PASSWORD SELF ENCRYPTION METHOD AND SYSTEM AND ENCRYPTION BY KEYS GENERATED FROM PERSONAL SECRET INFORMATION

• US 20090296927A1
• Filed: 03/12/2009
• Published: 12/03/2009
• Est. Priority Date: 05/29/2008
• Status: Active Grant

• Current Assignee: Cheman Shaik
• Original Assignee: Cheman Shaik
• Inventors: Shaik, Cheman
• Granted Patent: US 8,831,214 B2
• Time in Patent Office: Days
• US Class Current: 380/44
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/002 Countermeasures against attacks on cryptographic mechanisms network architectures or network communication protocols for protection against malicious traffic H04L63/1441
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/302 involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes

Abstract

A public key cryptographic system and method is provided for a password or any other predefined personal secret information that defeats key factoring and spoofing attacks. The method adopts a new technique of encrypting a password or any predefined secret information by a numeric function of itself, replacing the fixed public key of the conventional RSA encryption. The whole process involving key generation, encryption, decryption and password handling is discussed in detail. Mathematical and cryptanalytical proofs of defeating factoring and spoofing attacks are furnished.

Claims

1. A method comprising

encrypting information by using a key;

and

wherein at least a part of the key is generated from personal secret information about an individual which exists on a server computer and is known only by a sender of the personal secret information.

2. The method of claim 1 wherein

the personal secret information includes a password.

3. The method of claim 1 wherein

the personal secret information includes individual related information.

4. The method of claim 2 further comprising

using the password as a digital certificate of a user and digitally signing messages using a public key generated from the password.

5. The method of claim 1 wherein

the step of encrypting information by using the key is implemented using a layer underlying communication between a client computer which is used as the sender and the server computer.

6. The method of claim 5 wherein

the layer includes a web browser.

7. The method of claim 5 wherein

the layer includes a web page.

8. The method of claim 2 further comprising

decrypting messages from the server computer to a client computer using a public key generated from the password in order to secure information communicated both from the server computer to the client computer and from the client computer to the server computer.

9. The method of claim 3 further comprising

decrypting messages from the server computer to a client computer using a public key generated from individual related information in order to secure information communicated both from the server computer to the client computer and from the client computer to the server computer.

10. The method of claim 2 further comprising

encrypting a message digest by using a public key generated from the password.

11. The method of claim 3 further comprising

encrypting a message digest by using a public key generated from the individual related information.

12. The method of claim 1 wherein

the server computer is comprised of a plurality of computers.