ENHANCED MESSAGE SECURITY

• US 20090310785A1
• Filed: 01/05/2009
• Published: 12/17/2009
• Est. Priority Date: 04/29/2002
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Day, Paul R., Bates, Cary L., Barrus, William G., Crenshaw, Robert J.
• Granted Patent: US 9,553,893 B2
• Time in Patent Office: Days
• US Class Current: 380/259
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

A secure messaging system and method includes receiving an encrypted message, the message having been encrypted using a token of a corresponding pervasive device; wirelessly verifying the presence of the pervasive device; and, if the presence can be verified, decrypting the message using the token. The verification step can include the steps of establishing a wireless link with the pervasive device; and, querying the pervasive device over the wireless link. The establishing step can include the step of establishing a Bluetooth link with the pervasive device. Furthermore, the querying step can include the step of requesting geographic coordinates which locate the pervasive device.

Claims

1-6. -6. (canceled)

7. A secure messaging method within a computer, the method comprising the steps of:

receiving, by a message recipient, an encrypted message from a message source, said message having been encrypted using a token identifying a corresponding pervasive device separate from the message source;

wirelessly verifying the presence of said pervasive device; and

,

upon verifying said presence, decrypting said message using said token using symmetric cryptography.

8. The secure messaging method of claim 7, wherein said verification step comprises the steps of:

establishing a wireless link with said pervasive device; and

,

querying said pervasive device over said wireless link.

9. The secure messaging method of claim 8, wherein said establishing step comprises the step of establishing a Bluetooth link with said pervasive device.

10. The secure messaging method of claim 8, wherein said querying step comprises the step of sending a request to said pervasive device, said request comprising one of a request for said token, a request for an decryption key based upon said token, and a request for an acknowledgment of said request.

11. The secure messaging method of claim 8, wherein said querying step comprises the step of requesting geographic coordinates which locate said pervasive device.

12. A computer-readable storage device having stored thereon a computer program for secured messaging, said computer program comprising a routine set of instructions for causing a computer to perform the steps of:

receiving, by a message recipient, an encrypted message from a message source, said message having been encrypted using a token identifying a corresponding pervasive device separate from the message source;

wirelessly verifying the presence of said pervasive device; and

,

upon verifying said presence, decrypting said message using said token using symmetric cryptography.

13. The computer-readable storage of claim 12, wherein said verification step comprises the steps of:

establishing a wireless link with said pervasive device; and

,

querying said pervasive device over said wireless link.

14. The computer-readable storage of claim 13, wherein said establishing step comprises the step of establishing a Bluetooth link with said pervasive device.

15. The computer-readable storage of claim 13, wherein said querying step comprises the step of sending a request to said pervasive device, said request comprising one of a request for said token, a request for an decryption key based upon said token, and a request for an acknowledgment of said request.

16. The computer-readable storage of claim 13, wherein said querying step comprises the step of requesting geographic coordinates which locate said pervasive device.