Method and system for securing communication

• US 9,654,451 B2
• Filed: 06/29/2016
• Issued: 05/16/2017
• Est. Priority Date: 03/25/2009
• Status: Active Grant

• Current Assignee: PACid Technologies, LLC
• Original Assignee: PACid Technologies, LLC
• Inventors: Fielder, Guy
• Primary Examiner(s): SHAW, BRIAN F
• Application Number:
  US15/197,627
• Publication Number:
  US 20170048205A1
• Time in Patent Office: 321 Days
• Field of Search: 713168, 713169, 713171, 713181, 713189, 370338, 709204
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation

Abstract

A method for generating one or more secrets for use by members. The method includes sending a first request for connection with a second member, and sending a second request to connection with a third member. The method further includes receiving, by the first member from the second member, a second input after the first request is sent and after communication is initiated between the first member and the second member and receiving, by the first member from the third member, a third input after the second request is sent and after communication is initiated between the first member and the third member. The method further includes generating, using an n-bit generator executing on the first member, a message digest using a first input, the second input, and the third input, extracting a secret from the message digest, and storing the secret in a secrets repository on the first member.

Claims

1. A method, comprising:

determining whether an encrypted communication has been received at a first computer system;

if it is determined that an encrypted communication has been received at the first computer system, then;

identifying a first receiving encryption solution and obtaining algorithm selector bits and an encryption key from the first receiving encryption solution;

identifying an encryption algorithm corresponding to the algorithm selector bits by obtaining a numeric format of the algorithm selector bits, using the numeric format to identify a matching encryption algorithm identifier in an algorithm selector table, and selecting the encryption algorithm associated with the matching algorithm identifier;

decrypting the encrypted communication received at the first computer using the identified encryption algorithm and the encryption key to obtain a clear-text format of the received encrypted communication;

otherwise, if it is determined that an encrypted communication has not been received at the first computer system, then determining whether to send an encrypted communication;

if it is determined to send a communication,

identifying a sending encryption solution and obtaining algorithm selector bits and an encryption key from the sending encryption solution;

identifying an encryption algorithm corresponding to the algorithm selector bits by obtaining a numeric format of the algorithm selector bits and using the numeric format to identify a matching encryption algorithm identifier in an algorithm selector table, and selecting the encryption algorithm associated with the matching algorithm identifier;

encrypting the communication using the encryption algorithm and the encryption key to obtain the encrypted communication; and

sending the encrypted communication to a receiver;

upon decrypting the encrypted communication received at the first computer, or sending the encrypted communication to the receiver, or if it is determined not to send a communication, then determining whether to end a communication session;

if it is determined to end the communication session, then ending the communication session;

otherwise,

if it is determined not to end the communication session, then determining whether to update the encryption solutions;

if it is determined not to update the encryption solutions determining whether a new encrypted communication has been received at a first computer system, and, if so, repeating the method until ending the communication session, otherwise,

if it is determined to update the encryption solutions, generating new encryption solutions and then determining whether a new encrypted communication has been received at a first computer system, and, if so, repeating the method until ending the communication session.