System and method for secure and transparent electronic communication

• US 20040133520A1
• Filed: 06/17/2003
• Published: 07/08/2004
• Est. Priority Date: 01/07/2003
• Status: Abandoned Application

• Current Assignee: NortonLifeLock Inc.
• Original Assignee: NortonLifeLock Inc.
• Inventors: Callas, Jonathan D., Price, William F. III, Allen, David E.
• Application Number:
  US10/462,775
• Publication Number:
  US 20040133520A1
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

This present invention provides users with secure transparent electronic communication, allowing them to send and receive encrypted and/or signed messages with little or no user involvement. In various embodiments, the present invention provides a user with e-mail security via automated hierarchical techniques for transparently sending and receiving secure messages, and lowers the burden on administrators. The present invention can include a server in a local network that acts as a proxy between a user and an open communications network, thereby providing transparent transmission and receipt of secure messages for the user. This could be used for sending and receiving secure e-mail or for securing instant messaging (IM). A server according to the present invention can intercept unsecured messages from a user, automatically transform those messages into secured messages, and transmit those secure messages to the intended recipients.

Claims

1. A method comprising:

providing a first server in a local network as a proxy between an open communications network and a user;

intercepting at said first server messages directed toward said open communications network or said user; and

processing said messages according to indicia contained within said messages to provide transparent transmission and receipt of secure messages over said open communications network.

2. A method as in claim 1, further comprising storing one or more messages on a second server in said local network.

3. A method, as in claim 1, wherein said messages further comprise electronic mail messages.

4. A method, as in claim 1, wherein said messages further comprise instant messages.

5. A method as in claim 1, wherein said processing further comprises:

managing a plurality of cryptographic keys within said first server for said user;

creating, when necessary, one or more cryptographic keys for said user;

upon receipt of an unsecured message from said user, securing said unsecured message; and

upon receipt of a secured message for said user, unsecuring said message.

6. A method as in claim 5, wherein said securing further comprises encrypting said unsecured message.

7. A method as in claim 5, wherein said unsecuring further comprises decrypting said secured message.

8. A method comprising:

intercepting an unsecured message from a sender;

automatically transforming said unsecured message to a secure message for a recipient; and

transmitting said secure message to said recipient.

9. A system as in claim 8, wherein said unsecured message further comprises an electronic mail message.

10. A system as in claim 8, wherein said transmitting further comprises sending said secure message via a second server.

11. A method for transparently receiving a secure message comprising:

intercepting a secure message from a sender;

automatically unsecuring said message to create an unsecured message;

when said unsecured message has an electronic signature associated with it, searching for a digital identity corresponding to said sender of said secure message;

verifying any electronic signatures associated with said unsecured message using said digital identity; and

transmitting said unsecured message to a recipient.

12. A system comprising:

a first server in a local network acting as a proxy between an open communications network and a user;

a second server in said local network upon which one or more messages are stored; and

a crypto module for automatically encrypting and decrypting said messages to provide transparent transmission and receipt of secure messages over said open communications network.

13. A system for transparently transmitting a secure message comprising:

a message receive module for intercepting an unsecured message from a sender;

a crypto module for automatically transforming said unsecured message to a secure message for a recipient; and

a message transmit module for transmitting said secure message to said recipient.

14. A system for transparently receiving a secure message comprising:

a message receive module for intercepting a secure message from a sender;

a certificate search module to search for a digital identity corresponding to said sender of said secure message when said unsecured message has an electronic signature associated with it;

a crypto module to unsecure said message to create an unsecured message and verify any electronic signatures associated with said unsecured message using said digital identity; and

a message transmit module for transmitting said unsecured message to a recipient.

15. A computer readable medium containing computer program instructions for transparently transmitting and receiving secure messages over an open communications network, said computer readable medium containing instructions for:

acting as a proxy between an open communications network and a user;

intercepting messages directed toward said open communications network or said user; and

processing said messages according to indicia contained within said messages to provide transparent transmission and receipt of secure messages over said open communications network.

16. A computer readable medium containing computer program instructions for transparently transmitting secure messages to a recipient over an open communications network, said computer readable medium containing instructions for:

intercepting an unsecured message from a sender;

automatically transforming said unsecured message to a secure message for said recipient; and

transmitting said secure message to said recipient.

17. A computer readable medium containing computer program instructions for transparently receiving secure messages for a recipient over an open communications network, said computer readable medium containing instructions for:

intercepting a secure message from a sender;

automatically unsecuring said message to create an unsecured message;

when said unsecured message has an electronic signature associated with it, searching for a digital identity corresponding to said sender of said secure message;

verifying any electronic signatures associated with said unsecured message using said digital identity; and

transmitting said unsecured message to a recipient.

18. A method for transparently transmitting a secure message comprising:

intercepting an unsecured message from a sender;

storing said unsecured message on a first server;

transmitting said unsecured message from said first server to a second server in a local network;

automatically transforming said unsecured message to a secure message; and

transmitting said secure message to said recipient.

19. A method for transparently receiving a secure message comprising:

intercepting a secure message from a sender;

automatically transforming said secure message to an unsecured message;

storing said unsecured message in a local network;

when said unsecured message has an electronic signature associated with it, searcing for a digital identity corresponding to said sender of said secure message;

verifying any electronic signatures associated with said unsecured message using said digital identity; and

transmitting said unsecured message to a recipient.