Method for exchanging encrypted data via a communication network, corresponding method for storing and managing the encryption keys used, and module storing these encryption keys

摘要

Method for exchanging encrypted data between value-added providers (2) and their uses via a communication network and corresponding method for storing and managing the encryption keys (KAi, KAj, KBi) used to encrypt the exchanged data, segments (b1-b8) of the secret encryption key (KAi, KAj, KBi) being stored in a secret array (S'A, S'B) unkown to the value-added providers (2) and to their users, and a pointer (Ki) to these segments in this array (S'A, S'B) being concatenated with the encrypted data (104) being exchanged. Preparation of compact sets (SA, SB) of encryption keys (KA1-KAn, KB1-KBn) by a trusted third party (1) filling arrays (SA, SB) with segments (b1-b8) of encryption keys, assignment of encryption keys (KAi, KBi) to value-added providers (2) by a key-assignment administrator (5) communicating pointers (Ki) to the trusted third party (1), and assembly of the assigned encryption keys (KAi, KBi) by the trusted third party (1).