Enhanced message security

• US 20030204721A1
• Filed: 04/29/2002
• Published: 10/30/2003
• Est. Priority Date: 04/29/2002
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Day, Paul R., Bates, Cary L., Barrus, William G., Crenshaw, Robert J.
• Granted Patent: US 7,475,248 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

A secure messaging system and method. The method can include the steps of receiving an encrypted message, the message having been encrypted using a token of a corresponding pervasive device; wirelessly verifying the presence of the pervasive device; and, if the presence can be verified, decrypting the message using the token. The verification step can include the steps of establishing a wireless link with the pervasive device; and, querying the pervasive device over the wireless link. In particular, the establishing step can include the step of establishing a Bluetooth link with the pervasive device. Furthermore, the querying step can include the step of requesting geographic coordinates which locate the pervasive device.

Claims

1. A secure messaging system, comprising:

a message source and a message recipient, communicatively linked to one another through a computer communications network;

a pervasive computing device personally associated with said message recipient;

at least one token which uniquely identifies said pervasive computing device;

a first wireless communications receiver/transmitter disposed in said message recipient, and a second wireless communications receiver/transmitter disposed in said pervasive computing device;

an encryption engine associated with said message source which has been configured to encrypt messages intended for said message recipient with said at least one token; and

,

a decryption engine associated with said message recipient which has been configured to decrypt said messages with said at least one token only when a wireless link has been established between said first and second wireless receiver/transmitters.

2. The secure messaging system of claim 1, wherein said first and second wireless receiver/transmitters are short range radio frequency receiver/transmitters.

3. The secure messaging system of claim 2, wherein said short range radio frequency receiver/transmitters comport with the Bluetooth wireless protocol.

4. The secure messaging system of claim 1, wherein said token comprises a media access control (MAC) address which corresponds to said pervasive computing device.

5. The secure messaging system of claim 1, further comprising a geographic positioning system disposed in said pervasive computing device.

6. The secure messaging system of claim 5, wherein said token comprises a set of geographic coordinates specifying a geographic position for said pervasive device.

7. A secure messaging method, the method comprising the steps of:

receiving an encrypted message, said message having been encrypted using a token of a corresponding pervasive device;

wirelessly verifying the presence of said pervasive device; and

,

if said presence can be verified, decrypting said message using said token.

8. The secure messaging method of claim 7, wherein said verification step comprises the steps of:

establishing a wireless link with said pervasive device; and

,

querying said pervasive device over said wireless link.

9. The secure messaging method of claim 8, wherein said establishing step comprises the step of establishing a Bluetooth link with said pervasive device.

10. The secure messaging method of claim 7, wherein said querying step comprises the step of sending a request to said pervasive device, said request comprising one of a request for said token, a request for an decryption key based upon said token, and a request for an acknowledgment of said request.

11. The secure messaging method of claim 7, wherein said querying step comprises the step of requesting geographic coordinates which locate said pervasive device.

12. A machine readable storage having stored thereon a computer program for secured messaging, said computer program comprising a routine set of instructions for causing the machine to perform the steps of:

receiving an encrypted message, said message having been encrypted using a token of a corresponding pervasive device;

wirelessly verifying the presence of said pervasive device; and

,

if said presence can be verified, decrypting said message using said token.

13. The machine readable storage of claim 12, wherein said verification step comprises the steps of:

establishing a wireless link with said pervasive device; and

,

querying said pervasive device over said wireless link.

14. The machine readable storage of claim 13, wherein said establishing step comprises the step of establishing a Bluetooth link with said pervasive device.

15. The machine readable storage of claim 12, wherein said querying step comprises the step of sending a request to said pervasive device, said request comprising one of a request for said token, a request for an decryption key based upon said token, and a request for an acknowledgment of said request.

16. The machine readable storage of claim 12, wherein said querying step comprises the step of requesting geographic coordinates which locate said pervasive device.