PUBLIC KEY ENCRYPTION OF ACCESS CREDENTIALS AND CONTENT DATA CONTAINED IN A MESSAGE

• US 20130311769A1
• Filed: 10/04/2011
• Published: 11/21/2013
• Est. Priority Date: 10/04/2010
• Status: Abandoned Application

• Current Assignee: Electronic Shipping Solutions Limited
• Original Assignee: Electronic Shipping Solutions Limited
• Inventors: Hayes, Michael William
• Application Number:
  US13/877,608
• Publication Number:
  US 20130311769A1
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A method of sending data securely from a client computing device to a server computing device, the client computing device being arranged to store a public encryption key associated with the server computing device and being associated with a user, the user being a registered user on the server computing device, the method comprising: generating a message at the client computing device, the message comprising log-in data relating to the registered user for logging into the server computing device and content data; encrypting the message using the public encryption key; outputting the encrypted message for transmission to the server computing device.

Claims

1. A method of sending data securely from a client computing device to a server computing device, the client computing device being arranged to store a public encryption key associated with the server computing device and being associated with a user, the user being a registered user on the server computing device, the method comprising:

generating a message at the client computing device, the message comprising log-in data relating to the registered user for logging into the server computing device and content data;

encrypting the message using the public encryption key;

outputting the encrypted message for transmission to the server computing device.

2. A method as claimed in claim 1, further comprising receiving at the client computing device an initial communication from the server computing device, the communication comprising a unique identifier and wherein the log-in data comprises a username and password relating to the registered user for logging into the server computing device.

4. A method as claimed in claim 2, wherein the password is additionally encrypted before the encryption step.

5. A method as claimed in claim 2, wherein the message further comprises token information to provide dual factor authentication of the user to the server computing device.

6. A method as claimed in claim 2, wherein the message further comprises a unique identifier that has been previously supplied by the server computing device.

7. A method as claimed in claim 1, wherein the client computing device comprises an application module, the application module being arranged to request log-in data and content data from the user and to generate the message for encryption based on the requested log-in data and content data.

8. A method as claimed in claim 7, wherein the message generated by the application module comprises an XML string based on the log-in data and content data.

9. A method as claimed in claim 7, wherein the application module is arranged to encrypt the generated message using the public key of the server computing device to form an encrypted message.

10. A method as claimed in claim 7, wherein the application module is arranged to send the encrypted message to an email client for onward transmission of the encrypted message to the server computing device.

11. A method as claimed in claim 10, wherein the email client is either integrated with the application module or is separate to the application module.

13. A method as claimed in claim 7, wherein the application module is arranged to prevent access to unencrypted log-in and content data that has been entered by the user.

14. A method as claimed in claim 1, wherein the outputting step comprises outputting the encrypted message to an email channel for transmission to the server computing device.

21. A carrier medium for carrying a computer readable code for controlling a computing device to carry out the method of claim 1.

3. (canceled)

12. (canceled)

15. A client computing device for sending data securely to a server computing device, the client computing device being arranged to store a public encryption key associated with the server computing device and being associated with a user, the user being a registered user on the server computing device, the client computing device comprising:

a message composer arranged to generate a message, the message comprising log-in data relating to the registered user for logging into the server computing device and content data;

an encryption module arranged to encrypt the message generated by the message composer using the public encryption key

an output arranged to output the encrypted message for transmission to the server computing device.

16. A method of exchanging data securely from a user at a client computing device to a server computing device, the user being a registered user on the server computing device, the server computing device being arranged to store a private encryption key relating to the server computing device and the client computing device being arranged to store a public encryption key corresponding to the private encryption key, the method comprising:

generating a message at the client computing device, the message comprising log-in data relating to the registered user and content data;

encrypting the message using the public encryption key sending the encrypted message to the server computing device;

receiving the encrypted message at the server computing device;

decrypting the content of the encrypted message using the private key to recover the log-in data and content data;

validating the identity of the user based on the log-in data;

processing the content data.

17. A server arranged to receive and process an encrypted message from a client computing device, the encrypted message having been encrypted using a public key associated with the server computing device, the server computing device being arranged to store a private encryption key relating to the server computing device and comprising:

an input arranged to receive the encrypted message;

a decryption module arranged to decrypt the content of the encrypted message using the private key to recover log-in data and content data within the encrypted message;

an identity validation module arranged to validate the identity of the user based on the log-in data;

a processor arranged to process the content data.

18. A method of receiving and processing an encrypted message from a client computing device at a server computing device, the encrypted message having been encrypted using a public key associated with the server computing device, the server computing device being arranged to store a private encryption key relating to the server computing device and comprising:

receiving the encrypted message;

decrypting the content of the encrypted message using the private key to recover log-in data and content data within the encrypted message;

validating the identity of the user based on the log-in data;

processing the content data.

22. A carrier medium for carrying a computer readable code for controlling a server to carry out the method of claim 18.

19. An application module for sending data securely to a server computing device, the application module being arranged to store a public encryption key associated with the server computing device and being associated with a user, the user being a registered user on the server computing device, the application module comprising:

a message composer arranged to generate a message, the message comprising log-in data relating to the registered user for logging into the server computing device and content data;

encryption module arranged to encrypt the message generated by the message composer using the public encryption key

output arranged to output the encrypted message for transmission to the server computing device.

20. A computing device comprising an application module as claimed in claim 19.