Method for strongly encrypting .ZIP files

• US 10,607,024 B2
• Filed: 11/02/2018
• Issued: 03/31/2020
• Est. Priority Date: 07/16/2003
• Status: Active Grant

• Current Assignee: PKWARE, Inc. (PKW Holdings, Inc.)
• Original Assignee: PKWARE, Inc. (PKW Holdings, Inc.)
• Inventors: Peterson, James C.
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US16/178,873
• Publication Number:
  US 20190073486A1
• Time in Patent Office: 515 Days
• CPC Class Codes: G06F 16/1744 using compression, e.g. sparse files
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068

Abstract

The present invention provides a method of integrating existing strong encryption methods into the processing of a .ZIP file to provide a highly secure data container which provides flexibility in the use of symmetric and asymmetric encryption technology. The present invention adapts the well-established .ZIP file format to support higher levels of security and multiple methods of data encryption and key management, thereby producing a highly secure and flexible digital container for electronically storing and transferring confidential data.

Claims

1. A method of constructing a modified .ZIP file format data container on a computer, said method including:

receiving a first data file at an application on a computer, wherein said first data file has been retrieved from an electronic computer data storage by said application;

encrypting said first data file to form a first encrypted data file, wherein said encrypting uses symmetric encryption employing a first encryption method using a first symmetric key received from a user,

wherein said first encryption method is selected from a plurality of available encryption methods selectable by a user,

wherein said symmetric encryption uses one of a plurality of bit lengths selectable by a user;

asymmetrically encrypting said first symmetric key using a public key to form asymmetric key data,

wherein said public key is received by said application from a memory including a public key storage location on said computer,

wherein said public key is hashed by said application to form hash of public key data; and

constructing a modified .ZIP file format data container based on the .ZIP file format,

wherein said modified .ZIP file format data container includes a central directory,

wherein said central directory has been modified from the .ZIP file format to include an asymmetric key data storage location receiving and storing said asymmetric key data,

wherein said modified .ZIP file format data container includes an encrypted data file storage location receiving and storing said encrypted data file,

wherein said asymmetric key data storage location is logically associated with said encrypted data file storage location based on the position of said asymmetric key data storage location in said central directory and the location of said encrypted data file storage location in said modified .ZIP file format data container,

wherein said central directory stores said hash of public key data.

2. The method of claim 1 further including:

receiving a second data file at said application on said computer, wherein said second data file has been retrieved from electronic computer data storage by said application;

encrypting said second data file to form a second encrypted data file, wherein said encrypting uses symmetric encryption employing a second encryption method using a symmetric key having a second symmetric key bit length,

wherein said second symmetric key bit length is one of said plurality of available symmetric key bit lengths that may be used to perform said encrypting; and

placing said second encrypted data file in said modified .ZIP file format data container using said application on said computer.

3. The method of claim 2 wherein said second symmetric key bit length is not equal to said first symmetric key bit length.

4. The method of claim 2 wherein said second encryption method is not the same as said first encryption method.

5. The method of claim 4 wherein said modified .ZIP file format data container is modified from said .ZIP file format to include an additional data field identifying an encryption record version of said second encrypted data file, wherein said encryption record version of said first encrypted file is not the same as said encryption record version of said second encrypted file.