SECURE MESSAGING

• US 20100306537A1
• Filed: 11/24/2008
• Published: 12/02/2010
• Est. Priority Date: 11/25/2007
• Status: Abandoned Application

• Current Assignee: Activepath
• Original Assignee: Postalguard Limited
• Inventors: Cohen, Ram
• Application Number:
  US12/734,814
• Publication Number:
  US 20100306537A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2463/041 using an encryption or decryption engine integrated in transmitted data
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A method for securely transmitting a message to a recipient whilst allowing subsequent access to the message content, wherein at least part of the message is encrypted, comprising the steps of: (a) encrypting a first piece of content with an encryption key; (b) providing a decryption engine at an address on a recipient accessible server; (c) incorporating the address of the recipient accessible server within the message, together with the first piece of encrypted content; (d) transmitting the first piece of encrypted content together with the address of the recipient accessible server to the recipient, such that the recipient is able to decrypt the first piece of content by uploading it to the decryption engine, and (e) authenticating the sender to the recipient.

Claims

1. A method for securely transmitting a message to a recipient whilst allowing subsequent access to the message content, wherein at least part of the message is encrypted, comprising the following steps:

(a) encrypting a first piece of content with an encryption key;

(b) providing a decryption engine at an address on a recipient accessible server;

(c) incorporating the address of the recipient accessible server within the message, together with the first piece of encrypted content;

(d) transmitting the first piece of encrypted content together with the address of the recipient accessible server to the recipient, such that the recipient is able to decrypt the first piece of content by uploading it to the decryption engine,

further comprising the step (e) of authenticating the sender to the recipient.

2. The method of claim 1, wherein the message content is viewable by the recipient using a web-browser.

3. The method of claim 1 wherein the decryption key is held at an address on the recipient accessible server.

4. The method of claim 1 wherein the encryption and decryption keys are selected from the group comprising symmetrical key pairs and asymmetrical key pairs.

5. The method of claim 1 wherein the encryption and decryption keys comprise a one time key pair.

6. The method of claim 1, wherein the message further comprises a unique identifier.

7. The method of claim 1, wherein the first piece of message content is encrypted together with a unique identifier prior to storage on the decryption server for authentication of the sender.

8. The method of claim 1, wherein at least part of the transmitted message is hashed;

the hashed part being accessible to the decryption server allowing confirmation of the authenticity of the transmitted message.

9. The method of claim 8, wherein said hashed part is previously encrypted.

10. The method of claim 8, wherein said hashed part is not encrypted.

11. The method of claim 1, wherein the message is encrypted by the sender with an encryption key and the corresponding decryption key is made available to the decryption server.

12. The method of claim 11, wherein the encryption and decryption keys are selected from the group comprising a symmetrical key pair and an asymmetrical key pair.

13. The method of claim 1, wherein the decryption server notifies the sender upon displaying the message to the recipient, thereby certifying that said message was delivered and displayed.

14. The method of claim 1 wherein at least one further piece of encrypted content is stored on at least one further internet address accessible to the decryption server, such that decryption is possible only after assembling all pieces of encrypted data.

15. The method of claim 1, wherein the step of authentication comprises comparing data sent in the uploaded data to the decryption server with data accessible to the decryption server.

16. Methods of safe email communication with a recipient, using data encryption but not requiring the recipient to have decryption software installed on his system, wherein the sender authenticates himself to the recipient, substantially as described herein.