Methods, systems, and media for using dynamic public key infrastructure to send and receive encrypted messages

• US 10,411,879 B2
• Filed: 03/24/2017
• Issued: 09/10/2019
• Est. Priority Date: 03/25/2016
• Status: Active Grant

• Current Assignee: Pham Holdings, Inc., Synergex Group, Inc. (Synergex Corp.), Wayne Taylor
• Original Assignee: Synergex Group
• Inventors: Pham, Thien Van
• Primary Examiner(s): Abyaneh, Ali S
• Assistant Examiner(s): Callahan, Paul E
• Application Number:
  US15/469,119
• Publication Number:
  US 20170279602A1
• Time in Patent Office: 900 Days
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

Methods, systems, and media for transmitting encrypted messages are provided. In some arrangements, the method comprises: generating, using a hardware processor by a first application, a first public key and a first private key corresponding to a first application; transmitting the first public key to a second application; receiving, from the second application, a second public key; encrypting a first message using the second public key corresponding to the second application; generating, by the first application, a third public key and a second private key; transmitting the encrypted message and third public key to the second application; receiving, from the second application, a second message and a fourth public key corresponding to the second application; and decrypting the second message using the second private key.

Claims

1. A method for transmitting encrypted messages,

comprising:

generating, using a hardware processor by a first application, a first public key and a first private key corresponding to the first application;

transmitting the first public key to a second application;

receiving, from the second application, a second public key;

encrypting a first message using the second public key corresponding to the second application to form an encrypted message;

generating, by the first application, a third public key and a second private key in response to the encrypted message being about to be transmitted;

transmitting the encrypted message and the third public key to the second application;

receiving, from the second application, a second message and a fourth public key corresponding to the second application; and

decrypting the second message using the second private key.

2. The method of claim 1, wherein the first message includes an Internet Protocol (IP) Address associated with the second application.

3. The method of claim 1, further comprising:

determining whether a command included in the second message is a valid command; and

in response to determining that the command is not a valid command, transmitting a fraud alert to at least one user device.

4. The method of claim 3, wherein transmitting the fraud alert to the at least one user device comprises transmitting at least one of:

a text message to the at least one user device and an email to a user account associated with the at least one user device.

5. The method of claim 3, wherein determining whether the command is a valid command comprises determining whether the command is known to the first application.

6. The method of claim 1, wherein content of the message comprises at least one of binary data and text data.

7. The method of claim 1, wherein the second message is an acknowledgement message from the second application.

8. A system for transmitting encrypted messages, the system

comprising:

a hardware processor that is programmed to;

generate, by a first application, a first public key and a first private key corresponding to the first application;

transmit the first public key to a second application;

receive, from the second application, a second public key;

encrypt a first message using the second public key corresponding to the second application to form an encrypted message;

generate, by the first application, a third public key and a second private key in response to the encrypted message being about to be transmitted;

transmit the encrypted message and the third public key to the second application;

receive, from the second application, a second message and a fourth public key corresponding to the second application; and

decrypt the second message using the second private key.

9. The system of claim 8, wherein the first message includes an Internet Protocol (IP) Address associated with the second application.

10. The system of claim 8, wherein the hardware processor is further

programmed to:

determine whether a command included in the second message is a valid command; and

in response to determining that the command is not a valid command, transmit a fraud alert to at least one user device.

11. The system of claim 10, wherein transmitting the fraud alert to the at least one user device comprises transmitting at least one of:

a text message to the at least one user device and an email to a user account associated with the at least one user device.

12. The system of claim 10, wherein determining whether the command is a valid command comprises determining whether the command is known to the first application.

13. The system of claim 8, wherein content of the message comprises at least one of binary data and text data.

14. The system of claim 8, wherein the second message is an acknowledgement message from the second application.

15. A non-transitory computer-readable medium containing computer executable instructions that, when executed by a processor, cause the processor to perform a method for transmitting encrypted messages, the method comprising:

generating, by a first application, a first public key and a first private key corresponding to the first application;

transmitting the first public key to a second application;

receiving, from the second application, a second public key;

encrypting a first message using the second public key corresponding to the second application to form an encrypted message;

generating, by the first application, a third public key and a second private key in response to the encrypted message being about to be transmitted;

transmitting the encrypted message and the third public key to the second application;

receiving, from the second application, a second message and a fourth public key corresponding to the second application; and

decrypting the second message using the second private key.

16. The non-transitory computer-readable medium of claim 15, wherein the first message includes an Internet Protocol (IP) Address associated with the second application.

17. The non-transitory computer-readable medium of claim 15, wherein the method further comprises:

determining whether a command included in the second message is a valid command; and

in response to determining that the command is not a valid command, transmitting a fraud alert to at least one user device.

18. The non-transitory computer-readable medium of claim 17, wherein transmitting the fraud alert to the at least one user device comprises transmitting at least one of:

a text message to the at least one user device and an email to a user account associated with the at least one user device.

19. The non-transitory computer-readable medium of claim 17, wherein determining whether the command is a valid command comprises determining whether the command is known to the first application.

20. The non-transitory computer-readable medium of claim 15, wherein content of the message comprises at least one of binary data and text data.

21. The non-transitory computer-readable medium of claim 15, wherein the second message is an acknowledgement message from the second application.