NFC Communications Device for Setting Up Encrypted Email Communication

• US 20120314865A1
• Filed: 06/21/2011
• Published: 12/13/2012
• Est. Priority Date: 06/07/2011
• Status: Abandoned Application

• Current Assignee: Avago Technologies General IP PTE Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: KITCHEN, Robert
• Application Number:
  US13/165,440
• Publication Number:
  US 20120314865A1
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

NFC communication is utilized to provide methods, apparatus and systems for increasing the security of cryptographic keys and cryptographic processes. For the encryption and decryption of a message, public key cryptography requires the use of a pair of keys, i.e., the public key and the private key. Various embodiments of the present invention provide storage of information needed for one or more aspects of encrypting and/or decrypting messages, wherein that information is made available through an NFC communications interface. An NFC-enabled device is brought into physical proximity with a computational platform that is executing, or otherwise providing access to, an email client. Once the NFC-enabled device and the computational platform are within NFC communication range of each other, transfer of information needed to set up an encryption and/or decryption process takes place. Since the encryption/decryption keys and/or related cryptographic process parameters are not stored on the computational platform the security of this information is improved. In some embodiments the encrypted communication is encrypted email, or PUP encrypted email.

Claims

1. A method of providing encrypted communication, comprises:

storing a private key of a public key/private key pair in a first memory of a first NFC-enabled communication device; and

transmitting the private key, by near field communication, to a second NFC-enabled communication device, the second NFC-enabled communication device disposed so as to be in communication with a computational platform;

wherein the computational platform executes program code that uses the private key received from the first NFC-enabled communication device in a cryptographic process.

2. The method of claim 1, further comprising:

harvesting energy from an energization field prior to transmitting.

3. The method of claim 1, wherein the second NFC-enabled communication device is disposed so as to be in wired communication with the computational platform.

4. The method of claim 3, wherein the second NFC-enabled communication device is disposed within the computational platform.

5. The method of claim 1, wherein the computational platform further executes program code to provide the functionality of an email client.

6. The method of claim 1, wherein the computational platform further executes program code to provide access to an email client.

7. A method of providing encrypted communication, comprising:

receiving, at an NFC-enabled computational platform, a private key, by near field communication;

executing, at the computational platform, program code that provides an email client; and

executing, at the computational platform, program code that uses the private key in a cryptographic process.

8. The method of claim 7, wherein the cryptographic process decrypts an encrypted email message to produce a plain text version of the encrypted email message.

9. The method of claim 7, wherein the cryptographic process signs a plain text email message to produce a cipher text version of the plain text email message.

10. An NFC communication device, comprising:

a first memory, the first memory having stored therein at least one private key;

a second memory, the second memory having stored therein at least one public key;

a third memory, the third memory having stored therein at least one pass phrase;

a memory access controller coupled to the first memory, the second memory and the third memory; and

an NFC modem coupled to the memory access controller.

11. The NFC communication device of claim 10, further comprising:

an energy harvesting circuit coupled to the NFC modem.

12. The NFC communication device of claim 10, further comprising:

a fourth memory, the fourth memory storing program code which when executed by a computational resource causes the computational resource to generate a private key/public key pair.

13. The NFC communication device of claim 12, wherein the computational resource is disposed within the NFC communication device.

14. The NFC communication device of claim 12, wherein the computational resource is physically disposed external to the NFC communication device, and is communicatively coupled to the NFC communication device.

15. The NFC communication device of claim 10, further including a memory for storing one or more symmetric key, the symmetric key suitable for use in a symmetric key cryptographic process.

16. A system for encrypted communication, comprising:

a first NFC communications device comprising

a first memory, the first memory having stored therein at least one private key;

a memory access controller coupled to the first memory; and

a first NFC modem coupled to the memory access controller; and

a computational platform configured to execute program code, the computational platform including a machine readable storage medium having stored thereon program code that when executed causes the computational platform to provide an email client, and further including a second NFC communications device;

wherein the first NFC communications device, and the second NFC communication device of the computational platform, must be disposed in a predetermined spatial relationship to each other such that near-field communication between the first NFC communications device and the second NFC communications is enabled.

17. The system of claim 16, wherein the first NFC communications device further comprises an energy harvesting circuit, the energy harvesting circuit coupled to the first memory, the memory access controller, and the first NFC modem.

18. The system of claim 17, wherein the first NFC communications device is disposed within smart card.

19. The system of claim 16, wherein the first NFC communications device is disposed within a mobile phone.

20. The system of claim 16, wherein the first NFC communications device further comprises a second memory, the second memory having stored therein at least one public key.

21. The system of claim 16, wherein the encrypted communication is encrypted email.

22. The system of claim 21, wherein the encrypted email is encrypted using a public key cryptography process.

23. The system of claim 22, wherein the public key cryptography process is PGP.