METHOD AND SYSTEM FOR SECURING COMMUNICATION

• US 20100299529A1
• Filed: 03/25/2010
• Published: 11/25/2010
• Est. Priority Date: 03/25/2009
• Status: Active Grant

• Current Assignee: PACid Technologies, LLC
• Original Assignee: PACid Technologies, LLC
• Inventors: Fielder, Guy
• Granted Patent: US 8,934,625 B2
• Time in Patent Office: Days
• US Class Current: 713/181
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/065 Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation

Abstract

A method for securing communication between members. The method includes a first member obtaining a secret. An n-bit generator executing on the first member generates a message digest using the first secret. The first member extracts algorithm selector bits and an encryption key from the message digest, and selects an encryption algorithm identified by the algorithm selector bits. The method further includes the first member encrypting a communication using the encryption algorithm and the encryption key to obtain an encrypted communication, and the first member sending, to a second member of the group, the first encrypted communication.

Claims

1. A method for securing communication between a plurality of members, comprising:

obtaining, by a first member of a group, a first secret;

generating, by an n-bit generator executing on the first member, a first message digest using the first secret;

extracting, by the first member, first algorithm selector bits and a first encryption key from the first message digest;

selecting, by the first member, a first encryption algorithm identified by the first algorithm selector bits;

encrypting, by the first member, a first communication using the first encryption algorithm and the first encryption key to obtain a first encrypted communication; and

sending, by the first member to a second member of the group, the first encrypted communication.

2. The method of claim 1, wherein generating the first message digest comprises using a second secret.

3. The method of claim 1, further comprising:

generating, by the n-bit generator, a second message digest using the first secret, a second secret, and the change value;

extracting, by the first member, second algorithm selector bits and a second encryption key from the second message digest;

selecting, by the first member, a second encryption algorithm identified by the second algorithm selector bits;

encrypting, by the first member, a second communication using the second encryption algorithm and the second encryption key to obtain a second encrypted communication; and

sending, by the first member to the second member, the second encrypted communication.

4. The method of claim 3, wherein the first encrypted communication and the second encrypted communication are sent during a single communication session.

5. The method of claim 3, wherein generating the second message digest comprises:

combining the change value with an intermediate result of generating the first message digest to create an interim dynamic secret; and

using the interim dynamic secret to generate the second message digest.

6. The method of claim 1, further comprising:

receiving, by the first member from the second member, a second encrypted communication;

obtaining a second secret;

generating, by the n-bit generator executing on the first member, a second message digest using the second secret;

extracting second algorithm selector bits and a second encryption key from the second message digest;

selecting a second encryption algorithm identified by the second algorithm selector bits; and

decrypting the second encrypted communication using the second encryption algorithm and the second encryption key to obtain a second communication.

7. The method of claim 1, further comprising:

generating, by the first member, a file constant value describing a file,

wherein the file constant value comprises a identifier of the first secret,

wherein the first message digest is further generated using the file constant value,

wherein encrypting the first communication comprises encrypting the file to obtain an encrypted file, and

wherein sending the first encrypted communication comprises sending a file package comprising the file constant value and the encrypted file.

8. The method of claim 7, further comprising:

generating, by the n-bit generator, a file integrity code using the encrypted file and the file constant value,

wherein the file package further comprises the file integrity code.

9. A computing device comprising:

a processor;

a memory; and

software instructions stored in memory for causing the computing device to;

obtain, by a first member of a group, a first secret, wherein the computing device is the first member;

generate, by an n-bit generator executing on the first member, a first message digest using the first secret;

extract first algorithm selector bits and a first encryption key from the first message digest;

select a first encryption algorithm identified by the first algorithm selector bits;

encrypt a first communication using the first encryption algorithm and the first encryption key to obtain a first encrypted communication; and

send, to a second member of the group, the first encrypted communication.

10. The computing device of claim 9, wherein generating the first message digest comprises using a second secret.

11. The computing device of claim 9, wherein the software instructions further cause the computing device to:

generate, by the n-bit generator, a second message digest using the first secret, a second secret, and the change value;

extract second algorithm selector bits and a second encryption key from the second message digest;

select a second encryption algorithm identified by the second algorithm selector bits;

encrypt a second communication using the second encryption algorithm and the second encryption key to obtain a second encrypted communication; and

send, to the second member, the second encrypted communication.

12. The computing device of claim 11, wherein the first encrypted communication and the second encrypted communication are sent during a single communication session.

13. The computing device of claim 11, wherein generating the second message digest comprises:

combining the change value with an intermediate result of generating the first message digest to create an interim dynamic secret; and

using the interim dynamic secret to generate the second message digest.

14. The computing device of claim 9, wherein the software instructions further cause the computing device to:

receive, from the second member, a second encrypted communication;

obtain a second secret;

generate, by the n-bit generator executing on the first member, a second message digest using the second secret;

extract second algorithm selector bits and a second encryption key from the second message digest;

select a second encryption algorithm identified by the second algorithm selector bits; and

decrypt the second encrypted communication using the second encryption algorithm and the second encryption key to obtain a second communication.

15. The computing device of claim 9, wherein the software instructions further cause the computing device to:

generate a file constant value describing a file,

wherein the file constant value comprises a identifier of the first secret,

wherein the first message digest is further generated using the file constant value,

wherein encrypting the first communication comprises encrypting the file to obtain an encrypted file, and

wherein sending the first encrypted communication comprises sending a file package comprising the file constant value and the encrypted file.

16. The computing device of claim 15, wherein the software instructions further cause the computing device to:

generate, by the n-bit generator, a file integrity code using the encrypted file and the file constant value,

wherein the file package further comprises the file integrity code.

17. A computer readable medium comprising computer readable program code embodied therein for causing a computer system to perform a method for securing communication between a plurality of members, the method comprising:

obtaining, by a first member of a group, a first secret;

generating, by an n-bit generator executing on the first member, a first message digest using the first secret;

extracting, by the first member, first algorithm selector bits and a first encryption key from the first message digest;

selecting, by the first member, a first encryption algorithm identified by the first algorithm selector bits;

encrypting, by the first member, a first communication using the first encryption algorithm and the first encryption key to obtain a first encrypted communication; and

sending, by the first member to a second member of the group, the first encrypted communication.

18. The computer readable medium of claim 17, wherein generating the first message digest comprises using a second secret.

19. The computer readable medium of claim 17, wherein the method further comprises:

generating, by the n-bit generator, a second message digest using the first secret, a second secret, and the change value;

extracting, by the first member, second algorithm selector bits and a second encryption key from the second message digest;

selecting, by the first member, a second encryption algorithm identified by the second algorithm selector bits;

encrypting, by the first member, a second communication using the second encryption algorithm and the second encryption key to obtain a second encrypted communication; and

sending, by the first member to the second member, the second encrypted communication.

20. The computer readable medium of claim 19, wherein the first encrypted communication and the second encrypted communication are sent during a single communication session.

21. The computer readable medium of claim 19, wherein generating the second message digest comprises:

combining the change value with an intermediate result of generating the first message digest to create an interim dynamic secret; and

using the interim dynamic secret to generate the second message digest.

22. The computer readable medium of claim 17, wherein the method further comprises:

receiving, by the first member from the second member, a second encrypted communication;

obtaining a second secret;

generating, by the n-bit generator executing on the first member, a second message digest using the second secret;

extracting second algorithm selector bits and a second encryption key from the second message digest;

selecting a second encryption algorithm identified by the second algorithm selector bits; and

decrypting the second encrypted communication using the second encryption algorithm and the second encryption key to obtain a second communication.

23. The computer readable medium of claim 17, wherein the method further comprises:

generating, by the first member, a file constant value describing a file,

wherein the file constant value comprises a identifier of the first secret,

wherein the first message digest is further generated using the file constant value,

wherein encrypting the first communication comprises encrypting the file to obtain an encrypted file, and

wherein sending the first encrypted communication comprises sending a file package comprising the file constant value and the encrypted file.

24. The computer readable medium of claim 23, wherein the method further comprises:

generating, by the n-bit generator, a file integrity code using the encrypted file and the file constant value,

wherein the file package further comprises the file integrity code.