METHOD OF SECURING COMMUNICATION

• US 20120210134A1
• Filed: 02/09/2012
• Published: 08/16/2012
• Est. Priority Date: 02/09/2011
• Status: Active Application

• Current Assignee: Navroop Mitter
• Original Assignee: Navroop Mitter
• Inventors: Mitter, Navroop
• Application Number:
  US13/370,294
• Publication Number:
  US 20120210134A1
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/082 using revocation of authorisation

Abstract

A method for securing data to be transmitted between a plurality of devices which includes exchanging encryption keys between first and second devices of the plurality of devices, selecting digital rights management (DRM) features for the data which is to be transmitted from the first device, encrypting the data to be transmitted and the selected digital rights management features using at least one distinct key, transmitting the encrypted data and the selected DRM features to the second device and a third device, and decrypting the encrypted data on the second device using the exchanged encryption keys and displaying the data according to the selected DRM features.

Claims

1. A method for securing data to be transmitted between a plurality of devices, the method comprising:

exchanging encryption keys between first and second devices of the plurality of devices;

selecting digital rights management (DRM) features for the data which is to be transmitted from the first device;

encrypting the data to be transmitted and the selected digital rights management features using at least one distinct key;

transmitting the encrypted data and the selected DRM features to the second device and a third device of the plurality of devices; and

decrypting the encrypted data on the second device using the exchanged encryption keys and displaying the data according to the selected DRM features.

2. The method of claim 1, wherein the data includes text data, picture data, audio data, video data, SMS data, and MMS data.

3. The method of claim 1, wherein the DRM features comprise data expiration time, limit on number of times data is viewable, limits on data export rights, and limits on data forwarding rights.

4. The method of claim 1, wherein the encrypted data is transmitted to a third device of the plurality of devices when an audit requirement exists.

5. The method of claim 3, wherein the audit requirement occurs when the data transmitted between the first and second device is subject to regulatory compliance.

6. The method of claim 4, wherein the third device is a non mobile database.

7. The method of claim 6, wherein the third device is able to access, decrypt, and display the received encrypted data without the limits set by the selected DRM features.

8. The method of claim 1, wherein the encrypted data is stored within an encrypted database on both the first and second devices.

9. The method of claim 1, wherein the exchanged encryption keys between the first and second devices are accessed, maintained, and modified through a key server.

10. The method of claim 7, wherein the key server can revoke the exchanged keys between the first and second device.

11. The method of claim 7, wherein the key server can verify whether the first and second device are authorized to communicate with each other.

12. The method of claim 9, wherein the key server can request status updates from the first and second device to verify whether the devices authorized to communicate with each other.

14. The method of claim 11, wherein the first identification information includes a first telephone number and a first IMEI number of the first mobile device.

15. The method of claim 11, wherein the second identification information includes a second telephone number and a second IMEI number of the second mobile device.

17. The method of claim 14, wherein the second identification information as read from the first memory of the first mobile device is one-way hashed and appended to the selected data.

18. The method of claim 15, wherein the data is accessible on the second mobile device when the one-way hashed second identification information as read from the first memory of the first mobile device corresponds with a one-way hash of the second identification information as read from directly from the second memory of the second mobile device.

19. The method of claim 11, further comprising defining accessibility conditions of the selected data before sending the selected data to the second device.

20. The method of claim 15, further comprising encrypting the selected data and the defined accessibility conditions by using the second identification information as read from the first memory of the first mobile device as a key.

21. The method of claim 15, wherein the defined accessibility conditions are appended to the selected data before sending the selected data to the second device.

23. The method of claim 17, wherein the number of times used in the first option is inputted by a user of the first mobile device.

25. The method of claim 19, wherein the expiration time period used in the second option is inputted by a user of the first mobile device.

27. The method of claim 21, wherein a user of the first mobile device selects the third option to protect the selected data from being forwarded to a third mobile device from the second mobile device.

13. A method to perform secure communication between a first mobile device and a second mobile device, the method comprising:

selecting data using the first mobile device which has a first identification information;

selecting the second mobile device having a second identification information from a first memory of the first mobile device;

appending the second identification information as read from the first memory to the selected data;

sending the selected data with the appended second identification information to the second mobile device,

wherein the data is accessible on the second mobile device when the appended second information corresponds with the second identification information as read from a second memory of the second device.

16. The method of claim 13, wherein the data is accessible on the second mobile device when the second telephone number appended to the selected data corresponds to the second telephone number as read directly from the second memory of the second mobile device.

22. The method of claim 16, wherein the accessibility conditions include a first option to limit an accessibility to the selected data according to a number of times which the data is accessed by the second mobile device.

24. The method of claim 16, wherein the accessibility conditions include a second option to limit an accessibility to the selected data according to an expiration time period of the selected data.

26. The method of claim 16, wherein the accessibility conditions include a third option to protect the selected data from being forwarded to a third mobile device from the second mobile device.

29. The method of claim 26, wherein the first identification information includes a first telephone number and a first IMEI number of the first mobile device.

30. The method of claim 26, wherein the second identification information includes a second telephone number and a second IMEI number of the second mobile device.

28. A method to perform secure communication between a first mobile device and a second mobile device, the method comprising:

registering the first mobile device having a first identification information with a server as a first authorized user based on the first identification information;

generating an encryption key corresponding to rights granted to the first mobile device;

storing the encryption key within the server; and

determining whether a second identification information of a second mobile device selected by the first mobile device is a second authorized user,

wherein the first mobile device is permitted to communicate with the second mobile device when the server determines that both the first and second mobile devices are authorized users.

31. A method for securing data to be transmitted between a plurality of devices, the method comprising:

exchanging distinct encryption keys between first and second devices of the plurality of devices; and

selecting data to be transmitted from the first device to the second device,

wherein a smart security feature automatically encrypts the selected data when the data contains certain data.

32. The method according to claim 31, wherein the certain data includes predetermined language, predetermined images, or other adult rated content.