Method and system for generating a secure message as a URL message

• US 8,898,471 B2
• Filed: 11/13/2012
• Issued: 11/25/2014
• Est. Priority Date: 11/13/2012
• Status: Active Grant

• Current Assignee: Unsene Incorporated
• Original Assignee: Unsene Incorporated
• Inventors: Kitze, Christopher A., Vo, Vinh H.
• Primary Examiner(s): LANIER, BENJAMIN E
• Application Number:
  US13/675,360
• Publication Number:
  US 20140136846A1
• Time in Patent Office: 742 Days
• Field of Search: None
• US Class Current: 713/171
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0414 during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/563 Data redirection of data network streams

Abstract

A method for generating and delivering a message via a web service is provided. A message for a recipient is converted to a URL and sent. A request is received from a sender to send a message to a recipient. A URL message is created in response to receiving the request to send the message to the recipient and the URL message is sent to the recipient. A URL message response is received from the recipient and a landing message is sent to the recipient in response to receiving the URL message response. The landing message includes a hint requesting an answer from the recipient. An answer is received from the recipient and the message is displayed to the recipient in response to receiving the answer.

Claims

1. A computer implemented method comprising:

establishing, at a sender'"'"'s computing device, a secure tunnel with device associated with an intended recipient;

receiving, at the sender'"'"'s device, a request from a sender to send a secure message to the intended recipient;

in response to receiving the request to send the secure message, generating a private security for encrypting and decrypting the secure message;

receiving contents for the secure message;

generating and encrypting the secure message after generating the private security key;

storing the private security key and the encrypted secure message;

creating, at the sender'"'"'s computing device, a URL message in response to receiving the request to send the secure message to the intended recipient;

sending, from the sender'"'"'s computing device, device the URL message to the intended recipient;

receiving, at the sender'"'"'s computing device, a URL message response from the intended recipient;

providing, from the sender'"'"'s computing device, a landing message to the intended recipient in response to receiving the URL message response, the landing message including a hint requesting an answer from the intended recipient;

receiving, at the sender'"'"'s computing device, the answer from the intended recipient;

decrypting, at the sender'"'"'s computing device, the secure message; and

providing, at the sender'"'"'s computing device, for display at the intended recipient, the decrypted secure message to the intended recipient via the secure tunnel, wherein the computing device and the device associated with the intended recipient each include first and second types of security and the secure message is sent using both the first type of security and the second type of security.

2. The computer implemented method of claim 1, wherein the hint relates to a publicly unavailable fact known between the sender and the intended recipient.

3. The computer implemented method of claim 2, wherein the answer is a passcode for the private security key.

4. The computer implemented method of claim 1, wherein the method further comprises:

accessing the private security key based on the answer; and

decrypting the secure message using the private security key.

5. The computer implemented method of claim 1, wherein the URL message includes:

a URL that redirects the intended recipient to the sender'"'"'s computing device storing the private security key and the secure message when the intended recipient engages the URL.

6. The computer implemented method of claim 5, wherein the URL message response is received from the intended recipient when the intended recipient engages the URL that redirects the intended recipient to the sender'"'"'s computing device.

7. The computer implemented method of claim 1, wherein the secure tunnel is established using a security protocol in accordance with the Secure Socket Layer (SSL) protocol.

8. The computer implemented method of claim 1, wherein the secure tunnel is established using a security protocol in accordance with the Transport Layer Security (TLS) protocol.

9. A non-transitory computer readable medium storing software for instructing a controller of a sender'"'"'s computing device to:

establish a secure tunnel with a device associated with an intended recipient;

receive a request from a sender to send a secure message to the intended recipient;

in response to receiving the request to send the secure message, generate a private security key for encrypting and decrypting the secure message;

receive contents for the secure message;

generate and encrypt the secure message after generating the private security key;

store the private security key and the encrypted secure message;

create a URL message in response to receiving the request to send the secure message to the intended recipient;

send the URL message to the intended recipient;

receive a URL message response from the intended recipient;

provide a landing message to the intended recipient in response to receiving the URL message response, the landing message including a hint requesting an answer from the intended recipient;

receive the answer from the intended recipient; and

decrypt the secure message; and

display the decrypted secure message to the intended recipient via the secure tunnel, wherein the computing device and the device associated with the intended recipient each include first and second types of security and the secure message is sent using both the first type of security and the second type of security.

10. The non-transitory computer readable medium of claim 9, wherein the hint relates to a publicly unavailable fact known between the sender and the intended recipient.

11. The non-transitory computer readable medium of claim 9, wherein the answer is a passcode for the private security key.

12. The non-transitory computer readable medium of claim 9, wherein the software further instructs the controller of the sender'"'"'s computing device to:

access the private security key based on the answer; and

decrypt the secure message using the private security key.

13. The non-transitory computer readable medium of claim 9, wherein the URL message includes:

a URL that redirects the intended recipient to the sender'"'"'s computing device storing the private security key and the secure message when the intended recipient engages the URL.

14. The non-transitory computer readable medium of claim 13, wherein the URL message response is received from the intended recipient when the intended recipient engages the URL that redirects the intended recipient to the sender'"'"'s computing device.

15. The non-transitory computer readable medium of claim 9, wherein the secure tunnel is established using a security protocol in accordance with the Secure Socket Layer (SSL) protocol.

16. The non-transitory computer readable medium of claim 9, wherein the secure tunnel is established using a security protocol in accordance with the Transport Layer Security (TLS) protocol.

17. A non-transitory computer readable medium storing software for instructing a controller of a sender'"'"'s computing device to:

establish a secure tunnel with a device associated with an intended recipient;

receive a request from a sender to send a secure message to the intended recipient;

in response to receiving the request to send the secure message, generate a private security key for encrypting and decrypting the secure message;

receive contents for the secure message;

generate and encrypt the secure message after generating the private security key;

store the private security key and the encrypted secure message;

create a URL message in response to receiving the request to send the secure message to the intended recipient;

send the URL message to the intended recipient;

receive a URL message response from the intended recipient;

provide a landing message to the intended recipient in response to receiving the URL message response, the landing message including a hint requesting an answer from the intended recipient;

receive the answer from the intended recipient, the answer corresponding to a passcode for the private security key;

access the private security key using the passcode;

decrypt the secure message using the private security key; and

display the decrypted secure message to the intended user via the secure tunnel, wherein the computing device and the device associated with the intended recipient each include first and second types of security and the secure message is sent using both the first type of security and the second type of security.

18. The non-transitory computer readable medium of claim 17, wherein the hint relates to a publicly unavailable fact known between the sender and the intended recipient.

19. The non-transitory computer readable medium of claim 17, wherein the URL message includes:

a URL that redirects the intended recipient to the sender'"'"'s computing device storing the private security key and the secure message when the intended recipient engages the URL.

20. The non-transitory computer readable medium of claim 19, wherein the URL message response is received from the intended recipient when the intended recipient engages the URL that redirects the intended recipient to the sender'"'"'s computing device.

21. The non-transitory computer readable medium of claim 17, wherein the secure tunnel is established using a security protocol in accordance with the Secure Socket Layer (SSL) protocol.

22. The non-transitory computer readable medium of claim 17, wherein the secure tunnel is established using a security protocol in accordance with the Transport Layer Security (TLS) protocol.