Patent ID: 9584495
Date: 2017-02-28
CPC Classifications: H04L

Claim:
1. A method for facilitating secure data communication between a first communicating party and a second communicating party by a first trusted party, the first and second communicating parties being members of a set of registrants, the method comprising: storing, by the first trusted party on a trusted party processing machine comprising a processor, a digital composite key comprising a plurality of secret keys, each of the plurality of secret keys being known only to the first trusted party and exactly one member of the set of registrants, the plurality of secret keys including a first communicating party key known only to the first trusted party and the first communicating party and a second communicating party key known only to the first trusted party and the second communicating party; receiving by the first trusted party first information encrypted by the first communicating party using the first communicating party key; encrypting second information by the first trusted party using the second communicating party key to provide first encrypted second information; sending the first encrypted second information by the first trusted party to the second communicating party, wherein the second information is configured for use by the first and second communicating parties in conjunction with third information provided by a second trusted party to generate at least one session key for encrypting communication between the first and second communicating parties, knowledge of both of the second and third information being necessary to generate or determine the at least one session key and wherein the second information includes a first seed key determined by the first trusted party using the first information and the third information includes a second seed key provided by the second trusted party so that at least one of the first and second seed keys is unknown to each of the first and second trusted parties and the at least one session key cannot be generated or determined from either the first or second seed key alone.