Smart card device and method used for transmitting and receiving secure e-mails

• US 20040206812A1
• Filed: 04/21/2003
• Published: 10/21/2004
• Est. Priority Date: 04/21/2003
• Status: Active Grant

• Current Assignee: STMicroelectronics Incorporated (STMicroelectronics NV)
• Original Assignee: STMicroelectronics Incorporated (STMicroelectronics NV)
• Inventors: Tournemille, Jerome, Tamagno, David
• Granted Patent: US 7,178,724 B2
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail

Abstract

A system and method for transmitting and receiving secure e-mails is disclosed. A smart card device stores both private and public keys for an encryption algorithm. The smart card device is preferably a USB smart card device and interfaces a host having a client e-mail program. E-mails are transferred to and/or from the client e-mail program and e-mail server via the smart card while decrypting and encrypting any transmitted and/or received e-mails within the smart card device. The smart card device stores an IP address for an e-mail server. A Simple Mail Transfer Protocol outgoing parameter is set from the client e-mail program to an IP address for the smart card device.

Claims

1. A smart card system for transmitting and receiving secure e-mails comprising:

a smart card device reader adapted to be connected to a host having a client e-mail program for transmitting and/or receiving e-mails to and/or from an e-mail server;

a smart card device received within the smart card device reader and comprising,

a card body; and

an integrated circuit carried by the card body and comprising

a memory for storing a set of instructions relating to initiating and completing smart card transactions between the smart card device and a port of the host and for storing both private and public keys for an encryption algorithm, and

a microprocessor operative for communicating with the host via the smart card reader and operative for transferring e-mails to and/or from the client e-mail program and the e-mail server via the smart card device while decrypting and encrypting any transmitted and/or received e-mails within the smart card device.

2. A smart card system according to claim 1, wherein said smart card device comprises a Universal Serial Bus smart card device (USD).

3. A smart card system according to claim 1, wherein said smart card device comprises a universal serial bus token.

4. A smart card system according to claim 1, and further comprising a password stored in said memory, wherein said smart card device is operative for transferring e-mails only after a correct password has been entered and matched to the password stored in memory.

5. A smart card system according to claim 1, wherein said private key is configured within said smart card device at the time of issuance.

6. A smart card system according to claim 1, and further comprising a Simple Mail Transfer Protocol (SMTP) outgoing parameter stored within said memory and set to an IP address for the smart card device.

7. A smart card system according to claim 1, wherein public keys are added and/or revoked based on user input.

8. A smart card system according to claim 1, wherein said smart card device is operative for returning the results of any commands back from a remote Post Office Protocol (POP) server to a client e-mail program on the host.

9. An integrated circuit comprising:

at least one memory for storing a set of instructions relating to initiating and completing smart card transactions between a smart card device and a communications port of a host and for storing both private and public keys for an encryption algorithm;

and

a microprocessor connected to the at least one memory and operative for communicating with a host and operative for transferring e-mails to and/or from a client e-mail program on a host and a user e-mail server via the smart card device while decrypting and encrypting any transmitted and/or received e-mails within the smart card device.

10. An integrated circuit according to claim 9, and further comprising a plurality of contact pads and operative for communicating with a universal serial bus port of a host.

11. An integrated circuit according to claim 9, and further comprising a password stored in said memory, wherein said microprocessor is operative for transferring e-mails only after a correct password has been entered by a user and matched to the password stored in said memory.

12. An integrated circuit according to claim 9, wherein said private key is configured within said memory at the time of issuance to a user.

13. An integrated circuit according to claim 9, and further comprising a Simple Mail Transfer Protocol (SMTP) outgoing parameter stored within said memory and set to an IP address for a smart card device that will incorporate the integrated circuit.

14. A smart card comprising:

a card body;

an integrated circuit carried by said card body and comprising at least one memory for storing a set of instructions relating to initiating and completing smart card transactions between a smart card and a communications port of a host and for storing both private and public keys for an encryption algorithm; and

a microprocessor connected to the at least one memory and operative for communicating with the host and operative for transferring e-mails to and/or from a client e-mail program and a user e-mail server via the smart card while decrypting and encrypting any transmitted and/or received e-mails within the smart card device.

15. A smart card system according to claim 14, wherein said smart card further comprises a plurality of contact pads and operative for communicating with a Universal Serial Bus (USB) port of a host.

16. A method of transmitting and receiving secure e-mails comprising the steps of:

storing in a smart card device both private and public keys for an encryption algorithm;

user interfacing the smart card device with a host having a client e-mail program; and

transferring e-mails to and/or from the client e-mail program and an e-mail server via the smart card device while decrypting and encrypting any transmitted and/or received e-mails within the smart card device.

17. A method according to claim 16, and further comprising the step of storing the private and public keys in a Universal Serial Bus smart card device (USD).

18. A method according to claim 16, and further comprising the step of storing the private and public keys on a smart card token.

19. A method according to claim 16, and further comprising the step of transferring e-mails to and/or from the e-mail server using the internet.

20. A method according to claim 16, and further comprising the step of inputting a password and matching the input password to a stored password in the smart card device, and when there is a match, enabling access through the smart card device to any encrypted e-mails on the e-mail server.

21. A method according to claim 16, and further comprising the step of inputting a password and matching the input password to a stored password in the smart card device, and when there is a match, enabling transmission through the smart card device of e-mails.

22. A method according to claim 16, and further comprising the step of configuring the private key stored in the smart card device at the time when the smart card device is issued.

23. A method according to claim 16, and further comprising the step of running a key manager on the host that is operable for adding/revoking public keys.

24. A method according to claim 16, and further comprising the step of adding a new public key that is transmitted by a trusted user and/or revoking a public key.

25. A method according to claim 16, and further comprising the step of returning from the smart card device any results of commands back from a remote Post Office Protocol server to the client e-mail program on the host.

26. A method according to claim 25, and further comprising the step of performing description on the smart card device.

27. A method of transmitting and receiving secure e-mails comprising the steps of:

storing in a smart card device both private and public keys for an encryption algorithm;

storing within the smart card device a Simple Mail Transfer Protocol (SMTP) IP address for an e-mail server used by the user;

user interfacing the smart card device with a host having a client e-mail program;

setting a Simple Mail Transfer Protocol (SMTP) outgoing parameter from the client e-mail program to an IP address for the smart card device; and

transferring e-mails to and/or from the client e-mail program and the e-mail server via the smart card device while decrypting and encrypting any transmitted and/or received e-mails within the smart card device.

28. A method according to claim 27, and further comprising the step of storing the private and public keys in a Universal Serial Bus smart card device (USD).

29. A method according to claim 27, and further comprising the step of storing the private and public keys in a smart card token.

30. A method according to claim 27, and further comprising the step of transferring e-mails to and/or from the e-mail server using the internet.

31. A method according to claim 27, and further comprising the step of inputting a password and matching the password to a stored password in the smart card device, and when there is a match, enabling access through the smart card device to any encrypted e-mails on the e-mail server.

32. A method according to claim 27, and further comprising the step of inputting a password and matching the password to a stored password in the smart card device, and when there is a match, enabling transmission through the smart card device of e-mails.

33. A method according to claim 27, and further comprising the step of configuring the private key stored in the smart card device at the time when the smart card device is issued.

34. A method according to claim 27, and further comprising the step of running a key manager on the host that is operable for adding/revoking public keys.

35. A method according to claim 27, and further comprising the step of adding a new public key that is transmitted by a trusted user and/or revoking a public key.

36. A method according to claim 27, and further comprising the step of returning from the smart card device any results of commands back from a remote Post Office Protocol server to the client e-mail program on the host.

37. A method according to claim 27, and further comprising the step of performing description on the smart card device.