Secure customer communication method and system

• US 7,562,052 B2
• Filed: 06/07/2004
• Issued: 07/14/2009
• Est. Priority Date: 06/07/2004
• Status: Active Grant

• Current Assignee: Alvaria Cayman
• Original Assignee: Firstpoint Contact Technologies, LLC (Alvaria Incorporated)
• Inventors: Dezonno, Tony
• Primary Examiner(s): Trammell; James P
• Assistant Examiner(s): Badii; Behrang
• Application Number:
  US10/862,286
• Publication Number:
  US 20050273443A1
• Time in Patent Office: 1,863 Days
• Field of Search: 380/30, 380/255, 380/150, 705/75, 713/168, 713/153, 709/203, 709/245, 709/236
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 30/00 Commerce

Abstract

The method for creating communication encryption keys for use over a communications channel comprises the steps of: selecting a code number for a user or web browser; selecting the two highest prime numbers, excluding 1 and the code number itself, in the code number; determining if each of these prime numbers is greater than the square root of the code number; and, if so, establishing with a web server two communication encryption keys equal to the two highest prime numbers.

Claims

1. A system for adding customer encoding on an established communications channel between a user having user name and a customer account code and a web server having the customer account code stored therein when the security of the communications channel is determined to be breached or compromised comprising;

communication equipment for establishing a first encoding system using a first encryption method between the user and the web server to establish an ongoing encrypted communication on the communications channel;

said communication equipment being operable for establishing communication keys for a second encryption method using an encryption algorithm different than the first encryption method, including the use of at least one of the customer user name and the customer account code,

said communication equipment being capable of determining if the security of the first encoding system on the communications channel has been compromised or breached;

said communication equipment being capable of communicating an indication from the user that the user wishes to continue communicating with additional encoding using the second encryption method on the communications channel notwithstanding the breach or compromise;

said communication equipment being capable of communicating to the user and web server that additional customer encoding using the second encryption method is to be used in further communications on the communication channel;

said communication equipment then prompting the user to present the user name and then prompting the user for the customer account code;

said communication equipment then storing the customer account code on the user'"'"'s machine followed by creating the communication keys by selecting two highest prime numbers from one of the customer account code number and the user name as a code number, excluding the code number itself and 1, and by making the communication keys equal to the two highest prime numbers but substituting a number equal to the code number ±

n where the two highest prime numbers cannot be obtained from the code number or when one of the two prime numbers is less than the square root of the code number; and

,

said communication equipment continuing transfer of customer encoded messages using the communication keys and the second encryption method on the established communications channel until the ongoing encrypted communication is completed.

2. The system of claim 1, wherein the communication equipment prompts the user to provide an indication of whether the user wishes to continue the communication with the second encryption method in response to a determination that a compromise or breach has occurred.

3. The system of claim 1, wherein the first encoding system is HTTPS encryption.

4. The system of claim 1, wherein the second encryption method is selected from one of RSA, PGP, or DES algorithms.

5. The system of claim 1, wherein the account code number is a user'"'"'s telephone number, except where two prime numbers in excess of the code number and the number 1 cannot be obtained from the code number.

6. The system of claim 5 wherein the two prime numbers each must be greater than the square root of the telephone number.