Secure file transfer system

• US 6,978,378 B1
• Filed: 05/11/2001
• Issued: 12/20/2005
• Est. Priority Date: 05/12/2000
• Status: Active Grant

• Current Assignee: BlueTie, Inc.
• Original Assignee: BlueTie, Inc.
• Inventors: Koretz, David A.
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US09/853,538
• Time in Patent Office: 1,684 Days
• Field of Search: 713/193, 713/200, 713/201
• US Class Current: 713/193
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 3/0481 based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

A secure file transfer system which, in its preferred embodiments, uses a Java applet sent to a client computer from a server computer to double encrypt files sent from the client computer to the server computer. Once a file is sent to the server, the system notifies a recipient that a secure document awaits pickup. The system preferably uses a public shared key agreement scheme for one method of encryption and an elliptical encryption scheme for the other. The applet comes to the client computer with a shared secret key for the public key scheme and all parameters required for the elliptical encryption scheme. Upon receiving a request for secure transfer, the server sends the applet with the encryption parameters to the client machine, which must be running a client-side application or a Java-enabled browser. The applet prompts the user for the file to be transferred and encrypts the file with the elliptical encryption method. The applet then sends the encrypted file to the server in blocks, encrypting each block with the public key scheme as it is sent. The system decrypts the blocks and reassembles them into the encrypted file and then notifies the recipient of the file'"'"'s presence.

Claims

1. A secure file transfer system hosted on a server computer connected to a computer network and accessible by users via client computers connected to the computer network and running a hypertext viewer, the system comprising:

a request page including a request submission object operable by a user at one of the client computers visiting the request page;

a destination specification page including a destination specification tool with which the user at the one of the client computers specifies a destination to another one of the client computers of the secure file transfer, the destination specification page further including a transfer initiation object operable by the user at the one of the client computers to initiate transmission of the document;

a client side application sent to the one of the client computers from the server computer upon operation by the user at the one of the client computers of the transfer initiation object, the client side application comprising;

a file picker prompting the user at the one of the client computers to select a file for transfer to the destination at the another one of the client computers, and then breaking the selected file into one or more blocks;

a key generator that generates a shared secret key and shares the key with the system on the server computer; and

an encrypter that individually encrypts each of the one or more blocks and then individually sends each of the one or more blocks to the server computer; and

a notifier at the server computer that notifies a recipient user at the destination at the another one of the client computers that the file awaits pickup on the server computer.

2. The system of claim 1 wherein the hypertext viewer is a web browser.

3. The system of claim 2 wherein the parameters for the elliptical encryption method include q, a, b, r, and G.

4. The system of claim 1 wherein the client-side application is a java applet.

5. The system of claim 1 wherein the first encryption method is an elliptical encryption method.

6. The system of claim 5 wherein the second encryption method is the Mendez-Qu-Vanstone public key agreement scheme with cofactor multiplication.

7. The system of claim 1 wherein the second encryption method is a public key agreement scheme.

8. The system of claim 7 wherein the manager displays a list of secure documents awaiting pickup.

9. The system of claim 1 further including a secure document manager that displays statistics relating to a user'"'"'s usage of the system.

10. The system of claim 9 wherein the e-mail message includes a hypertext link to the secure document awaiting pickup.

11. The system of claim 1 wherein the notifier sends an e-mail message to the recipient.

12. The system as set forth in claim 1 wherein the client side application at the one of the client computers breaks the selected file into two or more blocks before the encryption and transmission of each of the blocks.

13. A secure file transfer system hosted on a server computer connected to a computer network and accessible by users via client computers connected to the computer network and running a desktop software application, the system comprising:

a request page including a request submission object operable by a user at one of the client computers visiting the request page;

a destination specification page including a destination specification tool with which the user at the one of the client computers specifies a destination to another one of the client computers of the secure file transfer, the destination specification page further including a transfer initiation object operable by the user at the one of the client computers to initiate transmission of the document;

a desktop software application sent to the one of client computers upon operation by the user at the one of the client computers of the transfer initiation object, the desktop software application comprising;

a file picker prompting the user at the one of the client computers to select a file for transfer to the destination at the another one of the client computers, and then breaking the selected file into one or more blocks

a key generator that generates a shared secret key and shares the key with the system on the server computer; and

an encrypter that individually encrypts each of the one or more blocks and individually then sends each of the one or more blocks to the server computer; and

a notifier that notifies a recipient user at the destination at the another one of the client computers that the file awaits pickup on the server computer.

14. The system of claim 13 wherein the desktop software application is a Windows based software application.

15. The system of claim 13 wherein the first encryption method is an elliptical encryption method.

16. The system of claim 15 wherein the parameters for the elliptical encryption method include q, a, b, r, and G.

17. The system of claim 13 wherein the second encryption method is a public key agreement scheme.

18. The system of claim 17 wherein the second encryption method is the Mendez-Qu-Vanstone public key agreement scheme with cofactor multiplication.

19. The system of claim 13 further including a secure document manager that displays statistics relating to a user'"'"'s usage of the system.

20. The system of claim 19 wherein the manager displays a list of secure documents awaiting pickup.

21. The system of claim 13 wherein the notifier sends an e-mail message to the recipient.

22. The system of claim 21 wherein the e-mail message includes a hypertext link to the secure document awaiting pickup.

23. The system as set forth in claim 13 wherein the desktop software application at the one of the client computers breaks the selected file into two or more blocks before the encryption and transmission of each of the blocks.

24. A secure file transfer method executed as a software application on a server computer connected to a computer network and accessible by users via client computers connected to the computer network and running a web browser, the method including the steps of:

receiving a request from a user for secure file transfer;

sending an Java applet to the client computer with parameters for first and second methods of encryption, the first method of encryption not requiring additional information from either side of the transfer and a shared secret key for the second method of encryption being sent in encrypted form;

receiving and decrypting with the Java applet the shared secret key for the second of encryption;

encrypting a file to be transferred with the Java applet by applying the first method of encryption;

breaking the file into blocks with the Java applet;

encrypting each block with the Java applet by applying the second method of encryption and sending the block to the server with the Java applet;

decrypting the encrypted file blocks and assembling into a decrypted file with the shared secret key as they arrive at a recipient computer;

storing the encrypted file on a mass storage device; and

notifying a recipient at a destination of the file that the file 30 awaits pickup on the server computer.

25. The method of claim 24 wherein the step of applying the first method of encryption includes the substep of applying an elliptical encryption method.

26. The method of claim 24 wherein the step of applying the second method of encryption includes applying the Mendez-Qu-Vanstone public key agreement scheme with cofactor multiplication.

27. The method of claim 24 wherein the step of notifying includes sending an e-mail message to the recipient.

28. The method of claim 27 wherein the e-mail message includes a hypertext link to the file.

29. The method of claim 24 further including the step of displaying user usage statistics.

30. The method of claim 24 further including the step of providing a transfer request page from which the user requests the file transfer.

31. The method of claim 30 wherein the step of providing a transfer request page includes providing a document forwarding request.

32. A secure file transfer system hosted on a main server computer connected to a computer network and accessible by users via client computers connected to the computer network, the system comprising:

a file picker with which a sending user at one of the client computers specifies a file to be transferred to a recipient;

a file encrypter in communication with the file picker that encrypts the specified file at one of the client computers to produce an encrypted file;

a file sender that transfers the encrypted file to an encrypted file storage location at the server computer with a selected destination for the encrypted file to another one of the client computers which was selected by the sending user at the one of the client computers; and

a notifier that alerts a recipient of the file at the another one of the client computers that the encrypted file awaits pickup.

33. The system of claim 32 wherein the file resides on a mass storage device on a storage server computer connected to the computer network.

34. The system of claim 33 wherein the storage server is closely associated with the main server and provides online remote storage for the sending user.

35. The system of claim 33 wherein the file picker presents the sending user with a list of files present on the storage server and accessible to the sending user.

36. The system of claim 32 wherein the storage server is closely associated with the sending user'"'"'s computer and the file picker is part of a Java applet sent to the sending user'"'"'s computer by the system, the file picker including a user interface tying into the sending user computer'"'"'s operating system so that the user can browse storage devices closely associated with the sending user'"'"'s computer.

37. The system of claim 36 wherein the storage server is a storage device that is physically part of the sending user'"'"'s computer.

38. The system of claim 36 wherein the storage server is a volume directly accessible by the sending user'"'"'s computer but inaccessible to the main server without the sending user'"'"'s use of the file picker.

39. The system of claim 32 wherein the encrypter is a client-side routine that is part of a Java applet sent to the sending user'"'"'s computer by the system, the encrypter including essential parameters for encryption.

40. The system of claim 39 wherein the encrypter uses elliptical encryption.

41. The system of claim 32 wherein the file sender breaks the file into blocks before the encryption and sends the encrypted blocks to the storage location.

42. The system of claim 41 wherein the file sender interacts with the file encrypter so that the file encrypter encrypts each block of the encrypted file as the file sender sends the block to the storage location.

43. The system of claim 41 further including a block decrypter between the file sender and the storage location that decrypts each block of the encrypted file as it receives the blocks from file sender.

44. The system of claim 41 further including an assembler between the file sender and the storage location that reassembles the blocks into the encrypted file.