Method and system for asymmetrically encrypting .ZIP files

• US 8,090,942 B2
• Filed: 09/17/2004
• Issued: 01/03/2012
• Est. Priority Date: 03/09/2001
• Status: Expired due to Term

• Current Assignee: PKWARE, Inc. (PKW Holdings, Inc.)
• Original Assignee: PKWARE, Inc. (PKW Holdings, Inc.)
• Inventors: Peterson, James C.
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US10/943,270
• Publication Number:
  US 20050081034A1
• Time in Patent Office: 2,664 Days
• Field of Search: None
• US Class Current: 713/165
• CPC Class Codes: G06F 16/1744 using compression, e.g. sparse files
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068

Abstract

The present invention provides a method of integrating existing strong encryption methods into the processing of a .ZIP file to provide a highly secure data container which provides flexibility in the use of symmetric and asymmetric encryption technology. The present invention adapts the well established .ZIP file format to support higher levels of security and multiple methods of data encryption and key management, thereby producing a highly secure and flexible digital container for electronically storing and transferring confidential data.

Claims

1. A .Zip file format data container stored on a computer, said data container including:

an encrypted data file,

wherein said encrypted data file has been encrypted by an application using symmetric encryption, wherein said symmetric encryption employs a symmetric key having one of a plurality of available bit lengths,

wherein said symmetric key is asymmetrically encrypted to form an encrypted symmetric key,

wherein said data container is constructed by an application in accordance with a .Zip file format,

wherein said data container includes a local record header for said encrypted data

wherein said encrypted symmetric key is placed in said data container,

wherein said data container includes a central directory record identifying the location of said encrypted data file inside said data container,

wherein said central directory record is used to access said encrypted data file in the process of decrypting said encrypted data file,

wherein said data container also includes a local decryption header, wherein said local decryption header includes an identification of the one of said plurality of available bit lengths that was used in said symmetric key to encrypt said symmetric key

wherein said local decryption header is separate from said central directory record.

2. The .Zip file format data container of claim 1 wherein said encrypted data has been compressed before encryption.

3. The .Zip file format data container of claim 2 wherein said encrypted data has been compressed before encryption using a Lempel-Ziv (LZ)-type data compression algorithm.

4. The .Zip file format data container of claim 2 wherein said encrypted data has been compressed before encryption using a Deflate-type data compression algorithm.

5. The .Zip file format data container of claim 2 wherein said encrypted data has been compressed before encryption using a Burrows-Wheeler Transform (BWT)-type data compression algorithm.

6. The .Zip file format data container of claim 1 wherein said encrypted data has not been compressed before encryption.

7. The .Zip file format data container of claim 1 wherein said asymmetric encryption employs a public key.

8. The .Zip file format data container of claim 1 wherein said asymmetric encryption employs a X.509 digital certificate.