Encryption method and system using a random bit string encryption key

• US 9,836,281 B2
• Filed: 03/11/2014
• Issued: 12/05/2017
• Est. Priority Date: 03/12/2013
• Status: Active Grant

• Current Assignee: Greg J. Wright
• Original Assignee: Greg J. Wright
• Inventors: Wright, Greg J.
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Teng, Louis
• Application Number:
  US14/204,895
• Publication Number:
  US 20140325215A1
• Time in Patent Office: 1,365 Days
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 7/588 Random number generators, i.e. based on natural stochastic processes
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 9/001 using chaotic signals
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds

Abstract

Methods and systems for encrypting data are disclosed. A circuit uses a white noise generator to capture a random string of bits as an encryption key. The encryption key is generated at a central server and is provided to a subscriber on a physical memory device. The subscriber uses the encryption key to encrypt a source data file. The encrypted data file is sent to the central server, which uses the encryption key to decrypt the encrypted data file and to recover the source data file. The file name for the source data file may be encrypted into the encrypted data file and a new name assigned to the encrypted data file. A random number index may be used to identify the starting point of the encrypted file.

Claims

1. A method for encrypting data files using a random bit string encryption key, comprising:

generating the random bit string encryption key at a remote device using a white noise source sampled one bit at a time by a microprocessor,

wherein an analog circuit output is generated that varies between a high value and a low value based upon a signal from the white noise source, and

wherein a digital circuit coupled to the analog circuit samples the output of the analog circuit to generate the random bit string;

connecting an encryption key memory device to a host device, the encryption key memory device storing the encryption key and a first verification code by saving the encryption key and the first verification code to the encryption key memory device without using an algorithmic key to generate the encryption key;

receiving a second verification code by the host device from the remote device;

disconnecting the host device from the Internet and external network connections prior to accessing the encryption key, wherein the encryption key is accessed only if the first verification code matches the second verification code;

using a processor, encrypting a data file stored on an external memory device using the encryption key;

connecting the remote device to the Internet and using a computer to send the encrypted file to the remote device; and

connecting the host device to the Internet and sending the encrypted file from the remote device to the host device.

2. The method of claim 1, further comprising:

disconnecting the host device from external network connections prior to connecting the encryption key memory device;

removing the encryption key memory device and the external memory device storing the data file from the host computer after encrypting the data file; and

reconnecting an external network connection after removing the encryption key memory device and the external memory device storing the data file.

3. The method of claim 1, further comprising:

encrypting the data file on the encryption key memory device using the encryption key stored on the encryption key memory device; and

returning the encrypted data file to the host device.

4. The method of claim 1, further comprising:

encrypting a file name of the data file as part of the encrypted data file; and

assigning a new file name to the encrypted data file.

5. The method of claim 1, further comprising:

deleting the encrypted data file from the host device.

6. The method of claim 1, further comprising:

receiving the encrypted data file at the remote device;

decrypting the encrypted data file using the encryption key; and

re-encrypting and

forwarding the re-encrypted data file to a recipient.

7. A method for decrypting data files using a random bit string encryption key, comprising:

generating the random bit string encryption key at a remote device using a white noise source sampled one bit at a time by a microprocessor,

wherein an analog circuit output is generated that varies between a high value and a low value based upon a signal from the white noise source, and

wherein a digital circuit coupled to the analog circuit samples the output of the analog circuit to generate the random bit string;

receiving an encrypted data file at a host device;

connecting an encryption key memory device to the host device, the encryption key memory device storing the encryption key and a first verification code by saving the encryption key and the first verification code to the encryption key memory device without using an algorithmic key to generate the encryption key;

receiving a second verification code by the host device from the remote device;

disconnecting the host device from the Internet and external network connections prior to accessing the encryption key, wherein the encryption key is accessed only if the first verification code matches the second verification code; and

using a processor, decrypting the encrypted data file using the encryption key.

8. The method of claim 7, further comprising:

connecting the remote device to the Internet;

connecting the host device to the Internet and sending the encrypted data file from the remote device to the host device;

disconnecting the host device from external network connections prior to connecting the encryption key memory device;

storing the decrypted data file to an external memory to the host device;

disconnecting the external memory from the host computer after storing the data file on the external memory;

removing the encryption key memory device from the host computer; and

reconnecting an external network connection after removing the encryption key memory device.

9. The method of claim 7, further comprising:

providing the encrypted data file from the host device to a processor on the encryption key memory device.

10. The method of claim 7, further comprising:

decrypting a file name from the encrypted data file; and

assigning the file name to the decrypted data file.