Secure communication of information via a communication network

• US 20030061511A1
• Filed: 09/27/2001
• Published: 03/27/2003
• Est. Priority Date: 09/27/2001
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Fischer, Todd
• Application Number:
  US09/965,164
• Publication Number:
  US 20030061511A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08

Abstract

Methods for securely communicating information are provided. A representative method includes: communicating an address to a first network device via the Internet; receiving encrypted information from the first network device via the Internet; enabling the encrypted information to be posted at the address; and enabling a second network device to access and retrieve the encrypted information from the address via the Internet while the encrypted information is posted. Systems and other methods also are provided.

Claims

1. A method for securely communicating information, said method comprising:

communicating an address to a first network device via the Internet such that the first network device provides information corresponding to the address for use by a second network device;

receiving encrypted information from the first network device via the Internet;

enabling the encrypted information to be posted at the address; and

enabling the second network device to access the address and retrieve the encrypted information posted at the address.

2. The method of claim 1, further comprising:

after the encrypted information has been retrieved by the second network device, preventing the encrypted information from being retrieved from the address again.

3. The method of claim 2, wherein a first firewall is communicatively coupled between the first network device and the Internet.

4. The method of claim 2, wherein the address provided to the first network device is a first Uniform Resource Locator (URL) configured for a one-time use;

and

wherein the second network device retrieves the encrypted information using a second URL, the second URL being configured for a one-time use.

5. The method of claim 1, wherein the encrypted information is provided from the first network device to the second network device without either of the first and second network devices being identified to the other.

6. The method of claim 1, wherein the address is provided to the second network device via a mobile appliance, the mobile appliance communicating with the first and second network devices via wireless communication links.

7. The method of claim 1, wherein a decryption key is provided to the second network device via a secure communication protocol, the decryption key being configured to enable decryption of the encrypted information.

8. The method of claim 7, wherein the secure communication protocol uses the Bluetooth specification.

9. The method of claim 7, wherein the decryption key is provided to the second network device via a mobile appliance, the mobile appliance communicating wit h the first and second network devices via wireless communication links.

10. The method of claim 9, wherein the decryption key is generated by the first network device;

and

wherein the mobile appliance receives the decryption key from the first network device.

11. The method of claim 1, wherein the second network device is a printing device configured to receive the encrypted information, decrypt the information, and print the information.

12. A system for enabling secure communication of information between a first network device and a second network device via the Internet, said system comprising:

a secure tunnel system communicating with the Internet;

the secure tunnel system being configured to;

provide address information to a first network device via the Internet;

receive encrypted information from the first network device via the Internet, post the encrypted information at an address associated with the address information; and

enable a second network device to access and retrieve the encrypted information from the address via the Internet while the encrypted information is posted.

13. The system of claim 12, wherein the secure tunnel system is configured to prevent the encrypted information from being retrieved again after the encrypted information has been retrieved by the second network device.

14. The system of claim 12, further comprising:

means for preventing the encrypted information from being retrieved again after the encrypted information has been retrieved by the second network device.

15. The system of claim 14, wherein the means for preventing the encrypted information from being retrieved again comprises:

means for generating a Uniform Resource Locator (URL) for use by the second network device, the URL being configured for a one-time use such that, after the second network device uses the URL to retrieve the encrypted information, the URL can no longer be used to retrieve the encrypted information.

16. A method for securely communicating information, said method comprising:

providing a first network device;

receiving, at the first network device, an address via the Internet;

providing a decryption key and the address to a mobile appliance via a secure communication link; and

providing encrypted information to the address via the Internet, such that a second network device is enabled to access and retrieve the encrypted information from the address via the Internet while the encrypted information is posted and decrypt the information using the decryption key provided from the mobile appliance.

17. The method of claim 16, further comprising:

receiving an input from a user, the input corresponding to the user'"'"'s intent to have information communicated to the second network device;

in response to the user input, establishing communication with a third network device via the Internet, the third network device being configured to provide the first network device with a first Uniform Resource Locator (URL) for use by the first network device and a second URL for use by the second network device, the first URL being configured for a one-time use such that the first network device can post encrypted information at the address using the first URL, the second URL being configured for a one-time use such that the second network device can retrieve the encrypted information from the address using the first URL; and

receiving the first and second URL'"'"'s from the third network device.

18. The method of claim 16, further comprising:

generating a decryption key for decrypting the encrypted information.

19. A system for enabling secure communication of information between a first network device and a second network device, said system comprising:

an information request system configured to communicate with the first and second network devices,

the information request system being configured to receive an input from a user, the input corresponding to the user'"'"'s intent to have encrypted information communicated to the second network device,

the information request system being further configured to receive a decryption key and information corresponding to an address from the first network device in a secure format, the information request system providing the decryption key and the information corresponding to the address to the second network device in the secure format, thereby enabling the second network device to access and retrieve encrypted information posted on the Internet at the address and decrypt the information using the decryption key.

20. The system of claim 19, further comprising:

a mobile appliance configured to communicate with the first and second network devices; and

wherein the information request system is a part of the mobile appliance.