System and method for transmitting a secure message over a signaling network

• US 10,542,426 B2
• Filed: 11/21/2014
• Issued: 01/21/2020
• Est. Priority Date: 11/21/2014
• Status: Active Grant

• Current Assignee: Yaana Technologies, LLC
• Original Assignee: Yaana Technologies, LLC
• Inventors: Puri, Rajesh, Grootwassink, David, Hammer, Michael P.
• Primary Examiner(s): Brown, Anthony D
• Application Number:
  US14/550,110
• Publication Number:
  US 20160150403A1
• Time in Patent Office: 1,887 Days
• Field of Search: 380270
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

A system and method for transmitting a secure message is disclosed. According to one embodiment, a method includes providing a request for one or more attributes associated with a phone number for a recipient mobile device, generating a key based on the one or more attributes, receiving an encrypted message for a recipient mobile device, where the encrypted message is encrypted based on the key, requesting the one or more attributes from the recipient mobile device, receiving the one or more attributes from the recipient mobile device, regenerating the key based on the one or more attributes received from the recipient mobile device, decrypting the encrypted message based on the regenerated key, and delivering the decrypted message to the recipient mobile device.

Claims

1. A method, comprising:

providing a first request to a recipient mobile device for one or more attributes associated with a phone number for the recipient mobile device;

receiving the one or more attributes from the recipient mobile device after providing the first request;

generating a key based on the one or more attributes received from the recipient mobile device;

receiving an encrypted message for the recipient mobile device, wherein the encrypted message is encrypted based on the key;

providing a second request to the recipient mobile device for the one or more attributes of the recipient mobile device before delivering the encrypted message to the recipient mobile device;

receiving the one or more attributes from the recipient mobile device after providing the second request;

regenerating the key based on the one or more attributes received from the recipient mobile device;

decrypting the encrypted message based on the regenerated key to generate a decrypted message; and

delivering the decrypted message to the recipient mobile device, wherein the decrypted message is an SMS message having a clear text format.

2. The method of claim 1, wherein providing the request for the one or more attributes comprises requesting one or more of a sender identifier corresponding to a message sending system and a recipient identifier of the recipient mobile device.

3. The method of claim 2, further comprising generating the key based on one or more of the sender identifier, the recipient identifier, an agent key, and a nonce.

4. The method of claim 1, further comprising storing the key at a message sending system.

5. The method of claim 1, wherein the one or more attributes comprises one or more of a device attribute and a service subscription attribute.

6. The method of claim 1, further comprising regenerating the key based on one or more of a sender identifier of a message sending system, a recipient identifier of the recipient mobile device, an agent key, and a nonce.

7. The method of claim 1, further comprising receiving an acknowledgement from the recipient mobile device.

8. The method of claim 1, further comprising requesting keys for the phone number based on a sender identifier corresponding to a customer of the message sending system.

9. The method of claim 1, further comprising authorizing the request for the one or more attributes based on a code corresponding to a message sending system.

10. The method of claim 1, further comprising receiving the encrypted message for the recipient mobile device, wherein the encrypted message is encrypted based on the key and a nonce.

11. The method of claim 1, further comprising decrypting the encrypted message based on the regenerated key and a nonce.

12. A system, comprising:

a delivery agent that provides a first request to a recipient mobile device for one or more attributes associated with a phone number from the recipient mobile device,

wherein the delivery agent receives the one or more attributes from the recipient mobile device after providing the first request;

wherein the delivery agent generates a key based on the one or more attributes received from the recipient mobile device,

wherein the delivery agent receives an encrypted message for a recipient mobile device, wherein the encrypted message is encrypted based on the key,

wherein the delivery agent provides a second request to the recipient mobile device for the one or more attributes of the recipient mobile device before delivering the encrypted message to the recipient mobile device,

wherein the delivery agent receives the one or more attributes from the recipient mobile device after providing the second request,

wherein the delivery agent regenerates the key based on the one or more attributes received from the recipient mobile device,

wherein the delivery agent decrypts the encrypted message based on the regenerated key to generate a decrypted message, and

wherein the delivery agent delivers the decrypted message to the recipient mobile device, wherein the decrypted message is an SMS message having a clear text format.

13. The system of claim 12, wherein the delivery agent receives a sender identifier of a message sending system and a recipient identifier of the recipient mobile device from the message sending system.

14. The system of claim 13, wherein the delivery agent generates the key based on one or more of the sender identifier, the recipient identifier, an agent key, and a nonce.

15. The system of claim 13, wherein the message sending system stores the key.

16. The system of claim 12, wherein the one or more attributes comprises one or more of a device attribute and a service subscription attribute.

17. The system of claim 12, wherein the delivery agent regenerates the key based on one or more of a sender identifier of a message sending system, a recipient identifier of the recipient mobile device, an agent key, and a nonce.

18. The system of claim 12, wherein the delivery agent receives an acknowledgement from the recipient mobile device.

19. The system of claim 12, wherein the delivery agent requests keys for the phone number based on a sender identifier corresponding to a customer of the message sending system.

20. The system of claim 12, wherein the delivery agent authorizes the request for the one or more attributes based on a code corresponding to a message sending system.

21. The system of claim 12, wherein the delivery agent receives the encrypted message for the recipient mobile device, wherein the encrypted message is encrypted based on the key and a nonce.

22. The system of claim 12, wherein the delivery agent decrypts the encrypted message based on the regenerated key and a nonce.

23. The system of claim 12, wherein a user identity from a sender mobile device is used to encrypt the encrypted message received by the delivery agent.

24. The system of claim 23, wherein the encrypted message carries a code word known only to a sender of the sender mobile device and a recipient of the recipient mobile device.

25. The system of claim 12, wherein the delivery agent requests one or more identification parameters from the recipient mobile device before delivering the decrypted message to the recipient mobile device.

26. The system of claim 25, wherein the delivery agent verifies the one or more identification parameters received from the recipient mobile device and delivers the decrypted message to the recipient mobile device using said identification parameters.

27. The system of claim 12, wherein after receiving the one or more attributes from the recipient mobile device, the delivery agent sends an acknowledgement to the recipient mobile device.

28. The system of claim 12, wherein the delivery agent receives the one or more attributes from the recipient mobile device over SS7 protocol.