Systems and Methods for Securely Providing Email

• US 20100161961A1
• Filed: 12/16/2009
• Published: 06/24/2010
• Est. Priority Date: 12/23/2008
• Status: Active Grant

• Current Assignee: UBS Business Solutions AG (UBS Ag)
• Original Assignee: UBS Ag
• Inventors: Beigelman, Alex
• Granted Patent: US 8,281,409 B2
• Time in Patent Office: Days
• US Class Current: 713/152
• CPC Class Codes: H04L 2463/041 using an encryption or decryption engine integrated in transmitted data
• CPC Class Codes: H04L 51/214 using selective forwarding
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819

Abstract

Systems and methods for securely providing email messages are provided. A workstation computer is provided that includes a memory for storing computer executable instructions and a processor for accessing the memory and for executing the computer executable instructions. The computer executable instructions includes an email client configured to process email messages, at least one email message having an executable decryption attachment that includes encrypted embedded content that can only be decrypted with a unique cryptography key. The executable decryption attachment, when executed, is configured to establish a secure connection with an encryption server, receive the unique cryptography key from the encryption server and decrypt the embedded content.

Claims

1. A system for securely providing email, the system comprising:

a workstation computer comprising;

a memory for storing computer executable instructions; and

a processor for accessing the memory and for executing computer executable instructions, the computer executable instructions comprising;

an email client configured to process email messages, at least one email message having an executable decryption attachment that includes encrypted embedded content that can only be decrypted with a unique cryptography key, wherein the executable decryption attachment, when executed is configured to establish a secure connection with an encryption server, receive the unique cryptography key from the encryption server and decrypt the embedded content.

2. The system of claim 1, wherein the executable decryption attachment is further configured to collaborate with the encryption server to authenticate a recipient of the email message.

3. The system of claim 2, wherein the executable decryption attachment is further configured to provide an interface to the recipient that allows the recipient to select data for encryption, wherein the executable decryption attachment encrypts the selected data with the unique cryptography key to provide encrypted selected data.

4. The system of claim 3, wherein the executable decryption attachment is further configured to encode the encrypted selected data into the executable decryption attachment.

5. The system of claim 1, wherein the unique cryptography key comprises a symmetric cryptography key.

6. The system of claim 1, wherein the unique cryptography key comprises an asymmetric cryptography key of a cryptography key pair.

7. A computer readable medium having computer executable instructions for performing a method for securely providing email messages, the method comprising:

stripping at least a portion of the contents of an email message marked for encryption;

encrypting the stripped contents to form encrypted contents that can only be decrypted with a unique cryptography key;

generating an executable file that includes the encrypted contents and a unique message identification;

replacing the stripped contents of the email message with the executable file; and

upon execution of the executable file by a recipient of the email message, authenticating the recipient of the email message and providing the unique cryptography key to the recipient.

8. The computer readable medium of claim 7, the method further comprising detecting the email message marked for encryption.

9. The computer readable medium of claim 8, the method further comprising generating a unique message identification for the email message.

10. The computer readable medium of claim 7, wherein the unique cryptography key comprises an asymmetric cryptography key of an encryption key pair.

11. The computer readable medium of claim 7, wherein the unique cryptography key comprises a symmetric cryptography key.

12. The computer readable medium of claim 7, wherein the executable file is configured to perform a method upon execution, the method comprising:

prompting the recipient of the email message for a password;

receiving the unique cryptography key;

decrypting the encrypted contents employing the unique cryptography key; and

providing the decrypted contents to a recipient of the email message.

13. The computer readable medium of claim 12, the method performed by the executable file further comprising encrypting data selected by the recipient of the email message using the unique cryptography key to provide encrypted selected data.

14. The computer readable medium of claim 12, the method performed by the executable file further comprising encoding the encrypted selected data into the executable file.

15. A computer implemented method for securely providing email, the method comprising:

receiving an email message that includes an executable file with encrypted content that can only be decrypted with a unique cryptography key; and

executing the executable file, the executable file, when executed;

prompting a recipient of the email message for a password;

receiving the unique cryptography key over a network; and

decrypting the encrypted content with the unique cryptography key.

16. The computer implemented method of claim 15, wherein executing the executable file further comprises providing the decrypted content to the recipient of the email message.

17. The computer method of claim 15, wherein executing the executable file further comprises encrypting data selected by the recipient of the email message using the unique cryptography key to provide encrypted selected data.

18. The computer implemented method of claim 15, wherein executing the executable file further comprises encoding the encrypted selected data into the executable file.

19. The computer implemented method of claim 18, further comprising providing a reply email message to a sender of the email message that includes the executable file.

20. The computer implemented method of claim 19, further comprising:

detecting the reply email message;

decrypting the encrypted selected data; and

providing the reply email message to the sender of the email message with decrypted selected data.