Secure peer-to-peer messaging invitation architecture

• US 7,489,781 B2
• Filed: 10/29/2004
• Issued: 02/10/2009
• Est. Priority Date: 10/29/2004
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Fahmy, Samer, Klassen, Gerhard Dietrich, Yach, David
• Primary Examiner(s): TRAN, ELLEN C
• Application Number:
  US10/975,442
• Publication Number:
  US 20060101266A1
• Time in Patent Office: 1,565 Days
• Field of Search: 380/270, 380/273, 713/184
• US Class Current: 380/270
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1075 PIN is checked remotely
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption

Abstract

A system and methods providing immediate peer-to-peer messaging between mobile devices in a wireless system. An invitation architecture is disclosed which enables the exchange of personal identification numbers (PINs) without requiring a user to directly access or provide his or her PIN. A messaging application encrypts its associated PIN before providing it to a messaging application on another mobile device through an existing communication application. The invitation architecture automatically manages the encryption, any requisite key exchanges, the composition of invitation and acceptance messages, and the decryption and storage of PINs.

Claims

1. A method implemented by a mobile device in a system comprising said mobile device, a wireless network and a routing server coupled to the wireless network, the mobile device having a user interface and one or more communications applications and further having a messaging application, the mobile device having a first personal identification number, the method comprising:

receiving an invitation via one of the communications applications, the invitation including a question;

displaying the invitation including the question;

receiving through the user interface an answer in response to the question;

generating an encryption key using the answer;

encrypting the first personal identification number using said encryption key;

transmitting the encrypted first personal identification number in response to the received invitation;

receiving an encrypted second personal identification number in response to the transmitted first personal identification number; and

decrypting the encrypted second personal identification number,

whereby peer-to-peer messages are sent and received by the mobile device using said messaging application, and wherein each transmitted peer-to-peer message contains the second personal identification number,

each received peer-to-peer message contains the first personal identification number, and each peer-to-peer message is routed by the routing server based upon said personal identification numbers.

2. The method claimed in claim 1, wherein the step of transmitting the encrypted first personal identification number comprises transmitting an acceptance message containing the encrypted first personal identification number.

3. The method claimed in claim 1, wherein the step of receiving the encrypted second personal identification number further comprises receiving an acknowledgement message and wherein the acknowledgement message comprises the second personal identification number encrypted by the encryption key.

4. The method claimed in claim 1, wherein said one of the communication applications comprises an e-mail application.

5. The method claimed in claim 1, wherein the step of receiving comprises receiving the invitation from a first mobile device, the step of transmitting comprises transmitting the encrypted first personal identification number to the first mobile device, the step of receiving the encrypted second personal identification number comprises receiving the encrypted second personal identification number from the first mobile device.

6. A method implemented by a mobile device in a system comprising said mobile device, a wireless network and a routing server coupled to the wireless network, the mobile device having one or more communications applications and further having a messaging application, the mobile device having a first personal identification number, the method comprising:

sending an invitation via one of the communications applications, the invitation including a question, the question having an answer;

generating an encryption key using the answer;

encrypting the first personal identification number using said encryption key;

receiving an encrypted second personal identification number in response to the invitation;

decrypting the second encrypted personal identification number; and

transmitting the encrypted first personal identification number in response to receipt of the encrypted second personal identification number,

whereby peer-to-peer messages are sent and received by the first mobile device using said messaging applications, and wherein each transmitted peer-to-peer message contains the second personal identification number,

each received peer-to-peer message contains the first personal identification number, and each peer-to-peer message is routed by the routing server based upon said personal identification numbers.

7. A mobile device for use in a peer-to-peer messaging system comprising said mobile device, a wireless network, and a routing server coupled to the wireless network, the mobile device comprising:

a first memory storing a first personal identification number;

one or more communication applications;

a first encryption component configured to encrypt said first personal identification number and decrypt an encrypted second personal identification number using an encryption key;

a first contact management component configured to receive an invitation via one of said one or more communication applications, the invitation including a question, display the invitation including the question, receive an answer via a user interface in response to the question, transmit the encrypted first personal identification number in response to the invitation, and receive the encrypted second personal identification number in response to transmission of the encrypted first personal identification number; and

a first messaging application for sending and receiving peer-to-peer messages, whereby each transmitted peer-to-peer message includes the second personal identification number, each received peer-to-peer message includes the first personal identification number, and wherein said peer-to-peer messages are routed by the routing server based upon said personal identification numbers,

wherein the first encryption component is configured to generate the encryption key using the answer.

8. The mobile device claimed in claim 7, wherein the first contact management component is configured to send an acceptance message in response to the invitation, and the acceptance message comprises the encrypted second personal identification number.

9. The mobile device claimed in claim 7, wherein the first contact management component is configured to receive an acknowledgement message, and wherein the acknowledgement message comprises the encrypted second personal identification number.

10. The mobile device claimed in claim 7, wherein said one of the communication applications comprises an e-mail application.

11. A peer-to-peer messaging system, comprising the mobile device claimed in any claim 7 and another mobile device, the another mobile device comprising:

a second memory storing the second personal identification number,

one or more communication applications,

a second encryption component configured to encrypt said second personal identification number and decrypt the encrypted first personal identification number using the encryption key,

a second contact management component configured to send the invitation to the mobile device using said one of said communication applications, receive an acceptance from the mobile device indicating successful input of the answer, receive the encrypted first personal identification number from the mobile device, and transmit the encrypted second personal identification number to the mobile device,

a second messaging application for sending and receiving peer-to-peer messages,

and wherein the second encryption component is configured to generate the encryption key using the answer.