| 摘要 |
A network server is operated so as to facilitate legal eavesdropping by receiving, from the first user via a network, a session key (SK) encrypted with a second user's public key, kpubU2, and the SK encrypted with an escrow server's (ES) public key, kpubES. The kpubU2 key is the public key of the second user asymmetric private/public key pair kpriU2/kpubU2. The kpubES key is the public key of the ES asymmetric private/public key pair kpriES/kpubES. The received SK encrypted with kpubES is stored. The SK encrypted with kpubU2 is transmitted to the second user via the network. A message encrypted with the SK is received from one of the first and the second users via the network, stored, and transmitted to the other of the first and the second users via the network. |
| 主权项 |
1. A method of operating a network server to facilitate legal eavesdropping, comprising:
receiving, from a first user via a network, (i) a session key (SK) encrypted with a second user's public key, kpubU2, which is the public key of asymmetric private/public key pair kpriU2/kpubU2 of the second user and (ii) the SK encrypted with an escrow server's (ES) public key, kpubES, which is the public key of asymmetric private/public key pair kpriES/kpubES of the ES; storing the received SK encrypted with kpubES; transmitting, to the second user via the network, the received SK encrypted with kpubU2; receiving, from one of the first and the second users via the network, a message encrypted with the SK; storing the received message encrypted with the SK; also transmitting, to the other of the first and the second users via the network, the received message encrypted with the SK; and transmitting to an authorized eavesdropper the stored SK encrypted with kpubES and the stored message encrypted with the SK. |
