Encrypted universal resource identifier (URI) based messaging

• US 9,686,243 B1
• Filed: 09/26/2013
• Issued: 06/20/2017
• Est. Priority Date: 09/24/2010
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Moscaritolo, Vincent E., Cokenias, Damon
• Primary Examiner(s): ZAND, DAVOUD AMAN
• Application Number:
  US14/038,552
• Time in Patent Office: 1,363 Days
• Field of Search: 726 27, 713162, 713150, 713189, 713190
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/563 Data redirection of data network streams

Abstract

A method and apparatus for encrypted universal resource identifier (URI) based messaging is described. In one embodiment of the method, a server computing system receives an encrypted message from a first client computing system over a network, decrypts the encrypted message, stores the decrypted message in a message data store, and generates a shortened uniform resource locator (URL) for subsequent retrieval of the stored message. The server computing system sends the shortened URL to the first client computing system. Subsequently, the server computing system receives from a requesting computing system, a request, including the shortened URL, to retrieve the stored message, encrypts the stored message in a uniform resource identifier (URI) with an encryption type URI, and sends the encrypted URI to the requesting computing system.

Claims

1. A method comprising:

receiving, at a server computing system, an encrypted message from a first client computing system over a network, the encrypted message including content of a message wrapped in ASCII armor;

decrypting, by the server computing system, the encrypted message to obtain the content of the message corresponding to the encrypted message;

encoding, by the server computing system, the content of the message by hashing the content, to generate an encoded message;

storing the encoded message in a data store;

creating, by the server computing system, an identifier for retrieving the message;

receiving, at the server computing system from a requesting computing system, a request to retrieve the message, the request including at least a portion of the identifier;

encrypting the message;

prepending an encryption type identifier to the encrypted message; and

sending, to the requesting computing system, the encrypted message and the prepended encryption type identifier in response to receiving the request, wherein the encryption type identifier is configured to enable decryption of the encoded message by the requesting computing system.

2. The method of claim 1, wherein the requesting computing system is a second client computing system, and wherein the second client computing system obtains the identifier from the first client computing system.

3. The method of claim 2, wherein the second client computing system obtains the identifier over a public transmission medium.

4. The method of claim 2, wherein the second client computing system obtains the identifier over a public storage medium.

5. The method of claim 1, wherein the receiving the request comprises receiving an attempted access, by the requesting computing system, of the message through a web services interface for accessing messages online.

6. The method of claim 1, further comprising:

encrypting the content of the message into a string suitable for URL handling; and

prepending an encryption type URI to the string.

7. The method of claim 1, further comprising uploading the message to a networked data store.

8. The method of claim 6, wherein the decrypting the encrypted message received from the first client computing system comprises decrypting a binary-to-text encoding.

9. The method of claim 1, wherein the decrypting the encrypted message received from the first client computing system comprises decrypting a Radix-64 message string.

10. A non-transitory computer readable storage medium including instructions that, when executed by a processing system, cause the processing system to:

receive, at a server computing system, an encrypted message from a first client computing system over a network, the encrypted message including content of a message wrapped in ASCII armor;

decrypt, by the server computing system, the encrypted message to obtain the content of the message corresponding to the encrypted message;

encode, by the server computing system, the content of the message by hashing the content, to generate an encoded message;

store the encoded message in a data store;

create, by the server computing system, an identifier for retrieving the message;

receive, at the server computing system from a requesting computer system, a request to retrieve the message, the request including at least a portion of the identifier;

encrypt the message;

prepend an encryption type identifier to the encrypted message; and

send, to the requesting computing system, the encrypted message and the prepended encryption type identifier in response to receiving the request, wherein the encryption type identifier is configured to enable decryption of the encoded message by the requesting computing system.

11. The non-transitory computer readable storage medium of claim 10, wherein the requesting computing system is a second client computing system, and wherein the second client computing system obtains the identifier from a first client computing system.

12. The non-transitory computer readable storage medium of claim 11, wherein the second client computing system obtains the identifier over a public transmission medium.

13. The non-transitory computer readable storage medium of claim 11, wherein the second client computing system obtains the identifier over a public storage medium.

14. The non-transitory computer-readable storage medium of claim 10, wherein to receive the request comprises to receive an attempted access, by the requesting computing system, of the message through a web services interface to access messages online.

15. A system, comprising:

a data store to store messages; and

a server computing system configured to operate a message server to;

receive an encrypted message from a first client computing system over a network, the encrypted message including content of a message wrapped in ASCII armor;

decrypt the encrypted message to obtain the content of the message corresponding to the encrypted message;

encode the content of the message by hashing the content, to generate an encoded message;

store the encoded message in the data store;

create an identifier for retrieving the message;

receive, from a requesting computing system, a request to retrieve the message, the request including at least a portion of the identifier;

encrypt the message;

prepend an encryption type identifier to the encrypted message; and

send, to the requesting computing system, the encrypted message and the prepended encryption type identifier in response to receiving the request, wherein the encryption type identifier is configured to enable decryption of the encoded message by the requesting computing system.

16. The system of claim 15, wherein the server computing system comprises:

a network interface to receive network traffic comprising at least the encrypted message received from the first client computing system and the request to retrieve the message;

a storage interface coupled to communicate with the data store;

a message handler, the message handler to monitor the network traffic received on the network interface, and to transfer the encrypted message received from the first client computing system to a cryptographic unit, the cryptographic unit to perform message storage processing on the encrypted message and to perform message retrieval processing on the request; and

a message server to encode the content of the encrypted message received from the first client computing system and to encrypt the message and prepend the encryption type identifier for sending to the requesting computing system.

17. The system of claim 16, wherein the cryptographic unit comprises:

a decryption module to decrypt the encrypted message received from the first client computing system; and

a hashing unit to hash the content of the message.

18. The system of claim 16, wherein the message server is further to compress the content of the message.