SECURE APPROACH TO SEND DATA FROM ONE SYSTEM TO ANOTHER

• US 20100005307A1
• Filed: 08/04/2008
• Published: 01/07/2010
• Est. Priority Date: 08/21/2002
• Status: Active Grant

• Current Assignee: Hulu LLC (The Walt Disney Company)
• Original Assignee: Devi Prashanth
• Inventors: PRASHANTH, Devi
• Granted Patent: US 7,894,608 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 9/0656 Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A secure approach for sending a original message from a sender to a receiver. The sender may encrypt the original message by performing an XOR (or XNOR) operation of the original message and a first random message (same size as original message) on a bit by basis to generate a second message. The receiver may also perform an XOR of the second message with a locally generated second random message. The resulting message is sent to the sender system. The sender system may again perform XOR operation of the received message and the first random message, and send the resulting message to receiver. The receiver may perform XOR operation on the received output to generate the original message sent by the sender. Other technologies such as digital signatures and key pairs (public key infrastructure) may be used in each communication between the sender and receiver to further enhance security.

Claims

1. A method for communicating messages, said method comprising:

receiving in a first packaged message, by a receiver from a sender, an encrypted second message and a first digital signature, wherein the encrypted second message had been generated by said sender by encryption of a second message using a public key of the receiver, wherein the second message had been generated by said sender from an original message via performance of a first computational logic of said original message and a first random message to generate said second message, and wherein the first random message consists of a first random number, and wherein the first digital signature had been generated by the sender by via encryption of a first message digest using a private key of the sender;

decrypting, by the receiver, the encrypted second message received from the sender, using a private key of the receiver to generate the second message;

performing, by said receiver, a second computational logic of said decrypted encrypted second message and a second random message to generate a third message, wherein said second random message differs from said first random message, and wherein the second random message consists of a second random number;

encrypting, by the receiver, the third message using a public key of the sender to generate an encrypted third message;

generating, by the receiver, a second message digest by performing a one way encryption of the encrypted third message through use of a hashing algorithm;

encrypting, by the receiver, the second message digest to generate a second digital signature using the private key of the receiver to generate a digital signature;

sending in a second packaged message, by the receiver, the encrypted third message and the second digital signature to the sender, resulting in receipt of the encrypted third message and the second digital signature by the sender.

2. The method of claim 1, wherein said receiving the encrypted second message and the first digital signature further comprises receiving the hashing algorithm in the first packaged message.

3. The method of claim 1, wherein the first message digest had been generated by the sender via performance of a one way encryption of the encrypted second message through use of the hashing algorithm

4. The method of claim 1,wherein the method further comprises:

receiving, by said receiver from the sender, an encrypted fourth message and a third digital signature, wherein the encrypted fourth message had been generated by said sender by encryption of a fourth message using the public key of the receiver, wherein the fourth message had been generated by the sender, after the sender decrypted the encrypted third message to generate the third message, via performance of said first computational logic of said third message and said first random message to generate said fourth message, wherein the third digital signature had been generated by the sender by via encryption of a third message digest using the private key of the sender, and wherein the third message digest had been generated by the sender via performance of a one way encryption of the encrypted fourth message through use of the hashing algorithm;

decrypting, by the receiver, the encrypted fourth message received from the sender, using the private key of the receiver to generate the fourth message; and

performing, by said receiver, said second computational logic of said decrypted encrypted fourth message and said second random message on a bit by bit basis to generate a fifth message that is identical to said original message.

5. The method of claim 1, wherein said first and second computational logic each independently comprise a logic operation selected from the group consisting a XOR operation and a XNOR operation.

6. The method of claim 1, wherein said first computational logic and said second computational logic are a same computational logic.

7. The method of claim 1, wherein said first computational logic differs from said second computational logic.

8. The method of claim 1, wherein said first and second computational logic are each associative and commutative.

9. The method of claim 1, wherein said sending the encrypted third message and the second digital signature further comprises sending, in the second packaged message, an identity of the hashing algorithm.

10. A computer program product for use with a digital system, said computer program product comprising a computer usable medium having computer readable program code embodied therein, said computer readable program code containing instructions that when executed by a processor of said digital system implement a method for communicating messages, said method comprising:

receiving in a first packaged message, by a receiver from a sender, an encrypted second message and a first digital signature, wherein the encrypted second message had been generated by said sender by encryption of a second message using a public key of the receiver, wherein the second message had been generated by said sender from an original message via performance of a first computational logic of said original message and a first random message to generate said second message, and wherein the first random message consists of a first random number, and wherein the first digital signature had been generated by the sender by via encryption of a first message digest using a private key of the sender;

decrypting, by the receiver, the encrypted second message received from the sender, using a private key of the receiver to generate the second message;

performing, by said receiver, a second computational logic of said decrypted encrypted second message and a second random message to generate a third message, wherein said second random message differs from said first random message, and wherein the second random message consists of a second random number;

encrypting, by the receiver, the third message using a public key of the sender to generate an encrypted third message;

generating, by the receiver, a second message digest by performing a one way encryption of the encrypted third message through use of a hashing algorithm;

encrypting, by the receiver, the second message digest to generate a second digital signature using the private key of the receiver to generate a digital signature;

sending in a second packaged message, by the receiver, the encrypted third message and the second digital signature to the sender, resulting in receipt of the encrypted third message and the second digital signature by the sender.

11. The computer program product of claim 10, wherein said receiving the encrypted second message and the first digital signature further comprises receiving the hashing algorithm in the first packaged message.

12. The computer program product of claim 10, wherein the first message digest had been generated by the sender via performance of a one way encryption of the encrypted second message through use of the hashing algorithm

13. The computer program product of claim 10,wherein the method further comprises:

receiving, by said receiver from the sender, an encrypted fourth message and a third digital signature, wherein the encrypted fourth message had been generated by said sender by encryption of a fourth message using the public key of the receiver, wherein the fourth message had been generated by the sender, after the sender decrypted the encrypted third message to generate the third message, via performance of said first computational logic of said third message and said first random message to generate said fourth message, wherein the third digital signature had been generated by the sender by via encryption of a third message digest using the private key of the sender, and wherein the third message digest had been generated by the sender via performance of a one way encryption of the encrypted fourth message through use of the hashing algorithm;

decrypting, by the receiver, the encrypted fourth message received from the sender, using the private key of the receiver to generate the fourth message; and

performing, by said receiver, said second computational logic of said decrypted encrypted fourth message and said second random message on a bit by bit basis to generate a fifth message that is identical to said original message.

14. The computer program product of claim 10, wherein said first and second computational logic each independently comprise a logic operation selected from the group consisting a XOR operation and a XNOR operation.

15. The computer program product of claim 10, wherein said first computational logic and said second computational logic are a same computational logic.

16. The computer program product of claim 10, wherein said first computational logic differs from said second computational logic.

17. The computer program product of claim 10, wherein said first and second computational logic are each associative and commutative.

18. The computer program product of claim 10, wherein said sending the encrypted third message and the second digital signature further comprises sending, in the second packaged message, an identity of the hashing algorithm.

19. A digital system comprising a processor and a computer readable memory unit coupled to the processor, said memory unit containing program code configured to be executed by the processor to implement a method for communicating messages, said method comprising:

receiving in a first packaged message, by a receiver from a sender, an encrypted second message and a first digital signature, wherein the encrypted second message had been generated by said sender by encryption of a second message using a public key of the receiver, wherein the second message had been generated by said sender from an original message via performance of a first computational logic of said original message and a first random message to generate said second message, and wherein the first random message consists of a first random number, and wherein the first digital signature had been generated by the sender by via encryption of a first message digest using a private key of the sender;

decrypting, by the receiver, the encrypted second message received from the sender, using a private key of the receiver to generate the second message;

performing, by said receiver, a second computational logic of said decrypted encrypted second message and a second random message to generate a third message, wherein said second random message differs from said first random message, and wherein the second random message consists of a second random number;

encrypting, by the receiver, the third message using a public key of the sender to generate an encrypted third message;

generating, by the receiver, a second message digest by performing a one way encryption of the encrypted third message through use of a hashing algorithm;

encrypting, by the receiver, the second message digest to generate a second digital signature using the private key of the receiver to generate a digital signature;

sending in a second packaged message, by the receiver, the encrypted third message and the second digital signature to the sender, resulting in receipt of the encrypted third message and the second digital signature by the sender.

20. The digital system product of claim 19, wherein the method further comprises:

receiving, by said receiver from the sender, an encrypted fourth message and a third digital signature, wherein the encrypted fourth message had been generated by said sender by encryption of a fourth message using the public key of the receiver, wherein the fourth message had been generated by the sender, after the sender decrypted the encrypted third message to generate the third message, via performance of said first computational logic of said third message and said first random message to generate said fourth message, wherein the third digital signature had been generated by the sender by via encryption of a third message digest using the private key of the sender, and wherein the third message digest had been generated by the sender via performance of a one way encryption of the encrypted fourth message through use of the hashing algorithm;

decrypting, by the receiver, the encrypted fourth message received from the sender, using the private key of the receiver to generate the fourth message; and

performing, by said receiver, said second computational logic of said decrypted encrypted fourth message and said second random message on a bit by bit basis to generate a fifth message that is identical to said original message.