Secure Data Transmission

• US 20090271627A1
• Filed: 09/26/2006
• Published: 10/29/2009
• Est. Priority Date: 09/26/2005
• Status: Abandoned Application

• Current Assignee: Activepath
• Original Assignee: Activepath
• Inventors: Zorea, Meir, Cohen, Ram
• Application Number:
  US11/991,527
• Publication Number:
  US 20090271627A1
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061

Abstract

A method of facilitating secure sending of a message from a sender to a recipient over a network, comprising establishing communication between a sender side and a recipient trusted server having knowledge of an encryption key of recipient; obtaining a messaging key comprising a messaging encryption key and a messaging decryption key; exchanging messaging key data between sender side and recipient trusted server such that sender side has knowledge of the messaging encryption key and recipient trusted server has knowledge of the messaging decryption key; encrypting messaging decryption key with recipient'"'"'s encryption key by recipient trusted server; transmitting messaging decryption key encrypted by recipient'"'"'s encryption key from recipient trusted server to sender side, and transmitting messaging decryption key encrypted by recipient'"'"'s encryption key from sender side to recipient and transmitting the message encrypted by messaging encryption key directly from sender side to recipient.

Claims

1. A method of facilitating secure sending of a message from a sender to a recipient over a network, comprising the steps of:

(i) Establishing communication between a sender side and a recipient trusted server having knowledge of an encryption key of the recipient;

(ii) Obtaining a messaging key comprising a messaging encryption key and a messaging decryption key;

(iii) Exchanging messaging key data between the sender side and the recipient trusted server such that sender side has knowledge of the messaging encryption key and the recipient trusted server has knowledge of the messaging decryption key;

(iv) Encrypting the messaging decryption key with the recipient'"'"'s encryption key by the recipient trusted server;

(v) Transmitting the messaging decryption key encrypted by the recipient'"'"'s encryption key from the recipient trusted server to the sender side, and

(vi) Transmitting the messaging decryption key encrypted by recipient'"'"'s encryption key from the sender side to the recipient and transmitting the message encrypted by the messaging encryption key directly from the sender side to the recipient.

2. The method of claim 1, wherein step (ii) of obtaining a messaging key is performed by the sender side and step (iii) of exchanging data between the sender side and the recipient trusted server comprises transmitting the messaging decryption key from the sender side to the recipient trusted server.

3. The method of claim 2 wherein step (ii) of obtaining a messaging key is selected from the list of creating the messaging key by the sender side and obtaining the messaging key from a third party by the sender side.

4. The method of claim 1 wherein step (ii) of obtaining a messaging key is performed by the recipient trusted server and step (iii) of exchanging data between the sender side and the recipient trusted server comprises transmitting the messaging encryption key from the recipient trusted server to the sender side.

5. The method of claim 4 wherein step (ii) of obtaining a messaging key is selected from the list of creating the messaging key by the recipient trusted server and obtaining the messaging key from a third party by the recipient trusted server.

6. The method of claim 1 wherein the messaging key of step (ii) is selected from the list of symmetrical key pairs and asymmetrical key pairs.

7. The method of claim 1 wherein the recipient'"'"'s encryption key is selected from the list of symmetrical key pairs and asymmetrical key pairs.

8. The method of claim 1 wherein the sender side comprises sender terminal equipment that communicates with the recipient trusted server directly.

9. The method of claim 1 wherein the sender side comprises sender terminal equipment and a sender trusted server and the sender trusted server communicates with the recipient trusted server.

10. The method of claim 1, wherein the sender side and the recipient trusted server are networked in a peer-to-peer manner.

11. The method of claim 1, wherein the sender side includes a senders'"'"' server and the sender'"'"'s server and recipient trusted server are part of a hierarchical arrangement of servers, and step (i) of establishing communication between sender'"'"'s server and recipient trusted server is achieved by each server in said hierarchical arrangement of servers reporting back to servers thereabove regarding identity of accounts held therewith.

12. The method of claim 1, wherein if the sender'"'"'s server receiving data from the sender does not recognize an intended recipient thereof, said sender'"'"'s server queries a master server thereabove concerning address of said recipient'"'"'s trusted server, and so on up hierarchical arrangement until an address of said recipient'"'"'s trusted server is determined.

13. The method of claim 1 wherein the sender side is either located on a single node of the network or is distributed over a plurality of nodes of the network.

14. The method of claim 1, wherein the recipient'"'"'s trusted server comprises either:

a server on a node of the network, or a plurality of servers distributed over a plurality of nodes of the network.

15. The method of claim 1, wherein the network is selected from the list of LANS, WANS, intranets, and Internet.

16. The method of claim 1 wherein the message is an email message.

17. A recipient'"'"'s trusted server comprising a data receiver, a decryptor, an encryptor and a transmitter for facilitating secure data transmission by the method of claim 1.