Systems and methods using one time pads during the exchange of cryptographic material

• US 8,924,706 B2
• Filed: 11/07/2012
• Issued: 12/30/2014
• Est. Priority Date: 11/05/2010
• Status: Active Grant

• Current Assignee: Global Integrity, Inc.
• Original Assignee: Protected Mobility LLC
• Inventors: Marlow, William J., Cichielo, Robert, Sturniolo, Emil, Benware, Paul
• Primary Examiner(s): Lim, Krisna
• Application Number:
  US13/670,994
• Publication Number:
  US 20130283034A1
• Time in Patent Office: 783 Days
• US Class Current: 713/150
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Abstract

A solution that enables the exchange of information in a secure manner over an insecure text messaging infrastructure provides part of the exchange as cryptographic material to be used to secure subsequent communications. The exchange of the cryptographic material is protected from malicious and nefarious parties. Systems and methods for the exchange of cryptographic material enable the parties involved in the exchange to have confidence that the material received was communicated from the originating party. Once the cryptographic material is successfully exchanged between cooperating peers, it can be used by smartphones, tablets, feature phones, or special purpose machine to machine devices for private communications, such as command and control, location services, etc. over insecure voice or data communication paths, such as SMS.

Claims

1. A method of establishing and conducting secure short message communications between plural peer devices, comprising:

(a) transmitting cryptographic information to a peer device over an electronic connection;

(b) securely providing, to each of the plural peer devices, a one time pad using a communication that is out of band with respect to the electronic connection including not conveying the one time pad over the electronic connection but instead using a different communications path that prevents interception of the one time pad by eavesdroppers on the electronic connection, the one time pad comprising a one time passcode or passphrase for input into each of the plural peer devices;

(c) using the one time pad to authenticate the transmitted cryptographic information and/or as a seed to cipher the cryptographic information for transmission;

(d) generating a shared secret from the cryptographic information; and

(e) using the shared secret to securely protect short messages for exchange between the plural peer devices over the same or different electronic connection.

2. The method of claim 1 wherein the short messages comprise SMS messages.