Patent ID: 8589696
Filing Date: 2013-11-19
Classification: G06F,H04L

Abstract:
1. An information network comprising: a number of personal information devices each incorporating biometric/cryptographic processing means (BCPM) on said network and able to exchange information with each other and with other devices on said network by means of a communication system, wherein a public key distribution means to make available to any device on said network verified public key values for each said BCPM and each said personal information device on said network; each biometrically associated public key that is generated by any of said BCPM corresponding to a specific authorized user of said BCPM and having associated with it identifying information pertaining to the said corresponding specific authorized user; each public key that is generated by any of said BCPM having a public key history of past retired and future replacement public keys, and corresponding active time windows, beginning with the first public key for a specific authorized user corresponding to said public key and ending with the last or currently-active public key for the specific authorized user corresponding to said public key; each public key that is generated by a cryptographically enabled device that is not a personal information device having a public key history of past retired and future replacement public keys, and corresponding active time windows, beginning with the first public key for said cryptographically enabled device and ending with the last or currently-active public key for said cryptographically enabled device; said public key distribution means retaining a public key history, including corresponding active time windows, for each public key used on said information network; each said BCPM on said information network being configured such that for each authorized user of said BCPM, said BCPM retains an authorized user's key pair history being a history of private/public key pairs that said BCPM generates, along with the active time window for each said key pair; each said cryptographically enabled device on said information network that is not a personal information device being configured to retain a history of private/public key pairs that it generates, along with the active time window for each said key pair; each said second BCPM on said information network being configured to authenticate and process received first message information with the correct cryptographic keys, after positively biometrically identifying the second authorized user, by using said timestamp(s) in said first message information to identify the key pairs corresponding to said timestamp(s) within said second BCPM, and by retrieving from said public key distribution means the public key(s) corresponding to said timestamp(s) for said first authorized user of said first BCPM from which said first message information originated; each said second cryptographically enabled device on said information network being configured to authenticate and process received second message information with the correct cryptographic keys by using said timestamp(s) in said second message information to identify its own key pairs corresponding to said timestamp(s) and by retrieving from said public key distribution means the public key(s) corresponding to said timestamp(s) for the first authorized user of said first BCPM from which said second message information originated; each said second BCPM on said information network being configured to authenticate and process received third message information with the correct cryptographic keys, after positively biometrically identifying said second authorized user, by using timestamp(s) in said third message information to identify the key pairs corresponding to said timestamp(s) within said second BCPM and by retrieving from said public key distribution means the public key(s) corresponding to said timestamp(s) for said first cryptographically enabled device from which said third message information originated.