured network to the second computer, when the first computer receives from the second computer the predetermined amount of digital money associated with the self-created virtual currency to fulfill the encryption key request;
(e) sending, from the first computer of the secured network to the second computer, a payment demand when the first computer determines that the second computer does not have at least the predetermined amount of digital money associated with the self-created virtual currency to fulfill the encryption key request;
(f) sending an encryption key, from the first computer of the secured network to the second computer, when the first computer receives, from the second computer, an appropriate payment associated with the sent payment demand;
(g) enabling, in response to the encryption key being sent by the first computer to the second computer, trusted transference of data from the second computer to the first computer and trusted transference of data from the first computer to the second computer;
(h) enabling, in response to the encryption key being sent by the first computer to the second computer, trusted transference of data between the second computer and a third computer and trusted transference of data from the third computer to the second computer, the third computer being one of the member computers of the secured network; and
(i) transferring, at the first computer of the secured network, the digital money, received from the second computer of the secured network, associated with the self-created virtual currency to an administrative account to prevent unauthorized acquisition of digital money associated the self-created virtual currency from the second computer of the secured network by an unauthorized computer;
(j) harvesting, at the first computer of the secured network, from other member computers of the secured network, digital money associated with the self-created virtual currency which is no longer needed by the other member computers of the secured network; and
(k) transferring, at the first computer of the secured network, the harvested digital money associated with the self-created virtual currency to the administrative account to prevent unauthorized acquisition of digital money associated the self-created virtual currency from the other member computers of the secured network that no longer need digital money associated with the self-created virtual currency by an unauthorized computer.

2. The method as claimed in claim 1 , wherein the encryption key is a symmetric encryption key.

3. The method as claimed in claim 1 , wherein the encryption key is an asymmetric encryption key.

4. The method as claimed in claim 1 , wherein the encryption key request includes a virtual currency address of the second computer.

5. A method for providing trusted transference of data, using an encryption key, on a secured network, the secured network being comprised of member computers, each member computer having a microprocessor and an associated storage device, comprising:
(a) receiving, at a first computer, the first computer being one of the member computers of the secured network, an encryption key request from a second computer having a microprocessor and an associated storage device, the second computer not being one of the member computers of the secured network, the first computer of the secured network having the encryption key for utilization on the secured network, the encryption key request including a public encryption key of a public/private encryption key pair associated with the second computer;
(b) determining, by the first computer, if the second computer has at least a predetermined amount of digital money associated with a self-created virtual currency, associated the second computer, to fulfill the encryption key request, the self-created virtual currency being a peer-to-peer protocol that transfers of the digital money associated with the self-created virtual currency from one internet protocol address on the secured network to another internet protocol address on the secured network and validates the transfers, the self-created virtual currency being only used within the secured network;
(c) sending, from the first computer of the secured network to the second computer, a payment request for the predetermined amount of digital money associated with the self-created virtual currency;
(d) sending, from the first computer of the secured network to the second computer, a payment demand when the first computer determines that the second computer does not have at least the predetermined amount of digital money associated with the self-created virtual currency to fulfill the encryption key request;
(e) choosing an encryption key for distributing to the second computer when the first computer receives from the second computer the predetermined amount of digital money associated with the self-created virtual currency to fulfill the encryption key request or when the first computer receives, from the second computer, an appropriate payment associated with the sent payment demand;
(f) encrypting the chosen encryption key with the public encryption key of a public/private encryption key pair associated with the second computer;
(g) sending the encrypted encryption key, from the first computer, to the second computer;
(h) enabling, in response to the encrypted encryption key being sent by the first computer to the second computer, trusted transference of data from the second computer to the first computer and trusted transference of data from the first computer to the second computer;
(i) enabling, in response to the encrypted encryption key being sent by the first computer to the second computer, trusted transference of data between the second computer and a third computer and trusted transference of data from the third computer to the second computer, the third computer being one of the member computers of the secured network;
(j) transferring, at the first computer of the secured network, the digital money, received from the second computer of the secured network, associated with the self-created virtual currency to an administrative account to prevent unauthorized acquisition of digital money associated the self-created virtual currency from the second co

Assignees

• Xerox Corp

Inventors

• Vandervort David R

Classifications

• H04L9/0819

  Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062) · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L63/00

  Network architectures or network communication protocols for network security (cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00) · CPC title

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L9/0825 Primary

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title