IP Library Granted Patent US 6,895,091
Granted Patent B1
US 6,895,091 · App. 09/612,133 · Granted May 17, 2005

Systems and methods for encryption key archival and auditing in a quantum-cryptographic communications network

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 6,895,091
App. No.
09/612,133
Granted
May 17, 2005
Kind
B1
Abstract

A system archives encryption keys used for encrypting information in a network ( 105 ). The system includes a plurality of nodes configured to collect one or more encryption keys generated at each node and to transmit the one or more collected encryption keys to a key archive ( 110 ) for storage in a database associated with the key archive ( 110 ). The key archive ( 110 ) is configured to receive encryptions keys transmitted from nodes in the network and to store the encryption keys in a database of the key archive.

Claims (87)

1. A method of archiving quantum-cryptographic encryption keys used for encrypting information in a network, comprising:

collecting one or more encryption keys generated at at least one node in said network;

transmitting the one or more collected encryption keys to a key archive; and

storing said collected encryption keys in a database of said key archive.

2. The method of claim 1 , further comprising:

time-stamping the one or more collected encryption keys.

3. The method of claim 1 , further comprising:

tagging the one or more collected encryption bits with an identifier identifying a link of said network.

4. The method of claim 3 , wherein said link of said network employed at least one of the collected encryption keys for encrypting data.

5. The method of claim 1 , further comprising:

encrypting said collected encryption keys before transmitting said keys to said key archive.

6. The method of claim 1 , further comprising:

digitally signing said collected encryption keys before transmitting said keys to said key archive.

7. A method of archiving encryption keys used for encrypting information in a network, comprising:

receiving encryption keys generated at a plurality of nodes in a network;

storing said received encryption keys in an encryption key archived; and

determining whether at least one of said encryption keys satisfies given standards wherein said determining further comprises statistically analyzing said at least one of said encryption keys.

8. The method of claim 7 , further comprising:

notifying an entity if at least one of said encryption keys does not satisfy said given standards.

9. The method of claim 7 , wherein said step of statistically analyzing further comprises:

performing a correlation analysis to determine whether at least one of said encryption keys correlates with a specified parameter.

10. A computer-readable medium containing instructions for controlling at least one processor to perform a method of archiving encryption keys used for encrypting information in a network, the method comprising:

obtaining encryption keys generated at a plurality of nodes in a network;

storing said received encryption keys in a database of an encryption key archive; and

determining whether at least one of said encryption keys satisfies given standards wherein said determining further comprises statistically analyzing at least one of said encryption keys.

11. The computer-readable medium of claim 10 , the method further comprising:

notifying an entity if at least one of said encryption keys does not satisfy said given standards.

12. The method of claim 10 wherein said step of statistically analyzing further comprises:

performing a correlation analysis to determine whether at least one of said encryption keys correlates with a specified parameter.

13. A quantum-cryptographic encryption key archive, comprising:

a memory configured to store instructions; and

at least one processor configured to execute the instructions to:

receive quantum-cryptographic encryption keys from a plurality of nodes in a network, and

store said received encryption keys in a database associated with said encryption key archive.

14. A system for archiving quantum-cryptographic encryption keys used for encrypting information in a network, comprising:

means for collecting one or more encryption keys generated at at least one node in said network;

means for transmitting the one or more collected encryption keys to a key archive; and

means for storing said collected encryption keys in a database of said key archive.

15. A method of auditing encryption keys used for encrypting information in a network, comprising:

collecting one or more encryption keys generated at a node for encrypting data;

providing the one or more collected encryption keys to a key archive;

storing said collected encryption keys in a database of said key archive; and

determining whether at least one of said one or more collected keys satisfies given standards wherein said determining further comprises statistically analyzing at least one of said one or more collected keys and wherein said statistically analyzing further comprises performing a correlation analysis to determine whether at least one of said one or more collected keys correlates with a specified parameter.

16. The method of claim 15 , further comprising:

notifying an entity if said one or more collected keys does not satisfy said given standards.

17. A computer-readable medium containing instructions for controlling at least one processor to perform a method of auditing encryption keys used for encrypting information in a network, the method comprising:

receiving one or more encryption keys;

providing the one or more received encryption keys to a key archive; and

determining whether at least one of said one or more received keys satisfies given standards wherein said determining further comprises statistically analyzing at least one of said one or more received keys, and wherein said statistically analyzing further comprises performing a correlation analysis to determine whether at least one of said one or more received keys correlates with a specified parameter.

18. The computer-readable medium of claim 17 , the method further comprising:

notifying an entity if said one or more received keys does not satisfy said given standards.

19. An encryption key archive, comprising:

a memory configured to store instructions and encryption keying bits; and

at least one processor configured to execute the instructions to:

receive one or more encryption keying bits generated at a node for encrypting data, and

statistically analyze at least one of said one or more keying bits.

20. A data structure encoded on a computer readable medium, comprising:

a plurality of encryption key bits received from a plurality of nodes in a network,

data indicating parameters associated with nodes employing cryptographic techniques in said network.

21. The data structure of claim 20 , wherein said parameters indicate a number of indecipherable messages transmitted from each of said nodes.

22. The data structure of claim 20 , wherein said parameters indicate a total number of messages transmitted from each of said nodes.

23. The data structure of claim 20 , wherein said parameters indicate a number of failures associated with validations performed on said encryption key bits.

24. A method of transmitting quantum-cryptographic encryption keys used for encrypting information at a node in a network to a key archive, comprising:

collecting one or more encryption keys generated at the node; and

transmitting the one or more encryption keys to the key archive.

25. A system for archiving quantum-cryptographic encryption keys used for encrypting information in a network, comprising:

a plurality of nodes configured to:

collect one or more encryption keys generated at each node, and

transmit the one or more collected encryption keys to a key archive for storage in a database associated with the key archive, and

a key archive configured to:

receive encryptions keys transmitted from nodes in the network,

store the encryption keys in a database of the key archive.

26. A method of archiving quantum-cryptographic encryption keys used for encrypting information in a network, comprising:

receiving quantum cryptographic encryption keys generated at a plurality of nodes in a network; and

storing said received encryption keys in an encryption key archive.

27. A computer-readable medium containing instructions for controlling at least one processor to perform a method of archiving quantum-cryptographic encryption keys used for encrypting information in a network, the method comprising:

obtaining quantum-cryptographic encryption keys generated at a plurality of nodes in a network; and

storing said received encryption keys in a database of an encryption key archive.

28. A method of auditing quantum-cryptographic encryption keys used for encrypting information in a network, comprising:

collecting one or more quantum-cryptographic encryption keys generated at a node for encrypting data:

providing the one or more collected encryption keys to a key archive,

storing said collected encryption keys in a database of said key archive; and

determining whether at least one of said one or more collected keys satisfies given standards.

29. A computer-readable medium containing instructions for controlling at least one processor to perform a method of auditing quantum-cryptographic encryption keys used for encrypting information in a network, the method comprising:

receiving one or more quantum-cryptographic encryption keys;

providing the one or more received encryption keys to a key archive; and

determining whether at least one of said one or more received keys satisfies given standards.

Assignments (7)
CHANGE OF NAME Recorded Jun 23, 2010
From: BBN TECHNOLOGIES CORP.
To: RAYTHEON BBN TECHNOLOGIES CORP.
Reel/Frame 024576/0607 →
RELEASE OF SECURITY INTEREST Recorded Oct 27, 2009
From: BANK OF AMERICA, N.A. (SUCCESSOR BY MERGER TO FLEET NATIONAL BANK)
To: BBN TECHNOLOGIES CORP. (AS SUCCESSOR BY MERGER TO BBNT SOLUTIONS LLC)
Reel/Frame 023427/0436 →
SECURITY AGREEMENT Recorded Sep 6, 2006
From: LEVEL 3 COMMUNICATIONS, INC.; ICG COMMUNICATIONS, INC.
To: MERRILL LYNCH CAPITAL CORPORATION, AS COLLATERAL AGENT
Reel/Frame 018207/0120 →
MERGER Recorded Jun 7, 2006
From: BBNT SOLUTIONS LLC
To: BBN TECHNOLOGIES CORP.
Reel/Frame 017746/0377 →
PATENT AND TRADEMARK SECURITY AGREEMENT Recorded Jun 9, 2004
From: BBNT SOULTIONS LLC
To: FLEET NATIONAL BANK, AS AGENT
Reel/Frame 014718/0294 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 18, 2004
From: BBNT SOLUTIONS LLC
To: BBNT SOLUTIONS LLC; VERIZON CORPORATE SERVICES GROUP INC.
Reel/Frame 014634/0525 →
JOINT ASSIGNMENT Recorded May 4, 2004
From: BBNT SOLUTIONS LLC
To: VERIZON CORPORATE SERVICES GROUP INC.; BBNT SOLUTIONS LLC
Reel/Frame 014601/0448 →