Kenneth P Kerr

US Patent:

8566913, Oct 22, 2013

Filed:

May 4, 2011

Appl. No.:

13/100357

Inventors:

Todd W. Arnold - Charlotte NC, US
Elizabeth A. Dames - Concord NC, US
Carsten D. Frehr - Farum, DK
Kenneth B. Kerr - New Paltz NY, US
Richard V. Kisley - Charlotte NC, US
Michael J. Kelly - Staatsburg NY, US
Eric D. Rossman - Wappingers Falls NY, US
Eric B. Smith - Concord NC, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 29/06

US Classification:

726 5, 713193

Abstract:

A system for secure key management is provided. The system includes a computer processor and an application configured to execute on the computer processor, the application implementing a method. The method includes populating a section of information associated with a key, the section of information being populated with information relating to a level of protection of the key accumulated over time. Secure key management further includes securely binding the section of information to the key, wherein the key is encrypted.

US Patent:

8619990, Dec 31, 2013

Filed:

Apr 27, 2011

Appl. No.:

13/095226

Inventors:

Todd W. Arnold - Charlotte NC, US
Elizabeth A. Dames - Concord NC, US
Carsten D. Frehr - Farum, DK
Kenneth B. Kerr - New Paltz NY, US
Richard V. Kisley - Charlotte NC, US
Eric D. Rossman - Wappingers Falls NY, US
Eric B. Smith - Concord NC, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 9/08
H04L 9/30

US Classification:

380277

Abstract:

A system for creating a secure key is provided that includes a computer processor and an application configured to execute on the computer processor, the application implementing a method that includes creating a token and populating a key control information section of the token with a value to indicate a minimum number of key parts used to form a key. Creating the secure key also includes populating a payload section of the token with a first key part, binding the key control information section to the payload section, adding a second key part to the first key part and iterating the value and binding the key control information section to the payload section after the second key part has been added. Creating the secure key further includes indicating the key is complete, wherein the key comprises a combination of the first and second key parts.

US Patent:

8619992, Dec 31, 2013

Filed:

Oct 11, 2012

Appl. No.:

13/649768

Inventors:

Elizabeth A. Dames - Concord NC, US
Carsten D. Frehr - Farum, DK
Kenneth B. Kerr - New Paltz NY, US
Richard V. Kisley - Charlotte NC, US
Eric D. Rossman - Wappingers Falls NY, US
Eric B. Smith - Concord NC, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 9/08
H04L 9/30

US Classification:

380277

Abstract:

Creating a secure key includes creating a token and populating a key control information section of the token with a value to indicate a minimum number of key parts used to form a key. Creating the secure key also includes populating a payload section of the token with a first key part, binding the key control information section to the payload section, adding a second key part to the first key part and iterating the value and binding the key control information section to the payload section after the second key part has been added. Creating the secure key further includes indicating the key is complete, wherein the key comprises a combination of the first and second key parts.

US Patent:

8634561, Jan 21, 2014

Filed:

May 4, 2011

Appl. No.:

13/100354

Inventors:

Todd W. Arnold - Charlotte NC, US
Elizabeth A. Dames - Concord NC, US
Carsten D. Frehr - Farum, DK
Kenneth B. Kerr - New Paltz NY, US
Richard V. Kisley - Charlotte NC, US
Michael J. Kelly - Staatsburg NY, US
Eric D. Rossman - Wappingers Falls NY, US
Eric B. Smith - Concord NC, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 21/00

US Classification:

380280, 380277, 380278, 380279

Abstract:

A system for implementing secure key management is provided. The system includes a computer processor and an application configured to execute on the computer processor, the application implementing a method. The method includes populating a section of information associated with a key, the section being populated with information relating to how the key was created. The method also includes populating the section with information relating to how the key was acquired by a secure module; and binding the section to the key, wherein the key is encrypted.

US Patent:

20120237023, Sep 20, 2012

Filed:

Mar 14, 2011

Appl. No.:

13/047344

Inventors:

Todd W. Arnold - Charlotte NC, US
Elizabeth A. Dames - Concord NC, US
Thomas J. Dewkett - Staatsburg NY, US
Carsten D. Frehr - Farum, DK
Michael J. Kelly - Staatsburg NY, US
Kenneth B. Kerr - New Paltz NY, US
Richard V. Kisley - Charlotte NC, US
Eric D. Rossman - Wappingers Falls NY, US
Eric B. Smith - Concord NC, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

H04L 9/00

US Classification:

380 44

Abstract:

A system for implementing computer security is provided. The system includes a computer processor and an application configured to execute on the computer processor, the application implementing a method that includes creating a token and populating a payload section of the token with key material and selecting a wrapping method that specifies how the key material is securely bound to key control information. A structure of the key control information in the token is independent of the wrapping method. Implementing computer security also includes wrapping the key material and binding key control information to the key material in the token. The key control information includes information relating to usage and management of the key material.

US Patent:

20120281838, Nov 8, 2012

Filed:

May 4, 2011

Appl. No.:

13/100639

Inventors:

Todd W. Arnold - Charlotte NC, US
Elizabeth A. Dames - Concord NC, US
Carsten D. Frehr - Farum, DE
Michael J. Kelly - Wappingers Falls NY, US
Kenneth B. Kerr - New Paltz NY, US
Richard V. Kisley - Charlotte NC, US
Eric D. Rossman - Wappingers Falls NY, US
Eric B. Smith - Concord NC, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

H04L 9/00

US Classification:

380277

Abstract:

A computer program product for secure key management is provided. The computer program product includes a tangible storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for creating a token and populating the token with key material, and binding key control information to the key material. The key control information includes information relating to management of the key material populating one or more key management fields that define attributes that limit distribution of the key material.

US Patent:

20120281839, Nov 8, 2012

Filed:

May 4, 2011

Appl. No.:

13/100693

Inventors:

Todd W. Arnold - Charlotte NC, US
Elizabeth A. Dames - Concord NC, US
Carsten D. Frehr - Farum, DE
Michael J. Kelly - Wappingers Falls NY, US
Kenneth B. Kerr - New Paltz NY, US
Richard V. Kisley - Charlotte NC, US
Eric D. Rossman - Wappingers Falls NY, US
Eric B. Smith - Concord NC, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

H04L 9/00

US Classification:

380277

Abstract:

A computer program product for secure key management is provided. The computer program product includes a tangible storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for creating a token and populating the token with key material, and binding key control information to the key material. The key control information includes information relating to usage of the key material populating one or more key usage fields that define attributes that limit actions that may be performed with the key material.