SECURE MESSAGING

• US 20140310514A1
• Filed: 11/12/2012
• Published: 10/16/2014
• Est. Priority Date: 11/11/2011
• Status: Active Grant

• Current Assignee: Soprano Design Pty Limited
• Original Assignee: Soprano Design Pty Limited
• Inventors: Favero, Richard Francis
• Granted Patent: US 9,756,021 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

A method for transmitting an encrypted message from a messaging server (106) to a handset (104) comprising the steps of receiving, at the messaging server (106) and from a sender computer (102), a message to be sent to the handset (104) and a handset identifier associated with the handset and determining that the handset is not registered with the messaging server (106) by determining that the handset identifier does not have an associated handset encryption key stored at the messaging server. The handset (104) is registered by sending a notification to the handset requesting registration, receiving back a handset encryption key associated with the handset identifier; and storing the handset encryption key against the handset identifier at the messaging server which is to be used to encrypt the received message before sending. Prior to registering the handset (104), intermediate encryption of the message may be employed to create an intermediate encrypted message to be stored at the messaging server.

Claims

1. A method for transmitting an encrypted message from a messaging server to a handset comprising:

receiving at the messaging server a message to be sent to the handset and a handset identifier associated with the handset from a sender computer;

determining that the handset is not registered with the messaging server;

facilitating the registration of the handset by;

sending a notification to the handset requesting registration;

receiving from the handset a handset encryption key associated with the handset identifier; and

storing the handset encryption key against the handset identifier at the messaging server; and

encrypting the received message using the handset encryption key and sending the encrypted message to the handset.

2. A method as claimed in claim 1 wherein determining that the handset is not registered comprises determining that the handset identifier does not have an associated handset encryption key stored at the messaging server.

3. A method as claimed in claim 1 further comprising performing intermediate encryption of the message to create an intermediate encrypted message and storing the intermediate encrypted message at the messaging server.

4. A method as claimed in claim 3 wherein the intermediate encryption uses a messaging server encryption key.

5. A method as claimed in claim 3 wherein the method further comprises decrypting the intermediate encrypted message before encrypting the message with the handset encryption key.

6. A method as claimed in claim 1 wherein the step of facilitating the registration of the handset further comprises, at the messaging server, authenticating the handset prior to accepting from the handset the received handset encryption key.

7. A method as claimed in claim 1 wherein the encryption key is generated by a handset application installed on or native to the handset.

8. A method as claimed in claim 7 wherein the encryption key is a public key generated during asymmetric key generation by the handset application and wherein the handset application also generates a private key, which is stored in the handset application on the handset and used to decrypt the encrypted message after receipt thereof.

9. A method as claimed in claim 8 wherein the asymmetric keys are generated by a random number generator of the handset application, seeded by the handset'"'"'s identifier.

10. A method as claimed in claim 1 wherein authenticating the handset comprises:

providing a temporary password to the handset;

receiving a return password back from the handset; and

comparing the temporary password and the return password thereby to authenticate the handset.

11. A method as claimed in claim 10 wherein different communication channels are used for providing the temporary password to the handset and receiving the return password back from the handset.

12. A method as claimed in claim 11 wherein the temporary password is sent to the handset as part of an SMS, while the return password is received from the handset using a public mobile network supporting data communication.

13. A method as claimed in claim 10 wherein comparing the passwords further comprises comparing a handset identifier received with the return password, with the handset identifier to which the temporary password was sent.

14. A method as claimed in claim 6 wherein authenticating the handset comprises:

receiving a first temporary password from the handset;

receiving a second temporary password from the handset; and

comparing the two temporary passwords thereby to authenticate the handset.

15. A method as claimed in claim 14 wherein different communication channels are used for receiving the first and second temporary password from the handset, with the one channel being a public mobile network supporting data communication and the other channel being an SMS channel.

16. A method as claimed in claim 15 wherein the first temporary password is automatically transmitted over a public mobile network supporting data communication from the handset once it has been generated by the handset application program, and is transmitted with the handset identifier entered by the user through the handset application.

17. A method as claimed in claim 16 wherein the second temporary password is obtained along with the handset identifier as an SMS sent to the messaging server from the handset application, the SMS being sent automatically, without user interaction, from the handset application.

18. A computer system comprising:

a memory with instructions for performing the method as claimed in claim 1; and

a processor configured to execute the instructions.

19. A method for registering a handset to enable the secure sending of a message to the handset, the method comprising:

generating, at the messaging server, a temporary password;

transmitting the temporary password to the handset;

receiving a return password back from the handset;

comparing the temporary password with the return password;

in the event that they match, transmitting an authentication acknowledgement back to the handset; and

receiving a handset encryption key from the handset which is stored at the messaging server against an identification number of the handset.

20. A method for registering a handset to enable the secure sending of a message to the handset, the method comprising:

receiving, at the messaging server, a first temporary password from the handset through a public mobile network supporting data communication;

receiving a second temporary password from the handset as part of an SMS;

comparing the first and second temporary passwords with each other;

in the event of a match, transmitting an authentication acknowledgement back to the handset; and

receiving a handset encryption key from the handset which is stored at the messaging server against an identification number of the handset.

21. A method for transmitting an encrypted message from a messaging server to a handset comprising:

receiving, at the messaging server, a message to be sent to the handset and a handset identifier associated with the handset from a sender computer;

determining that the handset is not registered with the messaging server by determining that the handset identifier does not have an associated handset encryption key stored at the messaging server;

performing intermediate encryption of the message to create an intermediate encrypted message and storing the intermediate encrypted message at the messaging server;

facilitating the registration of the handset;

after registration, obtaining a handset encryption key from the handset;

decrypting the stored intermediate encrypted message; and

encrypting the message with the handset encryption key prior to sending the encrypted message to the handset.