Method and system for authentication information encryption for .ZIP files

• US 20050091519A1
• Filed: 09/20/2004
• Published: 04/28/2005
• Est. Priority Date: 07/16/2003
• Status: Abandoned Application

• Current Assignee: PKWARE, Inc. (PKW Holdings, Inc.)
• Original Assignee: PKWARE, Inc. (PKW Holdings, Inc.)
• Inventors: Peterson, James C.
• Application Number:
  US10/945,485
• Publication Number:
  US 20050091519A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 16/1744 using compression, e.g. sparse files
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068

Abstract

The present invention provides a method of integrating existing strong encryption methods into the processing of a .ZIP file to provide a highly secure data container which provides flexibility in the use of symmetric and asymmetric encryption technology. The present invention adapts the well established .ZIP file format to support higher levels of security and multiple methods of data encryption and key management, thereby producing a highly secure and flexible digital container for electronically storing and transferring confidential data.

Claims

1. A method of providing an authenticatable data file in a .Zip file format, said method including:

receiving a data file;

encrypting said data file to form an encrypted data file;

generating authentication information with regard to said encrypted data file; and

placing said encrypted data file and said authentication information in a data container, wherein said data container is constructed in accordance with a Zip file format.

2. The method of claim 1 further including:

compressing said data file before encrypting said data file.

3. The method of claim 2 wherein said compressing employs a Lempel-Ziv (LZ)-type data compression algorithm.

4. The method of claim 2 wherein said compressing employs a Deflate-type data compression algorithm.

5. The method of claim 2 wherein said compressing employs a Burrows-Wheeler Transform (BWT)-type data compression algorithm.

6. The method of claim 1 wherein said data file is not compressed before encrypting.

7. The method of claim 1 wherein said encrypting is asymmetric.

8. The method of claim 7 wherein said generating authentication information includes generating authentication information using a private key.

9. The method of claim 7 wherein said generating authentication information includes generating authentication information using a X.509 digital certificate.

10. The method of claim 7 wherein said authentication information is based on asymmetrically encrypting hash data for said encrypted data file using a private key.

11. The method of claim 7 wherein said authentication information is based on a cryptographic checksum.

12. The method of claim 1 wherein said encrypting is symmetric.

13. The method of claim 12 further including calculating a hash based on said data file.

14. A Zip file format data container including:

an encrypted data file; and

authentication information with regard to said encrypted data file,

wherein said data container is constructed in accordance with a Zip file format.

15. The .Zip file format data container of claim 14 wherein said encrypted data file is compressed before encryption.

16. The .Zip file format data container of claim 15 wherein said compressing employs a Lempel-Ziv (LZ)-type data compression algorithm.

17. The .Zip file format data container of claim 15 wherein said compressing employs a Deflate-type data compression algorithm.

18. The .Zip file format data container of claim 15 wherein said compressing employs a Burrows-Wheeler Transform (BWT)-type data compression algorithm.

19. The .Zip file format data container of claim 14 wherein said encrypted data file is not compressed before encrypting.

20. The .Zip file format data container of claim 14 wherein said encrypted data file is asymmetrically encrypted.

21. The Zip file format data container of claim 20 wherein said authentication information is generated using a private key.

22. The .Zip file format data container of claim 20 wherein said authentication information is generated using a X.509 digital certificate.

23. The .Zip file format data container of claim 20 wherein said authentication information is based on asymmetrically encrypting hash data for said encrypted data file using a private key.

24. The .Zip file format data container of claim 20 wherein said authentication information is based on a cryptographic checksum.

25. The .Zip file format data container of claim 14 wherein said encrypted data file is symmetrically encrypted.

26. A method of providing an authenticatable data file, said method including:

receiving a data file;

encrypting said data file to form an encrypted data file;

generating authentication information with regard to said encrypted data file; and

placing said encrypted data file and said authentication information in a data container, wherein said data container is designed for containing compressed files.

27. The method of claim 26 further including:

compressing said data file before encrypting said data file.

28. The method of claim 27 wherein said compressing employs a Lempel-Ziv (LZ)-type data compression algorithm.

29. The method of claim 27 wherein said compressing employs a Deflate-type data compression algorithm.

30. The method of claim 27 wherein said compressing employs a Burrows-Wheeler Transform (BWT)-type data compression algorithm.

31. The method of claim 26 wherein said data file is not compressed before encrypting.

32. The method of claim 26 wherein said encrypting is asymmetric.

33. The method of claim 32 wherein said generating authentication information includes generating authentication information using a private key.

34. The method of claim 32 wherein said generating authentication information includes generating authentication information using a X.509 digital certificate.

35. The method of claim 32 wherein said authentication information is based on a asymmetrically encrypting hash data for said encrypted data file using a private key.

36. The method of claim 32 wherein said authentication information is based on a cryptographic checksum.

37. The method of claim 26 wherein said encrypting is symmetric.

38. The method of claim 37 further including calculating a hash based on said data file.

39. The method of claim 26 wherein said data container is constructed in accordance with a .Zip file format.

40. A data container including:

an encrypted data file; and

authentication information with regard to said encrypted data file,

wherein said data container is designed for containing compressed files.

41. The data container of claim 40 wherein said encrypted data file is compressed before encryption.

42. The data container of claim 41 wherein said compressing employs a Lempel-Ziv (LZ)-type data compression algorithm.

43. The data container of claim 41 wherein said compressing employs a Deflate-type data compression algorithm.

44. The data container of claim 41 wherein said compressing employs a Burrows-Wheeler Transform (BWT)-type data compression algorithm.

45. The data container of claim 40 wherein said encrypted data file is not compressed before encrypting.

46. The data container of claim 40 wherein said encrypted data file is asymmetrically encrypted.

47. The data container of claim 46 wherein said authentication information is generated using a private key.

48. The data container of claim 46 wherein said authentication information is generated using a X.509 digital certificate.

49. The data container of claim 46 wherein said authentication information is based on asymmetrically encrypting hash data for said encrypted data file using a private key.

50. The data container of claim 46 wherein said authentication information is based on a cryptographic checksum.

51. The data container of claim 40 wherein said encrypted data file is symmetrically encrypted.

52. The data container of claim 40 wherein said data container is constructed in accordance with a .Zip file format.

53. A method of providing an authenticatable data file in a .Zip file format, said method including:

receiving a data file;

generating authentication information with regard to said data file; and

placing said data file and said authentication information in a data container, wherein said data container is constructed in accordance with a Zip file format.

54. The method of claim 53 wherein said data file is encrypted before said data file is placed in said data container.

55. The method of claim 54 wherein said encryption is symmetric.

56. The method of claim 54 wherein said encryption is asymmetric.

57. The method of claim 53 wherein said data file is not encrypted before said data file is placed in said data container.

58. The method of claim 53 further including:

compressing said data file before placing said data file in said data container.

59. The method of claim 58 wherein said compressing employs a Lempel-Ziv (LZ)-type data compression algorithm.

60. The method of claim 58 wherein said compressing employs a Deflate-type data compression algorithm.

61. The method of claim 58 wherein said compressing employs a Burrows-Wheeler Transform (BWT)-type data compression algorithm.

62. The method of claim 53 wherein said data file is not compressed.

63. The method of claim 53 wherein said generating authentication information includes generating authentication information using a private key.

64. The method of claim 53 wherein said generating authentication information includes generating authentication information using a X.509 digital certificate.

65. The method of claim 53 wherein said authentication information is based on asymmetrically encrypting hash data for said data file using a private key.

66. The method of claim 53 further including calculating a hash based on said data file.

67. The method of claim 66 further including using said hash as a foundation for said authentication information.

68. A .Zip file format data container including:

an data file; and

authentication information with regard to said data file,

wherein said data container is constructed in accordance with a .Zip file format.

69. The .Zip file format data container of claim 68 wherein said data file is encrypted.

70. The .Zip file format data container of claim 69 wherein said encryption is symmetric.

71. The .Zip file format data container of claim 69 wherein said encryption is asymmetric.

72. The .Zip file format data container of claim 68 wherein said data file is not encrypted.

73. The .Zip file format data container of claim 69 wherein said encrypted data file is compressed before encryption.

74. The .Zip file format data container of claim 73 wherein said compressing employs a Lempel-Ziv (LZ)-type data compression algorithm.

75. The .Zip file format data container of claim 73 wherein said compressing employs a Deflate-type data compression algorithm.

76. The .Zip file format data container of claim 73 wherein said compressing employs a Burrows-Wheeler Transform (BWT)-type data compression algorithm.

77. The .Zip file format data container of claim 68 wherein said data file is not compressed.

78. The .Zip file format data container of claim 68 wherein said authentication information is generated using a private key.

79. The .Zip file format data container of claim 68 wherein said authentication information is generated using a X.509 digital certificate.

80. The .Zip file format data container of claim 68 wherein said authentication information is based on asymmetrically encrypting hash data for said data file using a private key.

81. A method of providing an authenticatable data file, said method including:

receiving a data file;

generating authentication information with regard to said data file; and

placing said data file and said authentication information in a data container, wherein said data container is designed for containing compressed files.

82. The method of claim 81 wherein said data file is encrypted before said data file is placed in said data container.

83. The method of claim 82 wherein said encryption is symmetric.

84. The method of claim 82 wherein said encryption is asymmetric.

85. The method of claim 81 wherein said data file is not encrypted before said data file is placed in said data container.

86. The method of claim 81 further including:

compressing said data file before placing said data file in said data container.

87. The method of claim 86 wherein said compressing employs a Lempel-Ziv (LZ)-type data compression algorithm.

88. The method of claim 86 wherein said compressing employs a Deflate-type data compression algorithm.

89. The method of claim 86 wherein said compressing employs a Burrows-Wheeler Transform (BWT)-type data compression algorithm.

90. The method of claim 81 wherein said data file is not compressed.

91. The method of claim 81 wherein said generating authentication information includes generating authentication information using a private key.

92. The method of claim 81 wherein said generating authentication information includes generating authentication information using a X.509 digital certificate.

93. The method of claim 81 wherein said authentication information is based on asymmetrically encrypting hash data for said data file using a private key.

94. The method of claim 81 further including calculating a hash based on said data file.

95. The method of claim 94 further including using said hash as a foundation for said authentication information.

96. The method of claim 81 wherein said data container is constructed in accordance with a .Zip file format.

97. A data container including:

an data file; and

authentication information with regard to said data file,

wherein said data container is designed for containing compressed files.

98. The data container of claim 97 wherein said data file is encrypted.

99. The data container of claim 98 wherein said encryption is symmetric.

100. The data container of claim 98 wherein said encryption is asymmetric.

101. The data container of claim 97 wherein said data file is not encrypted.

102. The data container of claim 98 wherein said encrypted data file is compressed before encryption.

103. The data container of claim 102 wherein said compressing employs a Lempel-Ziv (LZ)-type data compression algorithm.

104. The data container of claim 102 wherein said compressing employs a Deflate-type data compression algorithm.

105. The data container of claim 102 wherein said compressing employs a Burrows-Wheeler Transform (BWT)-type data compression algorithm.

106. The data container of claim 98 wherein said data file is not compressed.

107. The data container of claim 97 wherein said authentication information is generated using a private key.

108. The data container of claim 97 wherein said authentication information is generated using a X.509 digital certificate.

109. The data container of claim 97 wherein said authentication information is based on asymmetrically encrypting hash data for said encrypted data file using a private key.

110. The data container of claim 97 wherein said data container is constructed in accordance with a .Zip file format.