SECURE DATA EXCHANGE USING MESSAGING SERVICE

• US 20140052989A1
• Filed: 08/15/2012
• Published: 02/20/2014
• Est. Priority Date: 08/15/2012
• Status: Abandoned Application

• Current Assignee: Ultra Electronics Prologic (Ultra Electronics Holdings PLC)
• Original Assignee: Ultra Electronics Prologic (Ultra Electronics Holdings PLC)
• Inventors: Jones, Austin, Hostetler, Dennis, Reichle, Michael
• Application Number:
  US13/586,487
• Publication Number:
  US 20140052989A1
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates

Abstract

A system for securely communicating over a network includes a sending device and a receiving device. The sending device includes first processing hardware configured to encrypt a symmetric key associated with the sending device with a public key associated with a receiving device. The first processing hardware is further configured to steganographically embed the symmetric key into an image. The sending device further includes a first signal interface configured to send the image to the receiving device. The receiving device includes second signal interface for receiving the image from the sending device. The receiving device also includes second processing hardware configured to decrypt the symmetric key with a private key stored on the receiving device and to further secure communications with the sender via the symmetric key.

Claims

1. A receiving device for receiving secure communications, comprising:

a signal interface for receiving an image, the image including a steganographically embedded symmetric key from the sender, the symmetric key being encrypted with a public key associated with the receiving device; and

processing hardware configured to decrypt the symmetric key with a private key stored on the receiving device and to further secure communications with the sender via the symmetric key, wherein the processing hardware is further configured to encrypt future communications from the receiving device using the symmetric key.

2. The receiving device of claim 1, wherein the receiving device includes a second image associated therewith, the second image including a steganographically embedded public key, the sender being configured to extract the public key from the second image.

3. The receiving device of claim 1, wherein the receiving device communicates via a third party service wherein each transmission comprising text only is limited to 140 characters.

4. The receiving device of claim 1, wherein the receiving device and the sender communicate within an infrastructure, wherein the keys transmitted in the image are opaque to the infrastructure.

5. The receiving device of claim 4, wherein subsequent communications between the receiving device and the sender are encrypted with the symmetric key.

6. The receiving device of claim 1, wherein the receiving device and the sender communicate via a third party service and wherein each message between the receiving device and the sender is stored on a third party network server associated with the third party service in an encrypted form.

7. The receiving device of claim 4, wherein each communication between the receiving device and the sender is stored in a decrypted form on a secure escrow server.

8. The receiving device of claim 1, wherein the processing hardware is configured to delete the symmetric key, which renders each communication encrypted with the symmetric key unreadable.

9. The receiving device of claim 1, wherein the public key is a PKI key and the private key is an AES key.

10. A sending device for sending secure messages, comprising:

processing hardware configured to encrypt a symmetric key associated with the sending device with a public key associated with a receiving device and to steganographically embed the symmetric key into an image; and

a signal interface configured to send the image to the receiving device, wherein the symmetric key is decryptable by a private key associated with the receiving device.

11. The sending device of claim 10, wherein the processing hardware is configured to extract the public key from a second image associated with the receiving device.

12. The sending device of claim 10, wherein the public key is a PKI key and the symmetric key is an AES key.

13. The sending device of claim 10, wherein the processing hardware is configured to delete the private key and the symmetric key, which renders each communication encrypted with the symmetric key unreadable.

14. The sending device of claim 10, wherein the sending device communicates via a third party service wherein each communication comprising text only is limited to 140 characters.

15. The sending device of claim 10, wherein the receiving device and the sender communicate within an infrastructure, wherein the keys transmitted in the image are opaque to the infrastructure.

16. The sending device of claim 15, wherein subsequent communications between the receiving device and the sending device are encrypted with the symmetric key.

17. The sending device of claim 10, wherein the receiving device and the sending device communicate via a third party service and wherein each communication between the receiving device and the sending device is stored on a third party network server associated with the third party service in an encrypted form.

18. A system for securely communicating over a non-secure network, comprising:

a sending device including;

first processing hardware configured to encrypt a symmetric key associated with the sending device with a public key associated with a receiving device and to steganographically embed the symmetric key into an image; and

a first signal interface configured to the image to the receiving device; and

a receiving device including;

a second signal interface for receiving the image from the sending device; and

second processing hardware configured to decrypt the symmetric key with a private key stored on the receiving device and to further secure communications with the sender via the symmetric key.

19. The system of claim 18, wherein the network is a public third party social service.

20. The system of claim 19, wherein each communication transmitted between the sending device and the receiving device comprising only text transmitted within the public third party social service is limited to 140 characters.

21. The system of claim 19, wherein the third party service includes an electronic message retention server, the message retention server being configured to store only an encrypted version of each communication between the sending device and the receiving device, the decrypted content of the communication being inaccessible to the message retention server.

22. The system of claim 18, wherein each communication between the sending device and the receiving device is stored in a decrypted state on a secure escrow server.

23. The system of claim 18, wherein the sending device is configured to allow other devices within the network to subscribe to the symmetric key associated with the sending device and wherein the first processing hardware is configured to update the symmetric key based on predetermined criteria, including time and user request.

24. The system of claim 18, wherein the receiving device includes a second image associated therewith, the second image including the public key steganographically embedded into the second image, wherein the first processing hardware is configured to retrieve the public key from the second image.

25. A system for securely communicating in a network, comprising:

a sending device including;

first processing hardware configured to encrypt a symmetric key associated with the sending device with a public key associated with a receiving device; and

a first signal interface configured to send the encrypted symmetric key to the receiving device; and

a receiving device including;

a second signal interface for receiving the encrypted symmetric key from the sending device; and

second processing hardware configured to decrypt the symmetric key with a private key stored on the receiving device and to further secure communications with the sender via the symmetric key.

26. The system of claim 25, wherein each communication between the sending device and the receiving device is stored in a decrypted state on a secure escrow server.

27. The system of claim 25, wherein the sending device is configured to allow other devices within the network to subscribe to the symmetric key associated with the sending device.

28. The system of claim 25, wherein the first processing hardware is configured to update the symmetric key based on predetermined criteria, including time and user request.

29. The system of claim 25, further comprising a key source coupled to the sending device, the key source being configured to generate the symmetric key,

30. The system of claim 25, wherein the sending device includes a second public key associated therewith and wherein the system further comprises a key source, the key source being configured to:

generate the symmetric key;

to retrieve the second public key;

to encrypt the symmetric key with the second public key; and

to transmit the symmetric key encrypted with the second public key to the sending device.