Patent ID: 9270663
Filing Date: 2016-02-23
CPC Classification: H04L

Claim Text:
1. A system of establishing and authenticating a persistent and revocable secure line of communication comprising: a plurality of client devices, each of the plurality of client devices including a client app that includes a local key store module (LKSM) and a digital identity token; and a trusted third party server including a user facing domain and a key escrow domain; wherein the user facing domain securely relates to the plurality of client devices via the client app and includes a login interface, a hardware security module (HSM), or a lightweight directory access protocol application (LDAP); wherein the key escrow domain authenticates secure lines of communication among the plurality of client devices and includes registration authority, certificate authority, or attribute authority; wherein the trusted third party server is configured to execute an invitation protocol including: authenticating a first client device and a second client device; conveying an invitation from the first client device to the second device to establish a communication line between the first client device and the second client device; providing downloaded software to the second client device; triggering a series of authentication steps to be performed by the second device to ensure the downloaded software is correctly provisioned; receiving a response to the invitation from the second device at the first device; storing a created public key corresponding to the established communication line; storing only a portion of a created private key corresponding to the established communication line; wherein the first client device or the second client device is configured to reconstruct a complete version of the created private key with information retrieved from the trusted third party server after authenticating the trusted third party server; and wherein the invitation includes a client app with a digital identity token, email address, designated attributes, authentication question, answer to authentication question, or a cryptographic digital signature.