System and method for securing document transmittal

• US 20070076867A1
• Filed: 10/03/2005
• Published: 04/05/2007
• Est. Priority Date: 10/03/2005
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Inventors: Shahindoust, Amir, Yeung, Michael, Yami, Sameer
• Granted Patent: US 7,587,045 B2
• Time in Patent Office: Days
• US Class Current: 380/43
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics

Abstract

The present invention is directed to a system and method for secure transmission of electronic document data on a network. The method begins with the receipt of user identification data associated with the identity of a user of document processing devices on the associated network. A password key, composed of a first share and a second share, is then generated from the user identification data. The first share is then communicated to an associated storage area. Electronic document data is then received, and an encryption key is randomly generated. The electronic document data is then encrypted using the encryption key. The second share is then appended to the encrypted electronic document and the combined data is communicated to an associated document processing device.

Claims

1. A system for secure transmission of electronic document data on a network comprising:

means adapted for receiving user identification data associate with an identity of a user of document processing devices on an associated network;

password key generator means adapted for generating data representative of a password key from the user identification data, the password key having first and second shares;

means adapted for communicating the first share to an associated storage area;

means adapted for receiving data representative of an electronic document;

encryption key generator means adapted for randomly generating an encryption key;

encryption means adapted for encrypting the electronic document in accordance with the encryption key so as to generate an encrypted electronic document;

means adapted for appending the second share to the encrypted electronic document; and

means adapted for communicating the encrypted electronic document and the appended second share to an associated document processing device.

2. The system for secure transmission of electronic document data on a network of claim 1 wherein the encryption key generator means includes:

means adapted to receive the password key;

means adapted for receiving data representative of a randomly generated intermediate encryption key; and

means adapted for generating the encryption key from the password key and the intermediate encryption key.

3. The system for secure transmission of electronic document data on a network of claim 1, further comprising:

means adapted for receiving the encrypted electronic document and the appended second share into the associated document processing device;

means adapted for receiving the first share from the associated storage area;

means adapted for generating a password key from the first and second shares;

means adapted for decrypting the encrypted electronic document in connection with the password key; and

means adapted for commencing a document processing operation on a decrypted electronic document.

4. The system for secure transmission of electronic document data on a network of claim 2 wherein the password generator means includes means for generating the password key in connection with a peripheral data key associated with the associated document processing device.

5. The system for secure transmission of electronic document data on a network of claim 4, further comprising:

means adapted for receiving the encrypted electronic document and the appended second share in the associated document processing device;

means adapted for retrieving data representative of a private key associated with the document processing device;

means adapted for receiving the first share from the associated storage area;

means adapted for generating a password key from the first and second shares;

means adapted for decrypting the encrypted electronic document in connection with the password key and the peripheral data key; and

means adapted for commencing a document processing operation on a decrypted electronic document.

6. A method for secure transmission of electronic document data on a network comprising the steps of:

receiving user identification data associate with an identity of a user of document processing devices on an associated network;

generating data representative of a password key from the user identification data, the password key having first and second shares;

communicating the first share to an associated storage area;

receiving data representative of an electronic document;

randomly generating an encryption key;

encrypting the electronic document in accordance with the encryption key so as to generate an encrypted electronic document;

appending the second share to the encrypted electronic document; and

communicating the encrypted electronic document and the appended second share to an associated document processing device.

7. The method for secure transmission of electronic document data on a network of claim 6 wherein the step of generating an encryption key further comprises the steps of:

receiving the password key;

receiving data representative of a randomly generated intermediate encryption key; and

generating the encryption key from the password key and the intermediate encryption key.

8. The method for secure transmission of electronic document data on a network of claim 6, further comprising the steps of:

receiving the encrypted electronic document and the appended second share into the associated document processing device;

receiving the first share from the associated storage area;

generating a password key from the first and second shares;

decrypting the encrypted electronic document in connection with the password key; and

commencing a document processing operation on a decrypted electronic document.

9. The method for secure transmission of electronic document data on a network of claim 7, further comprising the step of generating the password key in connection with a peripheral data key associated with the associated document processing device.

10. The method for secure transmission of electronic document data on a network of claim 9, further comprising the steps of:

receiving the encrypted electronic document and the appended second share in the associated document processing device;

retrieving data representative of a private key associated with the document processing device;

receiving the first share from the associated storage area;

generating a password key from the first and second shares;

decrypting the encrypted electronic document in connection with the password key and the peripheral data key; and

commencing a document processing operation on a decrypted electronic document.

11. A computer-readable medium of instructions for secure transmission of electronic document data on a network comprising:

instructions for receiving user identification data associate with an identity of a user of document processing devices on an associated network;

instructions for generating data representative of a password key from the user identification data, the password key having first and second shares;

instructions for communicating the first share to an associated storage area;

instructions for receiving data representative of an electronic document;

instructions for randomly generating an encryption key;

instructions for encrypting the electronic document in accordance with the encryption key so as to generate an encrypted electronic document;

instructions for appending the second share to the encrypted electronic document; and

instructions for communicating the encrypted electronic document and the appended second share to an associated document processing device.

12. The computer-readable medium of instructions for secure transmission of electronic document data on a network of claim 11 wherein the instructions for generating an encryption key further comprises:

instructions for receiving the password key;

instructions for receiving data representative of a randomly generated intermediate encryption key; and

instructions for generating the encryption key from the password key and the intermediate encryption key.

13. The computer-readable medium of instructions for secure transmission of electronic document data on a network of claim 11, further comprising:

instructions for receiving the encrypted electronic document and the appended second share into the associated document processing device;

instructions for receiving the first share from the associated storage area;

instructions for generating a password key from the first and second shares;

instructions for decrypting the encrypted electronic document in connection with the password key; and

instructions for commencing a document processing operation on a decrypted electronic document.

14. The computer-readable medium of instructions for secure transmission of electronic document data on a network of claim 12, further comprising instructions for generating the password key in connection with a peripheral data key associated with the associated document processing device.

15. The computer-readable medium of instructions for secure transmission of electronic document data on a network of claim 14, further comprising:

instructions for receiving the encrypted electronic document and the appended second share in the associated document processing device;

instructions for retrieving data representative of a private key associated with the document processing device;

instructions for receiving the first share from the associated storage area;

instructions for generating a password key from the first and second shares;

instructions for decrypting the encrypted electronic document in connection with the password key and the peripheral data key; and

instructions for commencing a document processing operation on a decrypted electronic document.