Secure peer-to-peer messaging invitation architecture

• US 8,380,990 B2
• Filed: 11/05/2010
• Issued: 02/19/2013
• Est. Priority Date: 10/29/2004
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Klassen, Gerhard Dietrich, Fahmy, Samer, Yach, David
• Primary Examiner(s): TRAN, ELLEN C
• Application Number:
  US12/940,721
• Publication Number:
  US 20110047383A1
• Time in Patent Office: 837 Days
• Field of Search: 713/153, 713/168, 713/171, 726/2, 726/5, 726/29, 380/209, 380/210, 380/270, 380/271, 380/272, 380/273, 715/733, 455/3.04, 340/825
• US Class Current: 713/168
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1075 PIN is checked remotely
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption

Abstract

First and second communication devices respectively have first and second personal identification numbers (PINs). The first communication device transmits to the second communication device a first encryption key, and receives from the second communication device the second PIN that has been encrypted by the second communication device using the first encryption key. The first communication device receives from the second communication device a second encryption key, decrypts the encrypted second PIN, and encrypts the first PIN using the second encryption key, and transmits the encrypted first PIN to the second communication device. The first communication device conducts, with the second communication, device a peer-to-peer messaging session by transmitting to the second communication device peer-to-peer messages that contain the second PIN and receiving from the second communication device peer-to-peer messages that contain the first PIN. Each message is routed by a routing server based on the respective first and second PINs.

Claims

1. A method relating to a first communication device having a first personal identification number and a second communication device having a second personal identification number different from the first personal identification number, the method comprising:

transmitting, by the first communication device to the second communication device, a first encryption key to enable the second communication device to encrypt the second personal identification number;

receiving, by the first communication device from the second communication device, the second personal identification number that has been encrypted by the second communication device using the first encryption key;

decrypting, by the first communication device, the encrypted second personal identification number;

receiving, by the first communication device from the second communication device, a second encryption key to enable the first communication device to encrypt the first personal identification number;

encrypting, by the first communication device, the first personal identification number using the second encryption key;

transmitting, by the first communication device to the second communication device, the encrypted first personal identification number; and

conducting, by the first communication device with the second communication device, a peer-to-peer messaging session by transmitting to the second communication device peer-to-peer messages that contain the second personal identification number and receiving from the second communication device peer-to-peer messages that contain the first personal identification number, each peer-to-peer message being routed by a routing server based on the respective first and second personal identification numbers.

2. The method of claim 1 wherein the first encryption key is a first public encryption key, and the encrypted second personal identification number is decrypted by the first communication device using a first private decryption key that corresponds to the first public decryption key.

3. The method of claim 1 wherein the second encryption key is a second public encryption key.

4. The method of claim 1 wherein the encrypted second personal identification number and the second encryption key are received in a single communication from the second communication device.

5. The method of claim 1 wherein the first encryption key is transmitted with an invitation message to establish a peer-to-peer messaging session.

6. The method of claim 1 further comprising:

receiving an invitation from the second communication device to establish a peer-to-peer messaging session; and

displaying, by the first communication device, the invitation along with an accept option and a reject option relating to the invitation.

7. The method of claim 1 wherein the first communication device is a mobile communication device.

8. The method of claim 1 further comprising:

receiving, by the second communication device, the first encryption key;

encrypting, by the second communication device, the second personal identification number using the first encryption key; and

transmitting, by the second communication device to the first communication device, the encrypted second personal identification number.

9. The method of claim 1 further comprising:

transmitting, by the second communication device to the first communication device, the second encryption key.

10. A first mobile communication device having a first personal identification number and configured to communicate with a second communication device having a second personal identification number different from the first personal identification number, the first communication device comprising:

a processor;

a memory; and

a messaging application that is stored in the memory and executable by the processor to;

transmit, to the second communication device, a first encryption key to enable the second communication device to encrypt the second personal identification number;

receive, from the second communication device, the second personal identification number that has been encrypted by the second communication device using the first encryption key;

decrypt the encrypted second personal identification number;

receive, from the second communication device, a second encryption key to enable the first mobile communication device to encrypt the first personal identification number;

encrypt the first personal identification number using the second encryption key;

transmit, to the second communication device, the encrypted first personal identification number; and

conduct a peer-to-peer messaging session with the second communication device, by transmitting to the second communication device peer-to-peer messages that contain the second personal identification number and receiving from the second communication device peer-to-peer messages that contain the first personal identification number.

11. The first mobile communication device of claim 10 further comprising:

a display for displaying, by the first communication device, an invitation, from the second communication device to establish a peer-to-peer communication session, along with an accept option and a reject option relating to the invitation.

12. The first mobile communication device of claim 10, wherein the first encryption key is a first public encryption key, and the encrypted second personal identification number is decrypted by the first mobile communication device using a first private decryption key that corresponds to the first public decryption key.

13. The first mobile communication device of claim 10 wherein the second encryption key is a second public encryption key.

14. The first mobile communication device of claim 10 wherein the encrypted second personal identification number and the second encryption key are received in a single communication from the second communication device.

15. The first mobile communication device of claim 10 wherein the first encryption key is transmitted with an invitation message to establish a peer-to-peer messaging session.

16. The first mobile communication device of claim 10 wherein the first communication device is a mobile communication device.