Secure peer-to-peer messaging invitation architecture

• US 7,849,313 B2
• Filed: 12/23/2008
• Issued: 12/07/2010
• Est. Priority Date: 10/29/2004
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Fahmy, Samer, Klassen, Gerhard Dietrich, Yach, David
• Primary Examiner(s): Tran; Ellen
• Application Number:
  US12/342,291
• Publication Number:
  US 20090164784A1
• Time in Patent Office: 714 Days
• Field of Search: 726/2, 726/5, 713/168, 713/184, 380/270, 380/273
• US Class Current: 713/168
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1075 PIN is checked remotely
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption

Abstract

A system and methods providing immediate peer-to-peer messaging between mobile devices in a wireless system. An invitation architecture is disclosed which enables the exchange of personal identification numbers (PINs) without requiring a user to directly access or provide his or her PIN. A messaging application encrypts its associated PIN before providing it to a messaging application on another mobile device through an existing communication application. An invitation process for exchanging encrypted PINs involves receiving an invitation containing a question, obtaining user input of an answer, and transmitting the answer back to the sender with an encrypted PIN. The sender confirms the received answer is correct and replies with its encrypted PIN.

Claims

1. A method implemented by a mobile device in a system comprising said mobile device, a wireless network and a routing server coupled to the wireless network, the mobile device having a user interface and a plurality of communications applications and further having a messaging application, the mobile device having a first personal identification number, the method comprising:

receiving an invitation via one of the communications applications, the invitation including a question;

displaying the question;

receiving through the user interface a received answer in response to the question;

encrypting the first personal identification number;

transmitting the received answer and the encrypted first personal identification number in response to the received invitation;

receiving an encrypted second personal identification number in response to the transmitted received answer and first personal identification number;

generating an encryption key using the received answer; and

decrypting the encrypted second personal identification number using said encryption key,

whereby peer-to-peer messages are sent and received by the mobile device using said messaging application, and wherein each transmitted peer-to-peer message contains the second personal identification number, each received peer-to-peer message contains the first personal identification number, and each peer-to-peer message is routed by the routing server based upon said personal identification numbers.

2. The method claimed in claim 1, wherein the step of transmitting the received answer and the encrypted first personal identification number comprises transmitting an acceptance message containing the received answer and the encrypted first personal identification number.

3. The method claimed in claim 1, wherein said one of the communication applications comprises an e-mail application.

4. The method claimed in claim 1, wherein the step of receiving comprises receiving the invitation from a second mobile device, the step of transmitting comprises transmitting the encrypted first personal identification number to the second mobile device, the step of receiving the encrypted second personal identification number comprises receiving the encrypted second personal identification number from the second mobile device.

5. The method claimed in claim 1, wherein the step of displaying the question includes displaying an accept option and a reject option with regard to the invitation, and wherein receiving through the user interface a received answer includes receiving selection of the accept option.

6. A method implemented by a mobile device in a system comprising said mobile device, a wireless network and a routing server coupled to the wireless network, the mobile device having one or more communications applications and further having a messaging application, the mobile device having a first personal identification number, the method comprising:

sending an invitation via one of the communications applications, the invitation including a question, the question having a stored answer;

generating an encryption key using the stored answer;

encrypting the first personal identification number using said encryption key;

receiving a received answer and an encrypted second personal identification number in response to the invitation;

confirming that the received answer matches the stored answer;

decrypting the second encrypted personal identification number; and

transmitting the encrypted first personal identification number in response to receipt of the encrypted second personal identification number,

whereby peer-to-peer messages are sent and received by the mobile device using said messaging application, and wherein each transmitted peer-to-peer message contains the second personal identification number, each received peer-to-peer message contains the first personal identification number, and each peer-to-peer message is routed by the routing server based upon said personal identification numbers.

7. A mobile device for use in a peer-to-peer messaging system comprising said mobile device, a wireless network, and a routing server coupled to the wireless network, the mobile device comprising:

a first memory storing a first personal identification number;

one or more communication applications;

a first encryption component configured to encrypt said first personal identification number and decrypt an encrypted second personal identification number;

a first contact management component configured to receive an invitation via one of said one or more communication applications, the invitation including a question, display the invitation including the question, receive a received answer via a user interface in response to the question, transmit the received answer and the encrypted first personal identification number in response to the invitation, and receive the encrypted second personal identification number in response to transmission of the encrypted received answer and first personal identification number; and

a first messaging application for sending and receiving peer-to-peer messages, whereby each transmitted peer-to-peer message includes the second personal identification number, each received peer-to-peer message includes the first personal identification number, and wherein said peer-to-peer messages are routed by the routing server based upon said personal identification numbers,

wherein said first encryption component generates an encryption key using the received answer and decrypts said second personal identification number using said encryption key.

8. The mobile device claimed in claim 7, wherein the first contact management component is configured to send an acceptance message in response to the invitation, and the acceptance message comprises the received answer and the encrypted second personal identification number.

9. The mobile device claimed in claim 7, wherein the first contact management component is configured to receive an acknowledgement message, and wherein the acknowledgement message comprises the encrypted second personal identification number.

10. The mobile device claimed in claim 7, wherein said one of the communication applications comprises an e-mail application.

11. A peer-to-peer messaging system, comprising two mobile devices including a first mobile device and a second mobile device, the second mobile device comprising:

a second memory storing a second personal identification number and a stored answer,

one or more communication applications,

a second encryption component configured to generate an encryption key using said stored answer, encrypt said second personal identification number using said encryption key and decrypt an encrypted first personal identification number,

a second contact management component configured to send an invitation to the first mobile device using said one of said communication applications, receive an acceptance from said first mobile device containing a received answer, receive the encrypted first personal identification number from the first mobile device, confirm that the received answer matches said stored answer, and transmit the encrypted second personal identification number to the first mobile device,

a second messaging application for sending and receiving peer-to-peer messages.