File encryption system and method

• US 8,380,983 B2
• Filed: 06/21/2010
• Issued: 02/19/2013
• Est. Priority Date: 10/22/2009
• Status: Expired due to Fees

• Current Assignee: Hon Hai Precision Industry Co., Ltd.
• Original Assignee: Hon Hai Precision Industry Co., Ltd.
• Inventors: Lee, Chung-I, Yeh, Chien-Fa, Jeng, Shan-Chuan
• Primary Examiner(s): Gee, Jason
• Application Number:
  US12/820,033
• Publication Number:
  US 20110099369A1
• Time in Patent Office: 974 Days
• Field of Search: 713/156, 380/281
• US Class Current: 713/156
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 69/04 Protocols for data compression, e.g. ROHC
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

An electronic document comparison system and method converts a test file into a compressed file having a specific format. A public key of the CA certificate of a user is obtained and a random key is generated using a random function. Furthermore, the compressed file is symmetrically encrypted using the random key, and the random key is asymmetrically encrypted using the public key to generate an asymmetric encryption key. A header of the compressed file is attached with the asymmetric encryption key and data length of the asymmetric encryption key.

Claims

1. A file encryption system, comprising:

a storage system storing a test file;

at least one processor; and

a file encryption unit being executable by the at least one processor, the file encryption unit comprising;

a receiving module to receive a login request of a user from a client computer to encrypt the test file;

a determination module to determine if a certificate authority (CA) certificate of the user obtained from a CA server is valid;

a conversion module to convert the test file into a compressed file having a specific format by a file encryption server, in response to a determination that the CA certificate of the user is valid;

an obtaining module to send a search request to the CA server to obtain a public key of the CA certificate of the user;

a generation module to generate a random key using a random function; and

an encryption module to symmetrically encrypt the compressed file using the random key, asymmetrically encrypt the random key using the public key to generate an asymmetric encryption key, and attach the asymmetric encryption key and data length of the asymmetric encryption key to a header of the compressed file.

2. The system of claim 1, wherein the CA certificate of the user comprises the public key, a serial number and identity information of the user.

3. The system of claim 1, wherein the encryption module symmetrically encrypts the compressed file with the random key using a data encryption standard (DES) or an advanced encryption standard (AES) algorithm.

4. The system of claim 1, wherein the encryption module asymmetrically encrypts the random key to generate the asymmetric encryption key with the public key using an RSA encryption algorithm.

5. A file encryption method implemented by a computerized device, the method comprising:

receiving a login request of a user to encrypt a test file;

determining if a certificate authority (CA) certificate of the user is valid;

converting the test file into a compressed file having a specific format in response to a determination that the CA certificate of the user is valid;

sending a search request to a CA server to obtain a public key of the CA certificate of the user;

generating a random key using a random function;

symmetrically encrypting the compressed file using the random key;

asymmetrically encrypting the random key using the public key to generate an asymmetric encryption key; and

attaching the asymmetric encryption key and data length of the asymmetric encryption key to a header of the compressed file.

6. The method of claim 5, wherein the CA certificate of the user comprises the public key, a serial number and identity information of the user.

7. The method of claim 5, wherein the compressed file is symmetrically encrypted with the random key using a data encryption standard (DES) or an advanced encryption standard (AES) algorithm.

8. The method of claim 5, wherein the random key is asymmetrically encrypted to generate the asymmetric encryption key with the public key using an RSA algorithm.

9. The method of claim 5, wherein the converting step further comprises:

dividing the test file into a plurality of sections in accordance with types of the sections, wherein the types of the sections include an image section and a text section;

compressing the image sections with an image compression algorithm;

compressing the text sections with a text compression algorithm; and

concatenating the image sections and the text sections to obtain the compressed file.

10. The method of claim 9, wherein the type of the sections is determined according to a number of color pixels contained in the section.

11. The method of claim 9, wherein the image compression algorithm is a DCT-based compression algorithm or a Wavelet-based compression algorithm.

12. The method of claim 9, wherein the text compression algorithm is a CCITT Group 3 or a CCITT Group 4.

13. A non-transitory computer-readable medium having stored thereon instructions that, when executed by a computing device, causing the computing device to perform a file encryption method, the method comprising:

receiving a login request of a user to encrypt a test file;

determining if a certificate authority (CA) certificate of the user is valid;

converting the test file into a compressed file having a specific format in response to a determination that the CA certificate of the user is valid;

sending a search request to a CA server to obtain a public key of the CA certificate of the user;

generating a random key using a random function;

symmetrically encrypting the compressed file using the random key;

asymmetrically encrypting the random key using the public key to generate an asymmetric encryption key; and

attaching the asymmetric encryption key and data length of the asymmetric encryption key to a header of the compressed file.

14. The non-transitory storage medium of claim 13, wherein the CA certificate of the user comprises the public key, a serial number and identity information of the user.

15. The non-transitory storage medium of claim 13, wherein the compressed file is symmetrically encrypted with the random key using a data encryption standard (DES) or an advanced encryption standard (AES) algorithm.

16. The non-transitory storage medium of claim 13, wherein the random key is asymmetrically encrypted to generate the asymmetric encryption key with the public key using an RSA encryption algorithm.

17. The non-transitory storage medium of claim 13, wherein the converting step further comprises:

dividing the test file into a plurality of sections in accordance with types of the sections, wherein the types of the sections include an image section and a text section;

compressing the image sections with an image compression algorithm;

compressing the text sections with a text compression algorithm; and

concatenating the image sections and the text sections to obtain the compressed file.

18. The non-transitory storage medium of claim 17, wherein the type of the sections is determined according to a number of color pixels contained in the section.

19. The non-transitory storage medium of claim 17, wherein the image compression algorithm is a DCT-based compression algorithm or a Wavelet-based compression algorithm.

20. The non-transitory storage medium of claim 17, wherein the text compression algorithm is a CCITT Group 3 or a CCITT Group 4.