METHODS AND SYSTEMS OF INCREASING SECURITY QUALITY OF COMPUTING -DEVICE COMMUNICATIONS

• US 20160294565A1
• Filed: 12/07/2015
• Published: 10/06/2016
• Est. Priority Date: 12/08/2014
• Status: Active Grant

• Current Assignee: Luigi Caramico
• Original Assignee: Luigi Caramico
• Inventors: Caramico, Luigi
• Granted Patent: US 10,205,599 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 12/04 Switchboards
• CPC Class Codes: H04L 12/06 Answer-back mechanisms or circuits
• CPC Class Codes: H04L 51/52 for supporting social networking services
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

In one embodiment, method of increasing security of computing-device mobile device communications comprising executing on one or more processors in a central repository server the step of obtaining a first user'"'"'s public key. The first user'"'"'s public key is one of a pair of certification keys generated by an application in a first user'"'"'s computing device. The method includes the step of obtaining, from the first user via the first user'"'"'s computing device, a set of first user'"'"'s communication identifiers. The set of first user'"'"'s communication identifier includes a first user'"'"'s mobile device number, a first user'"'"'s email address, or a first user'"'"'s online social network identifier. The method includes the step of receiving a set of first user'"'"'s communication identifiers from the first user via the first user'"'"'s computing device. The method includes the step of generating one or more associations of the first user'"'"'s public key with the set of first user'"'"'s communication identifiers. With the one or more processors in the central repository server implementing delivery of the first user'"'"'s public key to a second user'"'"'s mobile device the method receives from another application operating in the second user'"'"'s mobile device, a request for the first user'"'"'s public key. The request includes at least one of the first user'"'"'s communication identifiers. The method includes the step of retrieving the first user'"'"'s public key, the set of first user'"'"'s communication identifiers, and the association of the first user'"'"'s public key with the set of first user'"'"'s communication identifiers from the computer data store. The method includes the step of authenticating that the at least one of the first user'"'"'s communication identifiers received from the other application is associated with the first user'"'"'s public key using the retrieved associations of the first user'"'"'s public key with the set of first user'"'"'s communication identifiers from the computer data store. The method includes the step of communicating the first user'"'"'s public key to the other application operating in the second user'"'"'s mobile device.

Claims

1. A method of increasing security of computing-device mobile device communications comprising executing on one or more processors in a central repository server the steps of:

obtaining a first user'"'"'s public key, wherein the first user'"'"'s public key is one of a pair of certification keys generated by an application in a first user'"'"'s computing device;

obtaining, from the first user via the first user'"'"'s computing device, a set of first user'"'"'s communication identifiers, and wherein the set of first user'"'"'s communication identifier comprises a first user'"'"'s mobile device number, a first user'"'"'s email address, or a first user'"'"'s online social network identifier;

receiving a set of first user'"'"'s communication identifiers from the first user via the first user'"'"'s computing device;

generating one or more associations of the first user'"'"'s public key with the set of first user'"'"'s communication identifiers;

with the one or more processors in the central repository server implementing delivery of the first user'"'"'s public key to a second user'"'"'s mobile device;

receiving, from another application operating in the second user'"'"'s mobile device, a request for the first user'"'"'s public key, wherein the request comprises at least one of the first user'"'"'s communication identifiers;

retrieving the first user'"'"'s public key, the set of first user'"'"'s communication identifiers, and the association of the first user'"'"'s public key with the set of first user'"'"'s communication identifiers from the computer data store;

authenticating that the at least one of the first user'"'"'s communication identifiers received from the other application is associated with the first user'"'"'s public key using the retrieved associations of the first user'"'"'s public key with the set of first user'"'"'s communication identifiers from the computer data store; and

communicating the first user'"'"'s public key to the other application operating in the second user'"'"'s mobile device.

2. The computer-implemented method of claim 1 further comprising:

storing the first user'"'"'s public key, the set of first user'"'"'s communication identifiers, and the associations of the first user'"'"'s public key with the set of first user'"'"'s communication identifiers in a computer data store;

3. A computer-implemented method comprising:

with a mobile-device application operating in a mobile device managed by a first user, creating a pair of certification keys, wherein the pair of certification keys comprises a first user'"'"'s public key;

providing the first user'"'"'s public key to a central repository server;

with the central repository server;

associating the public key with the mobile-device application;

receiving from the first user a set of first user'"'"'s communication identifiers;

authenticating the first user and the set of first user'"'"'s communication identifiers with a multifactor user-identification authentication operation;

using at least one communication identifier to confirm a first user'"'"'s identity;

associate the set of first user'"'"'s communication identifiers with the first user'"'"'s public key;

receiving, from another application operating in a second user'"'"'s mobile device, a request for the first user'"'"'s public key, wherein the request comprises an authenticated first user'"'"'s communication identifier;

authenticating the communication identifier received from the other application as associated with the first user'"'"'s public key;

certifying to the other application that the communication identifier received from the other application is associated with the first user'"'"'s public key; and

communicating the first user'"'"'s public key to the other application operating in the second user'"'"'s mobile device.

4. The computer-Implemented method of claim 3 further comprising:

with the other user'"'"'s mobile device, generating an encrypted communication to the user'"'"'s mobile device using the first user'"'"'s public key as obtained from the central repository server.

5. The computer-implemented method of claim 3, wherein the pair of certification keys comprises an encryption key.

6. The computer-implemented method of claim 4, wherein the central repository server comprises a key server.

7. The computer-implemented method of claim 5, wherein the first user'"'"'s communication identifier comprises a first user'"'"'s mobile device number, a first user'"'"'s email address, or a first user'"'"'s online social network identifier.

8. The computer-implemented method of claim 6, wherein the central repository server automatically generates a confirmation text message and communicates the confirmation text message to the mobile device to confirm the user'"'"'s identity.

9. The computer-implemented method of claim 6, wherein the central repository server automatically generates a confirmation email and communicate the confirmation email to a first user'"'"'s email account to confirm the first user'"'"'s identity.

10. The computer-implemented method of claim 6 further comprising:

with the other user'"'"'s mobile device, generating an encrypted text message to the user'"'"'s mobile device using the first user'"'"'s public key as obtained from the central repository server.

11. The computer-implemented method of claim 9, wherein a single public key can have n-number associated communication identifiers.

12. The computer-implemented method of claim 10, wherein the first user'"'"'s public key is associated with a first user'"'"'s former mobile device number and the first user'"'"'s new mobile device number.

13. The computer-implemented method of claim 11, wherein the step of with the other user'"'"'s mobile device, generating the encrypted communication to the user'"'"'s mobile device using the first user'"'"'s public key as obtained from the central repository server further comprises:

with the other application operating in the other user'"'"'s mobile device;

receiving an electronic message content generated by the other user; and

generating a random message key.

14. The computer-implemented method of claim 13, wherein the step of with the other user'"'"'s mobile device, generating the encrypted communication to the user'"'"'s mobile device using the first user'"'"'s public key as obtained from the central repository server further comprises

with the other application operating in the other user'"'"'s mobile device:

encrypting the electronic message content with the random message key; and

encrypting the random message key with the first user'"'"'s public key.

15. The computer-implemented method of claim 14, wherein the step of with the other user'"'"'s mobile device, generating the encrypted communication to the user'"'"'s mobile device using the first user'"'"'s public key as obtained from the central repository server further comprises

with the other application operating in the other user'"'"'s mobile device:

communicating the encrypted random message key to a message key repository in the central repository server.

16. The computer-implemented method of claim 15, wherein the step of with the other user'"'"'s mobile device, generating the encrypted communication to the user'"'"'s mobile device using the first user'"'"'s public key as obtained from the central repository server further comprises

with the other application operating in the other user'"'"'s mobile device:

instructing the message key repository to delete random message key before the random message key is provided to the first user'"'"'s mobile device.