Method and apparatus for facilitating secure anonymous email recipients
First Claim
1. A method for facilitating secure transmission of an email message to anonymous recipients without divulging the identities of the anonymous recipients, comprising:
- identifying recipients of the email message, wherein the recipients can include known recipients, who can be identified by examining the email message, and anonymous recipients, who cannot be identified by examining the email message;
generating a session key for the email message;
encrypting a body of the email message with the session key;
creating a recipient block for the email message that contains an entry for each recipient of the email message;
wherein each entry in the recipient block contains the session key encrypted with a public key associated with the recipient to form an encrypted session key, so that only a corresponding private key held by the recipient can be used to decrypt the encrypted session key;
wherein each entry additionally contains an identifier for the associated public key, but different than the associated public key, so that each recipient can determine whether the recipient possesses the corresponding private key that can decrypt the encrypted session key;
wherein identifiers for public keys belonging to known recipients are statistically unique;
wherein identifiers for public keys belonging to anonymous recipients are not statistically unique; and
sending the email message to the recipients.
4 Assignments
0 Petitions
Accused Products
Abstract
One embodiment of the present invention provides a system that facilitates secure transmission of an email message to anonymous recipients without divulging the identities of the anonymous recipients. This system constructs an email message by identifying recipients of the email message. These recipients can include known recipients, who can be identified by examining the email message, and anonymous recipients, who cannot be identified by examining the email message. The system also generates a session key for the email message, and encrypts a body of the email message with the session key. The system also creates a recipient block for the email message that contains an entry for each recipient of the email message. Each entry in this recipient block contains the session key encrypted with a public key associated with the recipient to form an encrypted session key, so that only a corresponding private key held by the recipient can be used to decrypt the encrypted session key. Each entry additionally contains an identifier for the associated public key, so that each recipient can determine whether the recipient possesses a corresponding private key that can decrypt the encrypted session key. These identifiers are constructed so that identifiers for public keys belonging to known recipients are statistically unique, and identifiers for public keys belonging to anonymous recipients are not statistically unique. Finally, the system sends the email message to the recipients.
-
Citations
27 Claims
-
1. A method for facilitating secure transmission of an email message to anonymous recipients without divulging the identities of the anonymous recipients, comprising:
-
identifying recipients of the email message, wherein the recipients can include known recipients, who can be identified by examining the email message, and anonymous recipients, who cannot be identified by examining the email message;
generating a session key for the email message;
encrypting a body of the email message with the session key;
creating a recipient block for the email message that contains an entry for each recipient of the email message;
wherein each entry in the recipient block contains the session key encrypted with a public key associated with the recipient to form an encrypted session key, so that only a corresponding private key held by the recipient can be used to decrypt the encrypted session key;
wherein each entry additionally contains an identifier for the associated public key, but different than the associated public key, so that each recipient can determine whether the recipient possesses the corresponding private key that can decrypt the encrypted session key;
wherein identifiers for public keys belonging to known recipients are statistically unique;
wherein identifiers for public keys belonging to anonymous recipients are not statistically unique; and
sending the email message to the recipients. - View Dependent Claims (2, 3, 4, 5)
-
-
6. A method for facilitating secure transmission of an email message to anonymous recipients without divulging the identities of the anonymous recipients, comprising:
-
receiving the email message at a recipient, wherein the email message includes, a message body that has been encrypted with a session key, a recipient block that contains an entry for each recipient of the email message, wherein each entry in the recipient block contains the session key encrypted with a public key associated with the recipient to form an encrypted session key, wherein each entry additionally contains an identifier for the associated public key, but different than the associated public key, wherein identifiers for public keys belonging to known recipients are statistically unique, and wherein identifiers for public keys belonging to anonymous recipients are not statistically unique;
attempting to match a candidate public key held by the recipient with key identifier in the recipient block;
if the candidate public key matches a key identifier, decrypting the associated encrypted session key using an associated private key to restore the session key, decrypting the message body using the session key, and examining a checksum in the message body to verify that message body was correctly decrypted. - View Dependent Claims (7, 8, 9)
-
-
10. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for facilitating secure transmission of an email message to anonymous recipients without divulging the identities of the anonymous recipients, the method comprising:
-
identifying recipients of the email message, wherein the recipients can include known recipients, who can be identified by examining the email message, and anonymous recipients, who cannot be identified by examining the email message;
generating a session key for the email message;
encrypting a body of the email message with the session key;
creating a recipient block for the email message that contains an entry for each recipient of the email message;
wherein each entry in the recipient block contains the session key encrypted with a public key associated with the recipient to form an encrypted session key, so that only a corresponding private key held by the recipient can be used to decrypt the encrypted session key;
wherein each entry additionally contains an identifier for the public key, but different than the associated public key, so that each recipient can determine whether the recipient, possesses the corresponding private key that can decrypt the encrypted session key;
wherein identifiers for public keys belonging to known recipients are statistically unique;
wherein identifiers for public keys belonging to anonymous recipients are not statistically unique; and
sending the email message to the recipients. - View Dependent Claims (11, 12, 13, 14)
-
-
15. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for facilitating secure transmission of an email message to anonymous recipients without divulging the identities of the anonymous recipients, the method comprising:
-
receiving the email message at a recipient, wherein the email message includes, a message body that has been encrypted with a session key, a recipient block that contains an entry for each recipient of the email message, wherein each entry in the recipient block contains the session key encrypted with a public key associated with the recipient to form an encrypted session key, wherein each entry additionally contains an identifier for the associated public key, but different than the associated public key, wherein identifiers for public keys belonging to known recipients are statistically unique, and wherein identifiers for public keys belonging to anonymous recipients are not statistically unique;
attempting to match a candidate public key held by the recipient with key identifier in the recipient block;
if the candidate public key matches a key identifier, decrypting the associated encrypted session key using an associated private key to restore the session key, decrypting the message body using the session key, and examining a checksum in the message body to verify that message body was correctly decrypted. - View Dependent Claims (16, 17, 18)
-
-
19. An apparatus that facilitates secure transmission of an email message to anonymous recipients without divulging the identities of the anonymous recipients, comprising:
-
an identifying mechanism that is configured to identify recipients of the email message, wherein the recipients can include known recipients, who can be identified by examining the email message, and anonymous recipients, who cannot be identified by examining the email message;
a key generation mechanism that is configured to generate a session key for the email message;
an encryption mechanism that is configured to encrypt a body of the email message with the session key;
a recipient block creation mechanism that is configured to create a recipient block for the email message that contains an entry for each recipient of the email message;
wherein each entry in the recipient block contains the session key encrypted with a public key associated with the recipient to form an encrypted session key, so that only a corresponding private key held by the recipient can be used to decrypt the encrypted session key;
wherein each entry additionally contains an identifier for the associated public key, but different than the associated public key, so that each recipient can determine whether the recipient possesses the corresponding private key that can decrypt the encrypted session key;
wherein identifiers for public keys belonging to known recipients are statistically unique;
wherein identifiers for public keys belonging to anonymous recipients are not statistically unique; and
a sending mechanism that is configured to send the email message to the recipients. - View Dependent Claims (20, 21, 22, 23)
-
-
24. An apparatus that facilitates secure transmission of an email message to anonymous recipients without divulging the identities of the anonymous recipients, comprising:
-
a receiving mechanism that is configured to receive the email message at a recipient, wherein the email message includes, a message body that has been encrypted with a session key, a recipient block that contains an entry for each recipient of the email message, wherein each entry in the recipient block contains the session key encrypted with a public key associated with the recipient to form an encrypted session key, wherein each entry additionally contains an identifier for the associated public key, but different than the associated public key, wherein identifiers for public keys belonging to known recipients are statistically unique, and wherein identifiers for public keys belonging to anonymous recipients are not statistically unique;
a matching mechanism that is configured to attempt to match a candidate public key belonging to the recipient with key identifier in the recipient block;
a decryption mechanism, wherein if the candidate public key matches a key identifier, the decryption mechanism is configured to, decrypt the associated encrypted session key using a corresponding private key to restore the session key, decrypt the message body using the session key, and to examine a checksum in the message body to verify that message body was correctly decrypted. - View Dependent Claims (25, 26, 27)
-
Specification