Secure Messaging with Automatic Recipient Enrollment

• US 20120110332A1
• Filed: 01/12/2012
• Published: 05/03/2012
• Est. Priority Date: 01/03/2005
• Status: Abandoned Application

• Current Assignee: Gary Gang Liu
• Original Assignee: Gary Gang Liu
• Inventors: Liu, Gary Gang
• Application Number:
  US13/349,057
• Publication Number:
  US 20120110332A1
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A public-key based secure messaging system with automatic receiver enrollment is disclosed. A sender in the system first determines whether a receiver has a public key. If the receiver has a public key, the messages will be sent to the receiver using a standard public-key based encryption. If the receiver does not have a public key, the first message will be sent to the receiver using a delivery method that does not require the receiver to have a pair of public and private keys prior to sending the message. However, when the receiver accesses the first message, a pair of public and private keys will be automatically generated at the receiver and the public key will be made available for encrypting subsequent messages sent to the receiver.

Claims

1. A method for sending a message to a recipient comprising:

determining whether the recipient is enrolled;

if the recipient is not enrolled, sending the message to the recipient using authentication information that can only be used for accessing the message for the first time, and when the recipient accesses the message for the first time, making the recipient enrolled.

2. The method of claim 1, wherein the authentication information includes a password that can only be used for accessing the message for the first time.

3. The method of claim 1, wherein the authentication information is sent to a recipient'"'"'s email address.

4. The method of claim 1, wherein the authentication information includes at least two pieces of information sent to a recipient'"'"'s email address from at least two different sources.

5. The method of claim 1 wherein sending the message to the recipient includes using an identity based encryption.

6. The method of claim 1 wherein sending the message to the recipient includes using a web based delivery method.

7. The method of claim 1 further comprising:

if the recipient is enrolled, sending the message to the recipient using a secure messaging method for enrolled members.

8. The method of claim 7, wherein:

the secure messaging method for enrolled members includes using public key encryption;

determining whether the recipient is enrolled includes determining whether the recipient has a public key; and

making the recipient enrolled includes establishing a pair of public key and private key for the recipient.

9. The method of claim 8, wherein:

a recipient specific key for accessing the message after the first time or other messages sent to the recipient before the recipient is enrolled is protected in the same way as the private key is protected.

10. The method of claim 9 wherein:

the private key and the recipient specific key are protected using a recipient chosen password.

11. A system for sending a message to a recipient comprising:

means for determining whether the recipient is enrolled;

a non-member delivery apparatus operable when it is determined that the recipient is not enrolled;

wherein the non-member delivery apparatus sends the message to the recipient using authentication information that can only be used for accessing the message for the first time, and when the recipient accesses the message for the first time, makes the recipient enrolled.

12. The system of claim 11, wherein the authentication information includes a password that can only be used for accessing the message for the first time.

13. The system of claim 11, wherein the authentication information is sent to a recipient'"'"'s email address.

14. The system of claim 11, wherein the authentication information includes at least two pieces of information sent to a recipient'"'"'s email address from at least two different sources.

15. The system of claim 11 wherein sending the message to the recipient includes using an identity based encryption.

16. The method of claim 11 wherein sending the message to the recipient includes using a web based delivery method.

17. The system of claim 11 further comprising:

a member delivery apparatus operable when it is determined that the recipient is enrolled;

wherein the member delivery apparatus sends the message to the recipient using a secure messaging method for enrolled members.

18. The method of claim 17, wherein:

the secure messaging method for enrolled members includes using public key encryption;

determining whether the recipient is enrolled includes determining whether the recipient has a public key; and

making the recipient enrolled includes establishing a pair of public key and private key for the recipient.

19. The method of claim 18, wherein:

a recipient specific key for accessing the message after the first time or other messages sent to the recipient before the recipient is enrolled is protected in the same way as the private key is protected.

20. The method of claim 19 wherein:

the private key and the recipient specific key are protected using a recipient chosen password.