Secure e-mail messaging system

• US 20060053280A1
• Filed: 09/02/2005
• Published: 03/09/2006
• Est. Priority Date: 09/02/2004
• Status: Abandoned Application

• Current Assignee: Christopher Pape, Donald E. Kittle
• Original Assignee: Christopher Pape, Donald E. Kittle
• Inventors: Kittle, Donald E., Pape, Christopher
• Application Number:
  US11/217,348
• Publication Number:
  US 20060053280A1
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method and system for the secure transmission of electronic mail from a sender device to a recipient device, where at an e-mail server an e-mail sent from a sender device is received, where the e-mail may be encrypted with a sender personal key, or transmitted over a secure communiation channel. The e-mail server may then, if the e-mail from the sender device has been encrypted, decrypt the sender encrypted e-mail with a sender server key to produce a server decrypted e-mail, and then encrypts the server decrypted e-mail with a recipient server key to produce a server encrypted e-mail. The e-mail server then transmits the server encrypted e-mail to a recipient device where the server encrypted e-mail is decrypted with a recipient personal key.

Claims

1. ) A method of providing secure electronic mail communication, comprising:

a) receiving at an e-mail server a sender encrypted e-mail encrypted at a sender device with a sender personal key;

b) decrypting at the e-mail server the sender encrypted e-mail with a sender server key to produce a server decrypted e-mail;

c) encrypting at the e-mail server the server decrypted e-mail with a recipient server key to produce a server encrypted e-mail;

d) transmitting the server encrypted e-mail to a recipient device where the server encrypted e-mail is decrypted with a recipient personal key.

2. ) The method of claim 1, where the sender personal key and the sender server key form a public/private key pair.

3. ) The method of claim 1, where the recipient server key and the recipient personal key form a public/private key pair.

4. ) The method of claim 1, where the sender personal key and the sender server key are identical.

5. ) The method of claim 1, where the recipient personal key and the recipient server key are identical.

6. ) The method of claim 1, where the sender encrypted e-mail is signed by the sender personal key.

7. ) The method of claim 1, where the sender encrypted e-mail includes information used to identify the sender and recipient.

8. ) A computer-readable medium comprising a software application recorded on the computer-readable medium, wherein the software application includes instructions for providing a method of secure electronic mail communication as claimed in claim 1.

9. ) A method of providing secure electronic communication, comprising

a) receiving at an e-mail server a sender transmitted e-mail message transmitted from a sender station though a secure communication protocol;

b) encrypting at the e-mail server the sender decrypted e-mail with a recipient server key to produce a server encrypted e-mail;

c) transmitting the server encrypted e-mail to a recipient device where the server encrypted e-mail is decrypted with a recipient personal key.

10. ) The method of claim 9, wherein the secure communication protocol is a secure socket layer connection.

11. ) The method of claim 9, wherein the secure communication protocol is a transport layer connection.

12. ) The method of claim 9, wherein the e-mail message is signed by a sender personal key.

13. ) The method of claim 9, where the recipient server key and the recipient personal key form a public/private key pair.

14. ) The method of claim 9, where the recipient personal key and the recipient server key are identical.

15. ) The method of claim 9, where the sender encrypted e-mail is signed by the sender personal key.

16. ) The method of claim 9, where the sender encrypted e-mail includes information used to identify the sender and recipient.

17. ) A computer-readable medium comprising a software application recorded on the computer-readable medium, wherein the software application includes instructions for providing a method of secure electronic mail communication as claimed in claim 9.

18. ) A method of providing a secure e-mail exchange service allowing a primary user to exchange secure electronic mail messages with one or more secondary users, the method comprising:

a) providing a secure e-mail server including a user registry, a key manager module and a mail relaying module;

b) registering the primary user by creating a record for the primary user in the user registry, wherein the primary user'"'"'s record includes a server key assigned to the primary user;

e) allowing the primary user to identify one of more secondary users;

d) registering at least some of the secondary users by creating a record for each of the registered secondary users in the user registry, wherein each registered secondary user'"'"'s record includes a server key assigned to the secondary user;

e) associating each registered secondary user with the primary user; and

e) facilitating secure e-mail communication between the primary user and one of the associated secondary users.

19. ) The method of claim 18 further including charging a fee to the primary user for providing the secure e-mail exchange service and including providing the secure e-mail exchange service to the secondary user at no charge.

20. ) The method of claim 19 wherein the primary user is permitted to identify a limited number of secondary users.

21. ) A system for the secure transmission of electronic mail comprising:

a) a key manager module; and

b) a mail relay module adapted to receive from a sender device a sender encrypted email encrypted at a sender device with a sender personal key and to decrypt the sender encrypted email to produce a server decrypted email with a sender server key to produce a server decrypted email, and to encrypt the server decrypted email with a recipient server key and to produce a server encrypted email and to transmit the server encrypted email to a recipient device.

22. ) The system of claim 21 wherein the key manager module is comprised of one or more server keys associated with one or more primary users, and one or more server keys associated with one or more secondary users.