Asynchronous encryption for secured electronic communications

• US 20070130462A1
• Filed: 03/15/2006
• Published: 06/07/2007
• Est. Priority Date: 12/06/2005
• Status: Abandoned Application

• Current Assignee: Boncle, Inc.
• Original Assignee: Boncle, Inc.
• Inventors: Yam, Lap, Law, Eric
• Application Number:
  US11/376,769
• Publication Number:
  US 20070130462A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

An asynchronous communication system and method are configured for secured communication between a sender and a recipient without a need for pre-arrangement of shared static encryption key secrets. In one embodiment a system receives an initiation request for authentication from a sender seeking to transmit a message. The system generates an asymmetric key set, which includes a private key and a public key associated with a key reference. The system stores the private key with the key reference and transmits the public key to the sender. The sender uses the public key to encrypt the message to be sent to the recipient. The system will then receive a request for the private key from a recipient of the encrypted message. The system will authenticate the recipient identity. Once authenticated, the system transmits the private key to the recipient, which uses the private key to decrypt the encrypted message.

Claims

1. An asynchronous electronic communication method comprising:

receiving, from a sender of a message, an initiation request for authentication;

generating an asymmetric key set having a key reference and comprising a private key and a public key;

storing the private key in a database with the key reference;

transmitting the public key to the sender, the public key for encrypting the message;

receiving a request from a recipient of the encrypted message for the private key;

authenticating an identity of the recipient; and

transmitting, in response to the recipient being authenticated, the private key to the recipient, the private key for decrypting the encrypted message.

2. The method of claim 1, further comprising voiding the key reference, the private key and the public key from the database in response to transmitting the private key.

3. The method of claim 1, wherein receiving the initiation request further comprises:

transmitting an authentication request to the sender; and

receiving a response to the authentication request.

4. The method of claim 1, further comprising:

receiving a registration request from the recipient in response to the recipient not being registered to receive the private key; and

receiving registration information from the recipient prior to transmitting the private key.

5. The method of claim 1, further comprising transmitting delivery notification to the sender in response to transmitting the private key to the recipient.

6. A computer readable medium configured to store instructions executable by a processor, the instructions when executed by the processor to cause the processor to:

receive, from a sender of a message, an initiation request for authentication,

generate an asymmetric key set having a key reference and comprising a private key and a public key,

store the private key in a database with the key reference, and

transmit the public key to the sender, the public key for encrypting the message.

7. The computer readable medium of claim 6, further comprising instructions that for to cause the processor to:

receive a request from a recipient of the encrypted message for the private key;

authenticate an identity of the recipient; and

transmit, in response to the recipient being authenticated, the private key to the recipient, the private key for decrypting the encrypted message.

8. The computer readable medium of claim 7, wherein the instructions to authenticate the identity of the recipient further comprises instructions to verify a one-time password received from the recipient with a one-time password generated through a token of the recipient.

9. The computer readable medium of claim 7, wherein the instructions to authenticate the identity of the recipient further comprises instructions to issue a challenge in response to an authentication request from the recipient.

10. The computer readable medium of claim 7, wherein the instructions to authenticate the identity of the recipient further comprises instructions to receive a one-time password generated from a token of the recipient in response to the challenge.

11. An asynchronous electronic communication system comprising:

a receiver configured to receive an initiation request for authentication from a sender of a message and configured to receive a request from a recipient of an encrypted message for a private key;

a key generator configured to generate an asymmetric key set having a key reference and comprising the private key and a public key;

an authenticator configured to authenticate an identity of the recipient

a storage configured to store the private key in a database with the key reference; and

a transmitter configured to transmit the public key to the sender, the public key for encrypting the message, and configured to transmit the private key to the recipient, the private key for decrypting the encrypted message, in response to the recipient being authenticated.

12. The system of claim 11, wherein the authenticator is further configured to encrypt and decrypt token secrets and parameters corresponding to the recipient.

13. The system of claim 12, wherein the token secrets comprise at least one of cryptographic keys, random numbers, and control vectors.

14. The system of claim 12, wherein the token parameters comprise control parameters.

15. The system of claim 14, wherein the control parameters comprise at least one of an encrypted personal identification number and a sequence number.