Secure short message service (SMS) communications

• US 9,860,751 B2
• Filed: 12/30/2016
• Issued: 01/02/2018
• Est. Priority Date: 06/06/2008
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Inventors: Mardikar, Upendra
• Primary Examiner(s): NGUYEN, KHAI MINH
• Application Number:
  US15/394,892
• Publication Number:
  US 20170111797A1
• Time in Patent Office: 368 Days
• Field of Search: 455411, 455466, 455410, 455407, 455419, 713176, 713171, 713161, 380247, 380249, 380270, 380259, 380278
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/302 involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes
• CPC Class Codes: H04L 9/304 based on error correction codes, e.g. McEliece
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/71 : Hardware identity
• CPC Class Codes: H04W 12/72 : Subscriber identity
• CPC Class Codes: H04W 4/14 : Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

Systems, methods, and computer program products for providing secure messaging communications are disclosed. For example, a computer-implemented method may include receiving an encrypted message and a key from a sender associated with a first computing device where the encrypted message is generated by the first computing device, verifying the received key at least in part based on a comparison with a pre-determined key, processing one or more unique factors associated with the sender in view of verifying the received key, decrypting the encrypted message, re-encrypting a result of the decrypting using a key of a receiver associated with a second computing device, and sending the re-encrypted result to the receiver associated with the second computing device.

Claims

1. A computer system, comprising:

a non-transitory memory; and

one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the computer system to perform operations comprising;

receiving an encrypted message from a first computing device and a key from a sender associated with the first computing device;

verifying the received key, at least in part, based on a comparison with a pre-determined key;

processing one or more factors associated with the sender in view of the verifying;

decrypting the encrypted message;

re-encrypting a result of the decrypting using a key of a receiver associated with a second computing device; and

providing the re-encrypted result to the receiver associated with the second computing device.

2. The computer system of claim 1, wherein the encrypted message is based, at least in part, on message data processed with a message authentication code and second factor authentication information.

3. The computer system of claim 1, wherein the encrypted message is based, at least in part, on message data processed with a message authentication code, a counter, and second factor authentication information.

4. The computer system of claim 1, wherein the encrypted message is based, at least in part, on message data processed with a message authentication code, second factor authentication information, and third factor authentication information.

5. The computer system of claim 1, wherein the encrypted message is received from the first computing device via a regular messaging channel.

6. The computer system of claim 1, wherein the re-encrypted result is provided from the first computing device via a Mobile Network Operator (MNO) over a network.

7. The computer system of claim 1, wherein at least one of the factors is a unique factor associated with the sender.

8. A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause performance of operations comprising:

receiving an encrypted message and a key associated with a sender of the encrypted message from a first computing device;

verifying the received key, at least in part, based on a comparison with a pre-determined key;

processing one or more factors associated with the first computing device in view of the verifying;

decrypting the encrypted message;

re-encrypting a result of the decrypting using a key of a receiver associated with a second computing device; and

providing the re-encrypted result to the receiver associated with the second computing device.

9. The non-transitory machine-readable medium of claim 8, wherein the encrypted message is based, at least in part, on message data processed with a message authentication code and a token.

10. The non-transitory machine-readable medium of claim 8, wherein the encrypted message is based, at least in part, on message data processed with a message authentication code, a counter, and a token.

11. The non-transitory machine-readable medium of claim 8, wherein the encrypted message is based, at least in part, on message data processed with a message authentication code, a timestamp, and biometric identification information.

12. The non-transitory machine-readable medium of claim 8, wherein the encrypted message is received via a regular messaging channel.

13. The non-transitory machine-readable medium of claim 8, wherein the re-encrypted result is provided over a network via a Mobile Network Operator (MNO).

14. The non-transitory machine-readable medium of claim 8, wherein at least two of the factors are unique to the sender.

15. A computer-implemented method, comprising:

receiving, by one or more hardware processors, an encrypted message and a key from a first computing device;

verifying, by one or more of the hardware processors, the received key, at least in part, based on a comparison with a pre-determined key;

processing, by one or more of the hardware processors, one or more unique factors associated with a sender of the encrypted message in view of the verifying;

decrypting, by one or more of the hardware processors, the encrypted message;

re-encrypting, by one or more of the hardware processors, a result of the decrypting using a key of a receiver associated with a second computing device; and

sending, by one or more of the hardware processors, the re-encrypted result to the receiver associated with the second computing device.

16. The computer-implemented method of claim 15, wherein the encrypted message is based, at least in part, on message data processed with a message authentication code and second factor authentication information.

17. The computer-implemented method of claim 15, wherein the encrypted message is based, at least in part, on message data processed with a message authentication code, a timestamp, and second factor authentication information.

18. The computer-implemented method of claim 15, wherein the encrypted message is based, at least in part, on message data processed with a message authentication code, second factor authentication information, and biometric identification information.

19. The computer-implemented method of claim 15, wherein the encrypted message is received via a regular messaging channel.

20. The computer-implemented method of claim 15, wherein the re-encrypted result is provided via a Mobile Network Operator (MNO).