Sending digitally signed emails via a web-based email system

• US 20070022291A1
• Filed: 07/19/2005
• Published: 01/25/2007
• Est. Priority Date: 07/19/2005
• Status: Active Grant

• Current Assignee: Go Daddy Operating Company LLC (GoDaddy, Inc.)
• Original Assignee: Go Daddy Group Incorporated (GoDaddy, Inc.)
• Inventors: Owen, Brad, Thayer, Wayne
• Granted Patent: US 8,145,707 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

The present invention provides systems and methods for allowing an Email User to create a Public Key Infrastructure (PKI) Email Account and thereafter to digitally sign, send, verify and receive PKI encrypted emails over a computer network, such as the Internet. The systems and methods preferably include a Web-based Email System and a Certificate Authority that coordinate their actions to make the process of creating, maintaining and using the PKI Account as easy as possible for the Email User. In a preferred embodiment, a Keystore System may also be used to enhance the management and use of digital keypairs.

Claims

1. A system for improving the security of transmitted email, comprising:

a) a Certificate Authority; and

b) a Web-based Email System having one or more PKI Email Accounts created via the Certificate Authority for one or more Email Users, wherein the Web-based Email System is able to send PKI signed emails to a second Email System.

2. The system of claim 1, wherein the Web-based Email System includes a Keystore System.

3. The system of claim 1, further comprising a Keystore System accessible by one or more Email Systems via a Computer Network.

4. The system of claim 1, wherein at least one PKI Email Account is S/MIME enabled.

5. The system of claim 1, wherein the Web-based Email System is able to access a private key of an Email User from a Keystore System and digitally sign an email of the Email User using the private key.

6. The system of claim 1, further comprising a Keystore System, wherein the Keystore System is able to access a private key of the Email User and digitally sign an email of the Email User using the private key.

7. A method of improving the security of transmitted email, comprising the steps of:

a) a Web-based Email System and a Certificate Authority generating a PKI Email Account for an Email User;

b) the Web-based Email System generating an email drafted by the Email User;

c) the Web-based Email System receiving a request from the Email User to digitally sign the email;

d) digitally signing the email using a private key of the PKI Email Account of the Email User; and

e) the Web-based Email System sending the digitally signed email to a designated Recipient.

8. The method of claim 7, wherein the Web-based Email System digitally signs the email using the private key of the Email User.

9. The method of claim 7, wherein the Keystore System digitally signs the email using the private key of the Email User.

10. The method of claim 7, wherein the PKI Email Account is S/MIME enabled.

11. The method of claim 7, wherein the private key is never revealed to the Email User.

12. A method of improving the security of transmitted email, comprising the steps of:

a) a Web-based Email System creating a PKI Email Account for an Email User via a Certificate Authority, wherein a private key of the Email User is stored in a Keystore System;

b) the Web-based Email System generating an email drafted by the Email User;

c) the Web-based Email System receiving a request from the Email User to digitally sign the email;

d) digitally signing the email; and

e) the Web-based Email System transmitting the email to a designated Recipient.

13. The method of claim 12, wherein the PKI Email Account is S/MIME enabled.

14. The method of claim 12, wherein the private key of the Email User is never revealed to the Email User.

15. The method of claim 12, wherein the private key of the Email User is only revealed to either the Web-based Email System or the Keystore System.