Thomas W Kerr

US Patent:

7206936, Apr 17, 2007

Filed:

Dec 19, 2001

Appl. No.:

10/027944

Inventors:

Kenneth W. Aull - Fairfax VA, US
Thomas C. Kerr - Fairfax VA, US
William E. Freeman - Arbutus MA, US
Mark A. Bellmore - Mt. Airy MD, US

Assignee:

Northrop Grumman Corporation - Los Angeles CA

International Classification:

H04L 9/30
H04L 29/02

US Classification:

713173, 713185, 726 20

Abstract:

A method and computer program to revoke and update a token () having several encryption, signature and role certificates/private keys contained in the token (). The certificates/private keys in the token are transmitted wrapped by a public key and may only be activated by a private key contained in the token (). The activation of any certificate/private key requires the entry of a passphrase by a user (). Further, all certificates/private keys contained in a token () are stored in an authoritative database. In the event that a token () is lost then all certificates/private keys associated with the token () are revoked. Further, when new certificates/private keys are issued to a user () these certificates/private keys are encrypted using the token's () public key and downloaded to the token ().

US Patent:

7475250, Jan 6, 2009

Filed:

Dec 19, 2001

Appl. No.:

10/027622

Inventors:

Kenneth W. Aull - Fairfax VA, US
Thomas C. Kerr - Fairfax VA, US
William E. Freeman - Arbutus MD, US
Mark A. Bellmore - Mt. Airy MD, US

Assignee:

Northrop Grumman Corporation - Los Angeles CA

International Classification:

H04L 9/00

US Classification:

713173

Abstract:

A method and computer program to assign certificates/private keys to a token. This method and computer program allows a user to access a certificate authority and have certificates/private keys that are used for signature, encryption and role purposes generated and downloaded to the token. The use of secure communication lines and computers is not necessary since the token contains a unique token ID and private key, while the certificate authority contains the associated public key for the token. The certificate generated is wrapped in the public key and only the token, having the associated private key, may activate the certificate.

US Patent:

20030115455, Jun 19, 2003

Filed:

Dec 19, 2001

Appl. No.:

10/027563

Inventors:

Kenneth Aull - Fairfax VA, US
Thomas Kerr - Fairfax VA, US
William Freeman - Arbutus MD, US
Mark Bellmore - Mt. Airy MD, US

International Classification:

H04L009/00

US Classification:

713/156000

Abstract:

Method and apparatus for centralized processing of hardware tokens for a public key infrastructure (PKI). A commercially available token is received at a secure processing facility. An operating system is installed on the token. A unique key encipherment certificate is created that includes a public key for the token. The unique key encipherment certificate is written onto the token. A Root Certificate Authority certificate is also written onto the token. A unique private key is written onto the token where the unique private key is the matching key for the unique key encipherment certificate. A software package is loaded onto the token. The software package is capable of cryptologically validating future keys and certificates, decrypting the keys and certificates, and installing the keys and certificates in the token.

US Patent:

20030115467, Jun 19, 2003

Filed:

Dec 19, 2001

Appl. No.:

10/027607

Inventors:

Kenneth Aull - Fairfax VA, US
Thomas Kerr - Fairfax VA, US
William Freeman - Arbutus MD, US
Mark Bellmore - Mt. Airy MD, US

International Classification:

H04L009/00

US Classification:

713/173000

Abstract:

A token issuance and binding process includes providing a plurality of tokens, each token having a unique ID number stored therein. A unique public/private key pair is generated for each token and each token ID number and corresponding public key is stored in a directory/database. Each private key is stored in its respective token and a unique ID number of a user is bound to a corresponding one of the plurality of tokens by storing the correspondence there between in the directory/database.