System and method for securing an electronic communication

• US 8,495,359 B2
• Filed: 06/02/2010
• Issued: 07/23/2013
• Est. Priority Date: 06/22/2009
• Status: Active Grant

• Current Assignee: Uniloc 2017 LLC (SoftBank Group Corp.)
• Original Assignee: DeviceAuthority Inc. (f/k/a NetAuthority, Inc.) (Device Authority Ltd.)
• Inventors: Etchegoyen, Craig Stephen
• Primary Examiner(s): Rahman, Mahfuzur
• Application Number:
  US12/792,249
• Publication Number:
  US 20100325423A1
• Time in Patent Office: 1,147 Days
• Field of Search: 713/153, 713/155
• US Class Current: 713/153
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

A system for securing an electronic communication comprises a gateway server configured to receive and store a device identifier and a network address from a first computing device. The device identifier identifies the first computing device, and the network address is associated with the first computing device. Thereafter, the gateway server receives from a second computing device the network address of the first computing device and an encryption key request. The gateway server derives from the device identifier for the first computing device an encryption key and sends the encryption key to the second computing device. A communication from the second computing device to the first computing device may thereafter be secured using the encryption key. A related method of securing an electronic communication is also disclosed.

Claims

1. A system for securing an electronic communication, the system comprising:

a gateway server configured to;

receive and store a device identifier and a network address from a first computing device, wherein the device identifier is generated by the first computing device from a combination of user-configurable and non-user-configurable parameters of the first computing device and uniquely identifies the first computing device, and wherein the network address is associated with the first computing device;

receive from a second computing device the network address for the first computing device and an encryption key request;

derive an encryption key from the device identifier for the first computing device;

send the encryption key to the second computing device, and

confirm to the first computing device that the encryption key was requested by the second computing device and was sent to the second computing device.

2. The system of claim 1, wherein the gateway server is further configured to receive and store a second device identifier and a second network address from the second computing device.

3. The system of claim 1, wherein the network address comprises at least one of an email address, an Internet Protocol (IP) address, and a Media Access Control (MAC) address.

4. The system of claim 1, wherein the network address resolves to at least one of an IP address, a MAC address, and an e-mail address.

5. The system of claim 1, wherein the encryption key is a public encryption key.

6. A method of securing an electronic communication, the method comprising:

receiving and storing at a gateway server store a device identifier and a network address from a first computing device, wherein the device identifier is generated by the first computing device from a combination of user-configurable and non-user-configurable parameters of the first computing device and uniquely identifies the first computing device, and wherein the network address is associated with the first computing device;

receiving from a second computing device the network address for the first computing device and an encryption key request;

deriving from the device identifier an encryption key for the first computing device;

sending the encryption key to the second computing device; and

confirming to the first computing device that the encryption key was requested by the second computing device and was sent to the second computing device.

7. The method of claim 6, further comprising receiving and storing a second device identifier and a second network address from the second computing device.

8. The method of claim 6, further comprising confirming to the first computing device that the encryption key was sent to the second computing device.

9. The method of claim 6, wherein the network address comprises at least one of an email address, an Internet Protocol (IP) address, and a Media Access Control (MAC) address.

10. The method of claim 6, wherein the network address resolves to at least one of an IP address, a MAC address, and an email address.

11. A method of receiving a secured electronic communication, the method comprising:

providing from a recipient computing device to a gateway server a network address and a device identifier for the recipient computing device, the device identifier generated by the recipient computing device from a combination of user-configurable and non-user-configurable parameters of the recipient computing device and uniquely identifying the recipient computing device;

receiving at the recipient computing device the secured electronic communication, wherein the secured electronic communication is encrypted by a sending computing device with a first encryption key derived from the device identifier by the gateway server;

querying, by the recipient computing device, the gateway server for confirmation that the sending computing device requested the first encryption key;

generating at the recipient computing device a second encryption key from the device identifier; and

decrypting at the recipient computing device the secured electronic communication using the second encryption key.

12. The method of claim 11, further comprising the recipient computing device communicating with the gateway server that the gateway server provided the first encryption key to the sending computing device.

13. The method of claim 11, wherein the network address comprises at least one of an email address, an Internet Protocol (IP) address, and a Media Access Control (MAC) address.

14. The method of claim 11, wherein the network address resolves to at least one of an IP address, a MAC address, and an email address.

15. The method of claim 11, wherein the first encryption key is different from the second encryption key.