IP Library Granted Patent US 8,117,450
Granted Patent B2
US 8,117,450 · App. 09/975,815 · Granted Feb 14, 2012

System and method for secure data transmission

Assignee: Hewlett-Packard Development Company, L.P.
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,117,450
App. No.
09/975,815
Filed
Oct 11, 2001
Granted
Feb 14, 2012
Kind
B2
Art Unit
2493
USPC
713/170
Abstract

A system for secure data transmission comprises a processor, a memory coupled to the processor, and a string generator stored in the memory and executable by the processor. The string generator is adapted to generate a character string. The system also comprises a hashing engine stored in the memory and executable by the processor. The hashing engine is adapted to generate a hash key using the character string and a private key. The system further comprises an encryption engine stored in the memory and executable by the processor. The encryption engine is adapted to encrypt the data using the hash key. The processor is adapted to transmit the encrypted data, an identification key related to the private key, and the character string to a recipient.

Claims (81)

1. A method for secure data transmission, comprising:

generating a character string at a sender for each data packet associated with the secure data transmission;

generating a hash key using the character string and a private key, wherein the hash key is different for each data packet associated with the secure data transmission;

encrypting a data packet associated with the secure data transmission using the hash key; and

transmitting an identification key associated with the sender, the character string, and the encrypted data packet from the sender to a recipient.

2. The method of claim 1 , wherein generating the hash key comprises hashing the character string with the private key.

3. The method of claim 1 , further comprising:

generating a signature using the hash key and the data; and

transmitting the signature from the sender to the recipient.

4. The method of claim 1 , wherein generating a character string comprises randomly generating the character string.

5. The method of claim 1 , further comprising:

determining the private key at the recipient using the identification key; and

decrypting the encrypted data at the recipient using the private key and the character string.

6. The method of claim 5 , wherein determining the private key comprises accessing a relational database associating the identification key to the private key.

7. The method of claim 1 , further comprising:

determining the private key at the recipient using the identification key;

determining the hash key at the recipient using the private key and the character string; and

decrypting the encrypted data using the hash key.

8. The method of claim 7 , wherein determining the hash key comprises hashing the private key with the character string.

9. The method of claim 1 , further comprising:

generating a first signature by the sender using the hash key and the data; and

transmitting the first signature to the recipient, the recipient adapted to determine the hash key for decrypting the data and compare the first signature to a second signature generated by the recipient using the hash key and the decrypted data.

10. The method of claim 1 , further comprising:

generating a signature using the hash key and the data;

transmitting the signature to the recipient;

determining the private key at the recipient using the identification key;

determining the hash key at the recipient using the private key and the character string;

decrypting the encrypted data at the recipient using the hash key; and

verifying the signature at the recipient using the hash key and the decrypted data.

11. A method for secure data transmission, comprising:

receiving a plurality of character strings from a sender,

receiving an identification key from the sender,

receiving a plurality of encrypted data packets from the sender, each of the plurality of character strings correspond to one of the plurality of encrypted data packets;

determining a private key associated with the sender using the identification key; and

decrypting the plurality of encrypted data packets using the private key and the respective character strings.

12. The method of claim 11 , further comprising determining a hash key using the character string and the private key, and wherein decrypting the encrypted data comprises decrypting the encrypted data using the hash key.

13. The method of claim 11 , wherein determining the private key comprises accessing a relational database associating the identification key to the private key.

14. The method of claim 11 , wherein receiving the character string comprises receiving a randomly generated character string.

15. The method of claim 11 , further comprising hashing the character string with the private key to generate a hash key, and wherein decrypting the encrypted data comprises decrypting the encrypted data using the hash key.

16. The method of claim 11 , further comprising:

receiving a signature from the sender; and

verifying the signature using the decrypted data, the private key, and the character string.

17. The method of claim 11 , further comprising:

receiving a signature from the sender;

determining a hash key using the private key and the character string; and

verifying the signature using the decrypted data and the hash key.

18. The method of claim 11 , further comprising:

receiving a first signature from the sender,

determining a hash key using the private key and the character string;

generating a second signature using the hash key and the decrypted data; and

comparing the first signature to the second signature.

19. A system for secure data transmission, comprising:

a processor;

a memory coupled to the processor;

a string generator stored in the memory and executable by the processor, the string generator adapted to generate a character string;

a hashing engine stored in the memory and executable by the processor, the hashing engine adapted to generate a hash key using the character string and a private key wherein the hash key is different for each data packet associated with the secure data transmission; and

an encryption engine stored in the memory and executable by the processor, the encryption engine adapted to encrypt the data using the hash key; and

wherein the processor is adapted to transmit the encrypted data, an identification key related to the private key, and the character string to a recipient.

20. The system of claim 19 , further comprising a signature engine stored in the memory and executable by the processor, the signature engine adapted to generate a signature using the hash key and the data, the processor further adapted to transmit the signature to the recipient.

21. The system of claim 20 , wherein the recipient is adapted to decrypt the encrypted data and verify the signature using the decrypted data.

22. The system of claim 19 , wherein the hashing engine is adapted to hash the character string with the private key to generate the hash key.

23. The system of claim 19 , wherein the string generator is adapted to randomly generate the character string.

24. The system of claim 19 , wherein the recipient is adapted to decrypt the encrypted data using the identification key and the character string.

25. The system of claim 19 , wherein the recipient is adapted to determine the hash key using the identification key and the character string and decrypt the encrypted data using the hash key.

26. The system of claim 19 , wherein the recipient is adapted to access a relational database associating the identification key with the private key and decrypt the encrypted data using the private key and the character string.

27. A system for secure data transmission, comprising:

a processor adapted to receive a plurality of encrypted data packets, an identification key, and a plurality of character string strings from a sender, each of the plurality of character strings correspond to one of the plurality of encrypted data packets;

a memory coupled to the processor;

a relational database stored in the memory and accessible by the processor, the relational database relating the identification key to a private key; and

a decryption engine stored in the memory and executable by the processor, the decryption engine adapted to decrypt the encrypted data packets using the respective character strings and the private key.

28. The system of claim 27 , further comprising a hashing engine stored in the memory and executable by the processor, the hashing engine adapted to generate a hash key using the private key and the character string, the decryption engine adapted to decrypt the encrypted data using the hash key.

29. The system of claim 27 , further comprising a signature engine stored in the memory and executable by the processor, the signature engine adapted to verify a signature received from the sender using the private key and the character string.

30. The system of claim 27 , further comprising:

a hashing engine stored in the memory and executable by the processor, the hashing engine adapted to generate a hash key using the private key and the character string; and

a signature engine stored in the memory and executable by the processor, the signature engine adapted to verify a signature received from the sender using the hash key and the decrypted data.

31. The system of claim 27 , further comprising a hashing engine stored in the memory and executable by the processor, the hashing engine adapted to hash the character string with the private key to generate a hash key, the decryption engine adapted to decrypt the encrypted data using the hash key.

32. The system of claim 27 , further comprising a string generator stored in the memory and executable by the processor, the string generator adapted to generate a character string, and wherein the decryption engine is further adapted to encrypt-data for transmitting to the sender using the character string and the private key.

33. The system of claim 32 , further comprising:

a string generator stored in the memory and executable by the processor, the string generator adapted to generate a character string; and

a hashing engine stored in the memory and executable by the processor, the hashing engine adapted to hash the character string with the private key to generate a hash key, and wherein the decryption engine is further adapted to encrypt data for transmitting to the sender using the hash key.

34. The system of claim 32 , further comprising a signature engine stored in the memory and executable by the processor, the signature engine adapted to generate a first signature using the decrypted data and compare the first signature to a second signature received from the sender.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 21, 2023
From: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.; HP INC.
To: WORKDAY, INC.
Reel/Frame 063400/0810 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 30, 2003
From: HEWLETT-PACKARD COMPANY
To: HEWLETT-PACKARD DEVELOPMENT COMPANY L.P.
Reel/Frame 014061/0492 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 14, 2002
From: KRAWETZ, NEAL A.
To: HEWLETT-PACKARD COMPANY
Reel/Frame 012730/0935 →
Continuity (1)
Related Publication 20030072454A1 · Apr 17, 2003