Steve A White, 404148 Windsor Heights Pl, White Plains, MD 20695

4924515, May 8, 1990

Aug 24, 1989

7/398299

Stephen M. Matyas - Manassas VA
Dennis G. Abraham - Concord NC
William C. Arnold - Mahopac NY
Donald B. Johnson - Manassas VA
Ramesh K. Karne - Herndon VA
An V. Le - Arlington VA
Rostislaw Prymak - Dumfries VA
Steve R. White - New York NY
John D. Wilkins - Somerville VA

International Business Machines Coprporation - Armonk NY

H04L 902

380 25

A method and apparatus are disclosed for use in a data processing system which executes a program which outputs cryptographic service requests for operations with cryptographic keys which are associated with control vectors defining the functions which each key is allowed by its originator to perform. The improved method and apparatus enable the use of control vectors having an arbitrary length. It includes a control vector register having an arbitrary length, for storing a control vector of arbitrary length associated with an N-bit cryptographic key. It further includes a control vector checking means having an input coupled to the control vector register, for checking that the control vector authorizes the cryptographic function which is requested by the cryptographic service request. It further includes a hash function generator having an input coupled to the control vector register and an N-bit output, for mapping the control vector output from the control vector register, into an N-bit hash value. A key register is included for storing the N-bit cryptographic key.