Method of Encrypting and Transferring Data Between a Sender and a Receiver Using a Network

• US 20150006880A1
• Filed: 06/26/2013
• Published: 01/01/2015
• Est. Priority Date: 05/23/2005
• Status: Active Grant

• Current Assignee: Litera Technology LLC
• Original Assignee: Litera Technology LLC
• Inventors: Alculumbre, Michael H.
• Granted Patent: US 9,497,172 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics

Abstract

A method of encrypting and transferring data between a sender and a receiver in a secure manner is disclosed. The method includes steps of a server receiving from the sender an identifier of the receiver; establishing a transfer specific encryption key specific to the transfer; encrypting the data using the transfer specific encryption key; the server accessing receiver specific information according to the received identifier of the receiver and encrypting, with the receiver specific information, said transfer specific encryption key; transferring the encrypted data and the encrypted transfer specific encryption key over the network for receipt by the receiver; the server receiving from the receiver the encrypted transfer specific encryption key; the server accessing the receiver specific information to decrypt the encrypted transfer specific encryption key; and decrypting the encrypted data using the decrypted transfer specific encryption key.

Claims

1. A method of encrypting and transferring data between senders and receivers over a network, the method comprising:

receiving, by a server, an identifier of a receiver from a sender;

encrypting data to be transferred between the sender and the receiver using an encryption key;

retrieving, by the server, information specific to the receiver using the identifier of the receiver received from the sender;

encrypting the encryption key using the retrieved information specific to the receiver;

transferring the encrypted data and the encrypted encryption key over the network for receipt by the receiver;

receiving, by the server, from the receiver to which the encrypted data and the encrypted encryption key has been transferred, the identifier of the receiver and the encrypted encryption key;

retrieving, by the server, the information specific to the receiver using the identifier of the receiver received from the receiver, and using the retrieved information specific to the receiver to decrypt the encrypted encryption key; and

decrypting the encrypted data using the decrypted encryption key.

2. The method according to claim 1, further comprising establishing a communication link between the sender and the server.

3. The method according to claim 1, further comprising establishing a secure communication link between the sender and the server.

4. The method according to claim 2, further comprising establishing the communication link between the sender and server subject to a check by the server of a password of the sender.

5. The method according to claim 1, further comprising establishing a communication link between the receiver and the server.

6. The method according to claim 5, further comprising establishing a secure communication link between the receiver and the server.

7. The method according to claim 5, further comprising establishing the communication link between the receiver and server subject to a check by the server of a password of the receiver.

8. The method according to claim 1, wherein the encryption key is generated by the sender and sent to the server.

9. The method according to claim 1, wherein encrypting the data using the encryption key takes place at the sender.

10. The method according to claim 9, wherein the sender receives from the server the encrypted encryption key and the sender transfers the encrypted data and the encrypted encryption key to the receiver over the network.

11. The method according to claim 1, wherein the receiver receives from the server the decrypted encryption key and decrypting the encrypted data using the decrypted encryption key takes place at the receiver.

12. The method according to claim 1, wherein generating the encryption key is performed by the server.

13. The method according to claim 12, wherein encrypting the data using the encryption key is performed by the server.

14. The method according to claim 13, wherein the server transfers the encrypted data and the encrypted encryption key to the receiver over the network.

15. The method according to claim 1, wherein decrypting the encrypted data using the decrypted encryption key is performed by the server and the server transfers the decrypted data to the receiver.

16. A method according to claim 1 further comprising:

generating a message authentication code (MAC) value for the data to be transferred prior to encrypting;

transferring the MAC value together with the encrypted data and the encrypted encryption key; and

generating a second MAC value after decrypting and validating it against the transferred MAC value.

17. A method according to claim 1 wherein encrypting the encryption key includes encrypting the encryption key using one or more of a public key encryption method, a blowfish algorithm, and secret code of the server.

18. A method of encrypting and transferring data between senders and receivers using a network, the method performed by a server and comprising:

receiving from a sender an identifier of a receiver;

retrieving information specific to the receiver using the identifier of the receiver received from the sender;

encrypting, using the retrieved information specific to the receiver, an encryption key that is used to encrypt data to be transferred between the sender and the receiver;

receiving from the receiver, to which the encrypted data and the encrypted encryption key have been transferred over the network, the identifier of the receiver and the encrypted encryption key; and

retrieving the information specific to the receiver that is accessed according to the identifier of the receiver received from the receiver, and using the retrieved information specific to the receiver to decrypt the encrypted encryption key.

19. The method according to claim 18, further comprising generating the encryption key at the server.

20. The method according to claim 18 further comprising receiving from the sender the encryption key;

and transferring the encrypted encryption key to the sender.

21. The method according to claim 18 further comprising encrypting the data in the server using the encryption key.

22. The method according to claim 18 further comprising transferring the encrypted data and the encrypted encryption key over the network for receipt by the receiver.

23. The method according to claim 18 further comprising transferring the decrypted encryption key to the receiver to enable the receiver to decrypt the encrypted data using the decrypted encryption key.

24. The method according to claim 18 further comprising decrypting the encrypted data in the server using the decrypted encryption key.

25. A system comprising:

one or more memories storing instructions; and

one or more processors configured to execute the instructions to;

receive from a sender an identifier of a receiver;

retrieve information specific to the receiver using the identifier of the receiver received from the sender;

encrypt, using the retrieved information specific to the receiver, an encryption key that is used to encrypt data to be transferred between the sender and the receiver;

receive, from the receiver to which the encrypted data and the encrypted encryption key have been transferred over the network, the identifier of the receiver and the encrypted encryption key; and

retrieve the information specific to the receiver that is accessed according to the identifier of the receiver received from the receiver, and use the retrieved information specific to the receiver to decrypt the encrypted encryption key.

26. The system according to claim 25, wherein the one or more processors are further configured to execute the instructions to send the decrypted encryption key to the receiver.

27. The system according to claim 26, wherein the receiver uses the decrypted encryption key to decrypt the encrypted data.