Methods and systems for encouraging secure communications

• US 8,261,061 B2
• Filed: 10/15/2008
• Issued: 09/04/2012
• Est. Priority Date: 10/15/2007
• Status: Expired due to Fees

• Current Assignee: Penango, Inc.
• Original Assignee: Penango, Inc.
• Inventors: Leonard, Sean Joseph
• Primary Examiner(s): Lim, Krisna
• Application Number:
  US12/252,335
• Publication Number:
  US 20090100263A1
• Time in Patent Office: 1,420 Days
• Field of Search: 713/155, 713/170, 713/173, 713/175, 380/277, 380/284, 380/285
• US Class Current: 713/155
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/08 Annexed information, e.g. attachments
• CPC Class Codes: H04L 51/216 Handling conversation history, e.g. grouping of messages in sessions or threads
• CPC Class Codes: H04L 51/56 Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Embodiments of the present invention enable a user to engage in secure communications using digital certificates and other cryptographic technologies in an easy way with a minimum of distracting interaction. In some embodiments of the present invention, webmail is enabled to allow users to obtain and use S/MIME certificates to secure his or her e-mails. Embodiments of the present invention can also be implemented to other forms of messaging, such as text messages, instant messages, etc.

Claims

1. A method of securing communications, said method comprising:

accessing a messaging service;

extracting, using at least one computer processor, identification information that identifies a user of the service;

receiving a single user interface input from the user;

obtaining a key pair comprising a public key and a private key, and submitting a request for a certificate to a certificate authority (CA) based on the key pair, wherein the key pair is obtained and the request for the certificate is submitted in response to the single user interface input without requiring further user interface inputs from the user;

receiving a verification code from the CA;

confirming, using the at least one processor, receipt of the verification code from said CA;

generating, using the at least one processor, a certificate for the user based on the verification code and the key pair; and

securing communications from the user based on the generated certificate.

2. The method of claim 1, further comprising detecting a preexisting certificate and a preexisting private key, wherein the preexisting certificate and the preexisting private key are detected in response to the single user interface input without requiring further user interface inputs from the user.

3. The method of claim 1, wherein receiving the verification code is received from the CA is conducted subsequent to receiving the single user interface input from the user.

4. The method of claim 1, wherein confirming receipt of the verification code comprises automatically following a link to a website designated by the CA.

5. The method of claim 1, wherein the certificate for the user is generated subsequent to receiving the single user interface input from the user.

6. The method of claim 1, wherein confirming receipt of the verification code from said CA comprises monitoring messages received having information related to the request for the certificate.

7. The method of claim 1, further comprising presenting an interface to a user for an opportunity to confirm the verification code.

8. An apparatus configured to provide secured communications, the apparatus comprising:

at least one computer processor; and

a computer readable storage medium comprising executable instructions configured to cause the at least one computer processor to perform operations comprising;

accessing a messaging service;

extracting, using at least one computer processor, identification information that identifies a user of the service;

receiving a single user interface input from the user;

obtaining a key pair comprising a public key and a private key, and submitting a request for a certificate to a certificate authority (CA) based on the key pair, wherein the key pair is obtained and the request for the certificate is submitted in response to the single user interface input without requiring further user interface inputs from the user;

receiving a verification code from the CA;

confirming, using the at least one processor, receipt of the verification code from said CA;

generating, using the at least one processor, a certificate for the user based on the verification code and the key pair; and

securing communications from the user based on the generated certificate.

9. A non-transitory computer readable medium comprising executable program instructions that, when executed on one or more computer processors, cause the one or more computer processors to perform operations comprising:

accessing a messaging service;

extracting identification information that identifies a user of the service;

receiving a single user interface input from the user;

obtaining a key pair comprising a public key and a private key, and submitting a request for a certificate to a certificate authority (CA) based on the key pair, wherein the key pair is obtained and the request for the certificate is submitted in response to the single user interface input without requiring further user interface inputs from the user;

receiving a verification code from the CA;

confirming receipt of the verification code from said CA;

generating a certificate for the user based on the verification code and the key pair; and

securing communications from the user based on the generated certificate.