Secure communication apparatus and method

• US 5,552,897 A
• Filed: 03/07/1994
• Issued: 09/03/1996
• Est. Priority Date: 03/07/1994
• Status: Expired due to Term

• Current Assignee: AT&T IPM Corp. (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Mandelbaum, Richard, Partridge, B. Waring III
• Primary Examiner(s): Coles, Sr., Edward L.
• Assistant Examiner(s): Williams, Kimberly A.
• Application Number:
  US08/206,710
• Time in Patent Office: 911 Days
• Field of Search: 358/400, 358/434, 358/407, 358/444, 355/201, 380/180, 380/23, 380/21, 340/825.34, 340/825.31, 375/95, 375/100, 375/200
• US Class Current: 358/400
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04M 3/387 using subscriber identification cards
• CPC Class Codes: H04M 3/42 Systems providing special services or facilities to subscribers specially adapted for wireless communication networks H04W4/00

Abstract

A communication apparatus (e.g., a fax apparatus) provides secure message transmission by sending messages having an unrestricted portion (e.g., a header) and a restricted portion (e.g., the body of the message). The unrestricted portion is always outputted at the receiving apparatus; however, access to the restricted portion is provided only in response to receiving predetermined information from a user (e.g., a message recipient). This information may include either the use of a password or the use of a PIN code following the insertion of a user'"'"'s smart card into the receiving apparatus. If the restricted portion is encrypted, the user must either provide the decryption key to enable the receiving apparatus to decrypt the restricted message or his/her smart card must perform the actual decryption of the restricted message.

Claims

1. A communication apparatus for receiving a sender'"'"'s message over a facility comprising

means for receiving and storing the message including an unrestricted portion and a restricted encrypted portion,

first output means for outputting the unrestricted portion of the received message to a user, the unrestricted portion including information identifying an encryption key used to encrypt the restricted portion,

second output means, responsive to predetermined information received from the user, for outputting the restricted portion of the message to the user,

a smart card interface means and wherein

said predetermined information includes a user-entered person identification number (PIN) entered after the user'"'"'s smart card is inserted into said interface,

means responsive to said received PIN for enabling said interface means to output said encryption key identification information and said restricted encrypted portion to said smart card for use in decrypting said restricted encrypted portion by said smart card and wherein

said interface means receives a decrypted restricted portion from said smart card, via said interface, for output via said second output means.

2. The communication apparatus of claim 1 the unrestricted portion includes information indicating whether or not the restricted portion is encrypted.

3. The communication apparatus of claim 2 wherein the unrestricted portion includes information indicating a type of encryption key used to encrypt the restricted portion.

4. The communication apparatus of claim 1 wherein

a plurality of messages are received and wherein

the unrestricted portion includes recipient identification for each received message and wherein

said predetermined information identifies the user as the recipient in at least one of the plurality of fax messages to be outputted to the user.

5. The communication apparatus of claim 1 wherein said communication apparatus is a fax apparatus.

6. The communication apparatus of claim 1 wherein said communication apparatus is a multi-media apparatus.

7. A communication apparatus for transmitting a message over a facility, comprising

first input means for receiving a first user input to be transmitted as a message,

second input means for receiving a second user input requesting that the message delivery be restricted to an intended recipient, and requesting that the message be encrypted using a user-selected encryption key selected from a plurality of predetermined encryption keys,

means, responsive to said second user input, for sending a message including an unrestricted portion and a restricted portion, the unrestricted portion being arranged to be outputted to a recipient at a receiving location for identifying an intended recipient and one or more encryption flags indicating said user-selected encryption key used to encrypt the restricted portion.

8. The communication apparatus of claim 7 wherein

said user-selected encryption key is the intended recipient'"'"'s public key K_RP as indicated by said one or more encryption flags.

9. The communication apparatus of claim 7 wherein

said user-selected encryption key is the user'"'"'s private key K_SS as indicated by said one or more encryption flags.

10. The communication apparatus of claim 9 wherein the user'"'"'s public key is sent as part of the unrestricted portion of the message.

11. The communication apparatus of claim 7 further including

a smart card interface and wherein

said second user input includes recipient information received from a smart card inserted into said interface.

12. The communication apparatus of claim 7 further comprising a smart card interface for displaying an address book of a smart card inserted therein, the address book being used by the user to select the intended recipient.