System and method for embedding user authentication information in encrypted data

• US 20070143210A1
• Filed: 10/12/2005
• Published: 06/21/2007
• Est. Priority Date: 10/12/2005
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Inventors: Shahindoust, Amir, Yeung, Michael, Yami, Sameer
• Granted Patent: US 7,606,769 B2
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14

Abstract

The present invention is directed to a system and method for secure document transmission. The method begins by receiving first and second key portions into a data storage associated with a document processing device. The first key portion suitably includes data representing a user of the document processing device and the second key portion suitably includes data representing a source of at least one electronic document directed for transmission to the document processing device. Next, at least one encrypted electronic document is received into the document processing device, wherein the document includes the second key portion. The received electronic document is then decrypted using the second key portion and the first key portion, which was retrieved from the data storage. Following decryption, a document processing operation is commenced on the decrypted electronic document.

Claims

1. A system for secure document transmission comprising:

means adapted for receiving first and second key portions into a data storage associated with at least one of a document processing device and a client device, the first key portion including data representative of a user of the document processing device and the second key portion including data representative of a source of at least one electronic document directed for transmission to the document processing device;

means adapted for receiving at least one encrypted electronic document into the document processing device, which electronic document includes the second key portion;

decrypting means adapted for decrypting a received electronic document using the second key portion included therewith and the first key portion retrieved from the data storage; and

means adapted for commencing a document processing operation on a decrypted electronic document from the decrypting means.

2. The system for secure document transmission of claim 1, wherein the first and second key portions are received along with an initial document transmission from a user of the document processing device, whereby a subsequent document from the user need only include the second key portion.

3. The system for secure document transmission of claim 2, wherein the first key portion and the second key portion are derived from a symmetric key.

4. The system for secure document transmission of claim 3, wherein the second key portion is contained within a header accompanying the subsequent document.

5. The system for secure document transmission of claim 4, wherein the header further includes authentication data.

6. A method for secure document transmission comprising the steps of:

receiving first and second key portions into a data storage associated with at least one of a document processing device and a client device, the first key portion including data representative of a user of the document processing device and the second key portion including data representative of a source of at least one electronic document directed for transmission to the document processing device;

receiving at least one encrypted electronic document into the document processing device, which electronic document includes the second key portion;

decrypting a received electronic document using the second key portion included therewith and the first key portion retrieved from the data storage; and

commencing a document processing operation on the decrypted electronic document.

7. The method for secure document transmission of claim 6, wherein the first and second key portions are received along with an initial document transmission from a user of the document processing device, whereby a subsequent document from the user need only include the second key portion.

8. The method for secure document transmission of claim 7, wherein the first key portion and the second key portion are derived from a symmetric key.

9. The method for secure document transmission of claim 8, wherein the second key portion is contained within a header accompanying the subsequent document.

10. The method for secure document transmission of claim 9, wherein the header further includes authentication data.

11. A computer-readable medium of instructions with computer-readable instructions stored thereon for secure document transmission, comprising:

instructions for receiving first and second key portions into a data storage associated with at least one of a document processing device and a client device, the first key portion including data representative of a user of the document processing device and the second key portion including data representative of a source of at least one electronic document directed for transmission to the document processing device;

instructions for receiving at least one encrypted electronic document into the document processing device, which electronic document includes the second key portion;

instructions for decrypting a received electronic document using the second key portion included therewith and the first key portion retrieved from the data storage; and

instructions for commencing a document processing operation on the decrypted electronic document.

12. The computer-readable medium of instructions with computer-readable instructions stored thereon for secure document transmission of claim 11, wherein the first and second key portions are received along with an initial document transmission from a user of the document processing device, whereby a subsequent document from the user need only include the second key portion.

13. The computer-readable medium of instructions with computer-readable instructions stored thereon for secure document transmission of claim 12, wherein the first key portion and the second key portion are derived from a symmetric key.

14. The computer-readable medium of instructions with computer-readable instructions stored thereon for secure document transmission of claim 13, wherein the second key portion is contained within a header accompanying the subsequent document.

15. The computer-readable medium of instructions with computer-readable instructions stored thereon for secure document transmission of claim 14, wherein the header further includes authentication data.