System and Method for Securing an Electronic Communication

• US 20100325423A1
• Filed: 06/02/2010
• Published: 12/23/2010
• Est. Priority Date: 06/22/2009
• Status: Active Grant

• Current Assignee: Uniloc 2017 LLC (SoftBank Group Corp.)
• Original Assignee: Uniloc Luxembourg S.à r.l. (f/k/a Uniloc Luxembourg S.A.) (Uniloc Corporation Pty. Limited)
• Inventors: Etchegoyen, Craig Stephen
• Granted Patent: US 8,495,359 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

A system for securing an electronic communication comprises a gateway server configured to receive and store a device identifier and a network address from a first computing device. The device identifier identifies the first computing device, and the network address is associated with the first computing device. Thereafter, the gateway server receives from a second computing device the network address of the first computing device and an encryption key request. The gateway server derives from the device identifier for the first computing device an encryption key and sends the encryption key to the second computing device. A communication from the second computing device to the first computing device may thereafter be secured using the encryption key. A related method of securing an electronic communication is also disclosed.

Claims

1. A system for securing an electronic communication, the system comprising:

a gateway server configured to;

receive and store a device identifier and a network address from a first computing device, wherein the device identifier identifies the first computing device and the network address is associated with the first computing device;

receive from a second computing device the network address for the first computing device and an encryption key request;

derive an encryption key from the device identifier for the first computing device;

and send the encryption key to the second computing device.

2. The system of claim 1, wherein the gateway server is further configured to receive and store a second device identifier and a second network address from the second computing device.

3. The system of claim 1, wherein the gateway server is further configured to confirm to the first computing device that the encryption key was sent to the second computing device.

4. The system of claim 1, wherein the network address comprises at least one of an email address, an Internet Protocol (IP) address, and a Media Access Control (MAC) address.

5. The system of claim 1, wherein the network address resolves to at least one of an IP address, a MAC address, and an e-mail address.

6. The system of claim 1, wherein the encryption key is a public encryption key.

7. A method of securing an electronic communication, the method comprising:

receiving and storing at a gateway server store a device identifier and a network address from a first computing device, wherein the device identifier identifies the first computing device and the network address is associated with the first computing device;

receiving from a second computing device the network address for the first computing device and an encryption key request;

deriving from the device identifier an encryption key for the first computing device; and

sending the encryption key to the second computing device.

8. The system of claim 7, further comprising receiving and storing a second device identifier and a second network address from the second computing device.

9. The system of claim 7, further comprising confirming to the first computing device that the encryption key was sent to the second computing device.

10. The method of claim 7, wherein the network address comprises at least one of an email address, an Internet Protocol (IP) address, and a Media Access Control (MAC) address.

11. The method of claim 7, wherein the network address resolves to at least one of an IP address, a MAC address, and an email address.

12. A method of securing an electronic communication, the method comprising:

sending from an originating computing device a request to a gateway server for an encryption key, the request including a network address for a recipient computing device, wherein the gateway server maintains a record of the network address and a device identifier for the recipient computing device;

receiving an encryption key from the gateway server, wherein the encryption key is derived from the device identifier;

encrypting the electronic communication using the encryption key; and

transmitting the encrypted electronic communication to the recipient computing device.

13. The method of claim 12, wherein the network address comprises at least one of an email address, an Internet Protocol (IP) address, and a Media Access Control (MAC) address.

14. The method of claim 12, wherein the network address resolves to at least one of an IP address, a MAC address, and an email address.

15. The method of claim 12, wherein the encryption key is a public encryption key.

16. A method of receiving a secured electronic communication, the method comprising:

providing from a recipient computing device to a gateway server a network address and a device identifier for the recipient computing device;

receiving at the recipient computing device the secured electronic communication, wherein the secured electronic communication is encrypted by a sending computing device with a first encryption key derived from the device identifier by the gateway server;

generating at the recipient computing device a second encryption key from the device identifier; and

decrypting at the recipient computing device the secured electronic communication using the second encryption key.

17. The method of claim 16, further comprising the recipient computing device communicating with the gateway server that the gateway server provided the encryption key to the sending computing device.

18. The method of claim 16, wherein the network address comprises at least one of an email address, an Internet Protocol (IP) address, and a Media Access Control (MAC) address.

19. The method of claim 16, wherein the network address resolves to at least one of an IP address, a MAC address, and an email address.

20. The method of claim 16, wherein the first encryption key is different from the second encryption key.