Enhanced message security

• US 9,553,893 B2
• Filed: 01/05/2009
• Issued: 01/24/2017
• Est. Priority Date: 04/29/2002
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Barrus, William G., Bates, Cary L., Crenshaw, Robert J., Day, Paul R.
• Primary Examiner(s): HOLDER, BRADLEY W
• Application Number:
  US12/348,451
• Publication Number:
  US 20090310785A1
• Time in Patent Office: 2,941 Days
• Field of Search: 380/255, 380/270, 713/150, 713/189
• US Class Current: 1/1
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

A secure messaging system and method includes receiving an encrypted message, the message having been encrypted using a token of a corresponding pervasive device; wirelessly verifying the presence of the pervasive device; and, if the presence can be verified, decrypting the message using the token. The verification step can include the steps of establishing a wireless link with the pervasive device; and, querying the pervasive device over the wireless link. The establishing step can include the step of establishing a Bluetooth link with the pervasive device. Furthermore, the querying step can include the step of requesting geographic coordinates which locate the pervasive device.

Claims

1. A secure messaging method comprising the steps of:

receiving from over a public computer communications network, by a receiving computing device of an intended message recipient, an encrypted message from a computing device of a message source, said message having been encrypted using an encryption key based on a token uniquely identifying a pervasive device personally associated with the message recipient and separate from the receiving computing device; and

,

responding to the receipt of the encrypted message in the receiving computing device by establishing a short-range wireless link with the pervasive device, querying said pervasive device over said wireless link, obtaining by the receiving device from the pervasive device over the short-range wireless link a decryption key formulated based upon the token and decrypting said encrypted message received from the computing device of the message source, by the receiving computing device, using said obtained decryption key from the pervasive device from over the short range wireless link.

2. The secure messaging method of claim 1, wherein

said establishing step comprises the step of establishing a Bluetooth link with said pervasive device.

3. The secure messaging method of claim 1, wherein

said querying step comprises the step of sending a request to said pervasive device, said request comprising one of a request for said token, a request for an decryption key based upon said token, and a request for an acknowledgment of said request.

4. The secure messaging method of claim 1, wherein

said querying step comprises the step of requesting geographic coordinates which locate said pervasive device.

5. A non-transitory computer-readable storage device having stored thereon a computer program for secured messaging, said computer program comprising a set of instructions which when executed by a processor causes a computer to perform the steps of:

receiving from over a public computer communications network, by a receiving computing device of an intended message recipient, an encrypted message from a computing device of a message source, said message having been encrypted using an encryption key based on a token uniquely identifying a pervasive device personally associated with the message recipient and separate from the receiving computing device; and

,

responding to the receipt of the encrypted message in the receiving computing device by establishing a short-range wireless link with the pervasive device, querying said pervasive device over said wireless link, obtaining by the receiving device from the pervasive device over the short-range wireless link a decryption key formulated based upon the token and decrypting said encrypted message received from the computing device of the message source, by the receiving computing device, using said obtained decryption key from the pervasive device from over the short range wireless link.

6. The computer-readable storage of claim 5, wherein

said establishing step comprises the step of establishing a Bluetooth link with said pervasive device.

7. The computer-readable storage of claim 5, wherein

said querying step comprises the step of sending a request to said pervasive device, said request comprising one of a request for said token, a request for an decryption key based upon said token, and a request for an acknowledgment of said request.

8. The computer-readable storage of claim 5, wherein

said querying step comprises the step of requesting geographic coordinates which locate said pervasive device.