CRYPTOGRAPHY METHOD AND SYSTEM FOR SECURING DATA VIA ELECTRONIC TRANSMISSION

• US 20190244198A1
• Filed: 04/15/2019
• Published: 08/08/2019
• Est. Priority Date: 05/06/2016
• Status: Active Grant

• Current Assignee: Richard H. Waters, Robert N. Barrett, Thomas J. Waters
• Original Assignee: Richard H. Waters, Robert N. Barrett, Thomas J. Waters
• Inventors: Waters, Thomas J., Waters, Richard H., Barrett, Robert N.
• Granted Patent: US 10,643,204 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/1824 implemented using Network-attached Storage [NAS] architecture distributed or networked storage systems G06F3/067; protocols for distributed storage of data in a network H04L67/1097
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06K 19/06037 multi-dimensional coding
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2463/081 applying self-generating credentials, e.g. instead of receiving credentials from an authority or from another peer, the credentials are generated at the entity itself cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

Provided are QR Codes configured with a Transactional Cryptopgrahy (“TC”) component and methods for using thereof in a secure manner without the need for specialized hardware. By using software-defined security, QR codes can be used for a wider array of purposes without the additional expense and maintenance of separate hardware platforms for secure information

Claims

1. A method for encrypting data within a QR code utilizing a data encryption server, comprising the steps of:

registering, with the server, a data originator;

creating, by the server, a data originator encryption key and a corresponding recipient encryption key, the data originator encryption key and the recipient encryption key being a randomly-generated asymmetrical key-pair set configured for one-time use and not otherwise publicly stored;

transmitting, by the server, the data originator encryption key to a data originator peripheral device and the recipient encryption key to a recipient peripheral device;

encrypting data within the QR code to be transmitted by the data originator peripheral device with the data originator encryption key;

transmitting the encrypted data within the QR code to the recipient peripheral device;

verifying that the recipient encryption key and the data originator encryption key are from the same randomly-generated key-pair set; and

if/when the recipient encryption key and the data originator encryption key are verified to be from the same randomly-generated key-pair set, decrypting the encrypted data within the QR code received by the recipient peripheral device such that information within the QR code is accessible and may be viewed/read.

2. The method according to claim 1, wherein the randomly-generated key-pair set is utilized for a single data transmission between the data originator peripheral device and the recipient peripheral device and discarded after decryption of the transmitted data.

3. The method according to claim 2, wherein the data to be transmitted is a message and each character and/or space of the message is assigned a randomly-generated character.

4. The method according to claim 3, wherein the randomly-generated character is not repeated.

5. The method according to claim 4, further comprising additional randomly-generated intermittently dispersed characters that do not correspond to the data to be transmitted that further conceal the nature and size of the data to transmitted to the recipient peripheral device.

6. The method according to claim 5, wherein the additional randomly-generated intermittently dispersed characters are not repeated.

7. The method of claim 6, wherein the encrypted data has a unique file extension.

8. The method of claim 7, further comprising tracking the encrypted data via blockchain technology.

9. The method according to claim 2, wherein the data to be transmitted is a message and certain ones of characters and/or spaced of the message are assigned a randomly-generated character.

10. The method according to claim 9, wherein the randomly-generated character is not repeated.

11. The method according to claim 10, further comprising additional randomly-generated intermittently dispersed characters that do not correspond to the data to be transmitted is further provided to further mask the nature and size of the data to transmitted to the recipient peripheral device.

12. The method according to claim 11, wherein the additional randomly-generated intermittently dispersed characters are not repeated.

13. The method of claim 12, wherein the encrypted data has a unique file extension.

14. The method of claim 13, further comprising tracking the encrypted data via blockchain technology.

15. A system for encrypting data within a QR code, comprising:

(a) at least a first and second peripheral device;

(b) a data encryption server;

(c) and a network router allowing for communication of an encrypted QR code between the first peripheral device, second peripheral device, and data encryption server;

wherein;

the first peripheral device is a data originator and is configured to communicate with and register with the encryption server;

the encryption server is configured to concurrently create a data originator encryption key and a corresponding recipient encryption key once the first peripheral device registers with the encryption server, the data originator encryption key and the recipient encryption key being a randomly-generated asymmetrical key-pair set configured for one-time use and not otherwise publicly stored;

the encryption server is further configured to transmit the data originator encryption key to the first peripheral device and the recipient encryption key to the second peripheral device, which is a recipient peripheral device;

the encryption server is configured to encrypt data within the QR code that is to be transmitted by the data originator peripheral device with the data originator encryption key and transmit the encrypted data within the QR code to the recipient peripheral device;

at least one of the first peripheral device, the second peripheral device, and/or encryption server are configured to verify that the recipient encryption key and the data originator encryption key are from the same randomly-generated key-pair set; and

if the recipient encryption key and the data originator encryption key are verified to be from the same randomly-generated key-pair set, decrypting the encrypted data within the QR code received by the recipient peripheral device such that information within the QR code is accessible and may be viewed/read.

16. The system according to claim 15, wherein the randomly-generated key-pair set is utilized for a single data transmission between the data originator peripheral device and the recipient peripheral device and discarded after decryption of the transmitted data.

17. The system according to claim 16, wherein the data to be transmitted is a message and each character and/or space of the message is assigned a randomly-generated character.

18. The system according to claim 17, wherein the randomly-generated character is not repeated.

19. The system according to claim 18, further comprising additional randomly-generated intermittently dispersed characters that do not correspond to the data to be transmitted is further provided to further mask the nature and size of the data to transmitted to the recipient peripheral device.

20. The system according to claim 19, wherein the additional randomly-generated intermittently dispersed characters are not repeated.

21. The system of claim 20, wherein the encrypted data has a unique file extension.

22. The system of claim 21, wherein the unique file extension is at least one of an .epub file, a .zip file, or a .tkp file.

23. The system of claim 22, further comprising tracking the encrypted data via blockchain technology.

24. The method of 3, wherein the assigned randomly-generated character is a number.

25. The method of 6, wherein the additional randomly-generated intermittently dispersed characters are numbers.