Method and system for securing communication

• US 9,882,883 B2
• Filed: 04/14/2017
• Issued: 01/30/2018
• Est. Priority Date: 03/25/2009
• Status: Active Grant

• Current Assignee: PACid Technologies, LLC
• Original Assignee: PACid Technologies, LLC
• Inventors: Fielder, Guy
• Primary Examiner(s): Shaw, Brian F
• Application Number:
  US15/487,800
• Publication Number:
  US 20170279780A1
• Time in Patent Office: 291 Days
• Field of Search: 713168, 713169, 713171, 713181, 713189, 370338, 709204
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation

Abstract

A method for generating one or more secrets for use by members. The method includes sending a first request for connection with a second member, and sending a second request to connection with a third member. The method further includes receiving, by the first member from the second member, a second input after the first request is sent and after communication is initiated between the first member and the second member and receiving, by the first member from the third member, a third input after the second request is sent and after communication is initiated between the first member and the third member. The method further includes generating, using an n-bit generator executing on the first member, a message digest using a first input, the second input, and the third input, extracting a secret from the message digest, and storing the secret in a secrets repository on the first member.

Claims

1. A method for securing communications between two computing devices, the method comprising:

exchanging, between the two computing devices, information to be used by both computing devices to generate a session key, the exchange of information including;

a first one of the two computing devices encrypting, using a public key of the second one of the two computing devices, a first input, and transmitting to the second one of the two computing devices the first input as encrypted using the public key of the second one of the two computing devices;

at the second one of the two computing devices, receiving the first input as encrypted using the public key of the second one of the two computing devices, and decrypting, using a private key of the second one of the two computing devices the first input;

at the second one of the two computing devices, encrypting, using a public key of the first one of the two computing devices, a second input, and transmitting to the first one of the two computing devices the second input as encrypted using the public key of the first one of the two computing devices;

at the first one of the two computing devices, receiving the second input as encrypted using the public key of the first one of the two computing devices, and decrypting, using a private key of the first one of the two computing devices the second input;

at both the first one of the two computing devices and the second one of the two computing devices, generating, using the first and second inputs, an initial message digest;

at both the first one of the two computing devices and the second one of the two computing devices, extracting, from the initial message digests, a shared secret, and storing the shared secret at each of the first one of the two computing devices and the second one of the two computing devices in respective first and second secrets repositories; and

exchanging, between the two computing devices, data encrypted by a transmitting one of the first one of the two computing devices or the second one of the two computing devices and decrypted by a receiving one of the first one of the two computing devices or the second one of the two computing devices, as appropriate, using at each of the first one of the two computing devices and the second one of the two computing devices an encryption/decryption key produced from application of the shared secret to an encryption module.