Source: http://www.google.com/patents/US20030147536?dq=5,490,216
Timestamp: 2016-12-02 20:07:54
Document Index: 129293818

Matched Legal Cases: ['art 500', 'art 550', 'art 600', 'art 650', 'art 700', 'art 750', 'art 800']

Patent US20030147536 - Secure electronic messaging system requiring key retrieval for deriving ... - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inPatentsA secure electronic messaging system permits communication between registered users, with the assistance of a key server. The system requires a recipient to submit key retrieval information to a key server, and obtain decryption key information. The decryption key information is necessary for the recipient...http://www.google.com/patents/US20030147536?utm_source=gb-gplus-sharePatent US20030147536 - Secure electronic messaging system requiring key retrieval for deriving decryption keysAdvanced Patent SearchTry the new Google Patents, with machine-classified Google Scholar results, and Japanese and South Korean patents.Publication numberUS20030147536 A1Publication typeApplicationApplication numberUS 10/062,551Publication dateAug 7, 2003Filing dateFeb 5, 2002Priority dateFeb 5, 2002Also published asCA2475489A1, CN1647442A, EP1479188A1, US7146009, WO2003067809A1Publication number062551, 10062551, US 2003/0147536 A1, US 2003/147536 A1, US 20030147536 A1, US 20030147536A1, US 2003147536 A1, US 2003147536A1, US-A1-20030147536, US-A1-2003147536, US2003/0147536A1, US2003/147536A1, US20030147536 A1, US20030147536A1, US2003147536 A1, US2003147536A1InventorsDimitrios Andivahis, Shawn Carnell, Addison Fischer, Albert WettlauferOriginal AssigneeAndivahis Dimitrios Emmanouil, Carnell Shawn Michael Edwards, Fischer Addison Mcelroy, Wettlaufer Albert JohnExport CitationBiBTeX, EndNote, RefManPatent Citations (36), Referenced by (186), Classifications (10), Legal Events (9) External Links: USPTO, USPTO Assignment, EspacenetSecure electronic messaging system requiring key retrieval for deriving decryption keys
What is claimed is: 1. A method for secure communication of a message M between a sender and a recipient, with the assistance of a key server, the method comprising the steps of: the sender encrypting the message M with a symmetric key Ks to form an encrypted message; the sender encrypting first information derived from the symmetric key Ks, using a public encryption key Ke of the recipient; the key server storing decryption key information needed by the recipient to form a decryption key suitable for decrypting the encrypted message; the sender receiving key retrieval information Kr which indexes the decryption key information; the sender sending to the recipient, at least the encrypted message and the key retrieval information Kr; the recipient sending the key retrieval information Kr to the key server and receiving the decryption key information in response thereto; the recipient forming the symmetric key Ks from at least the decryption key information and a private decryption key Kd of the recipient; and the recipient decrypting the encrypted message with the symmetric key Ks; without the message or the encrypted message being sent to the key server. 2. The method according to claim 1, wherein: the first information is the symmetric key Ks; the sender encrypts the symmetric key Ks with the recipient's public encryption key Ke to thereby form an encrypted symmetric key Kse; and the recipient decrypts the encrypted symmetric key Kse with the recipient's private decryption key Kd, to thereby form the symmetric key Ks, prior to decrypting the encrypted message. 3. The method according to claim 2, wherein: the sender splits the encrypted symmetric key Kse into first and second split-key fragments Kse1 and Kse2, respectively; the sender sends the second split key fragment Kse2 to the key server; the key server stores the second split-key fragment Kse2 as the decryption key information; the sender sends the first split-key fragment Kse1 to the recipient, in addition to the encrypted message and the key retrieval information Kr; the recipient receives the second split-key fragment Kse2 in response to sending the key retrieval information Kr to the key server; and the recipient forms the encrypted symmetric key Kse from the first and second split-key fragments, Kse1 and Kse2, respectively. 4. The method according to claim 2, wherein: the sender sends the encrypted symmetric key Kse to the key server; the key server stores the encrypted symmetric key Kse as the decryption key information; and the recipient receives the encrypted symmetric key Kse in response to sending the key retrieval information Kr to the key server. 5. The method according to claim 2, wherein the key server generates the key retrieval information Kr and the sender generates the symmetric key Ks. 6. The method according to claim 1, wherein: the key server splits the symmetric key Ks into first and second split-key fragments Ks1 and Ks2, respectively, and stores the second split-key fragment Ks2 as the decryption key information; the sender obtains the first and second split-key fragments Ks1 and Ks2, respectively, the first split-key fragment Ks1 is the first information and is encrypted by the sender using the recipient's public encryption key Ke, to form an encrypted first split-key fragment Kse1; the sender sends to the recipient, the encrypted first split-key fragment Kse1, along with the encrypted message and the retrieval information Kr; the recipient decrypts the encrypted first split-key fragment Kse1 with the recipient's private decryption key Kd, to thereby form the first split-key fragment Ks1; the recipient receives the second split-key fragment Ks2 in response to sending the key retrieval information Kr to the key server; and the recipient forms symmetric key Ks from the first and second split-key fragment Ks1 and Ks2, respectively, prior to decrypting the encrypted message. 7. The method according to claim 6, wherein: the key server sends to the sender, the first and second split-key fragments Ks1 and Ks2, respectively, so that the sender obtains Ks1 and Ks2; and the sender combines Ks1 and Ks2 received from the key server, to form symmetric key Ks, prior to the sender encrypting message M. 8. The method according to claim 6, wherein: the key server sends the symmetric key Ks to the sender, prior to the sender encrypting message M; and the sender splits the symmetric key Ks into said first and second split-key fragments Ks1 and Ks2, respectively. 9. The method according to claim 6, wherein the key server generates the key retrieval information Kr and also generates the symmetric key Ks. 10. A method for secure communication of a message M between a sender and a recipient, with the assistance of a key server, the method comprising the steps of: the sender obtaining a symmetric key Ks and encrypting the message M with said symmetric key Ks to thereby form an encrypted message Me; the sender encrypting first information comprising the symmetric key Ks with a public encryption key Ke associated with the recipient to thereby form an encrypted symmetric key Kse; the sender forming first and second split-key fragments Kse1 and Kse2, respectively, from said encrypted symmetric key Kse; the sender sending the second split-key fragment Kse2 to the key server; the key server storing decryption key information needed by the recipient to form a decryption key suitable for decrypting the encrypted message, the decryption key information being formed from the second split-key fragment Kse2; the key server transmitting to the sender, key retrieval information Kr that indexes the decryption key information; the sender transmitting to the recipient, the encrypted message Me, the first split-key fragment Kse1 and the key retrieval information Kr; the recipient transmitting the key retrieval information Kr to the key server and receiving said decryption key information in response thereto; the recipient forming the encrypted symmetric key Kse from the first split-key fragment Kse1 and Kse2, Kse2 being derived from the decryption key information; the recipient decrypting the encrypted symmetric key Kse with a private decryption key Kd of the recipient to thereby form the symmetric key Ks; and the recipient decrypting the encrypted message Me with the symmetric key Ks to read the original message M. 11. The method according to claim 10, comprising the additional step of adding at least one of signing data and timestamp data to the message M, before encrypting the message with said symmetric key Ks. 12. The method according to claim 10, wherein the decryption key information comprises the second split-key fragment Kse2. 13. The method according to claim 10, wherein the sender generates the symmetric key Ks. 14. A method for secure communication of a message M between a sender and a recipient, with the assistance of a key server, the method comprising the steps of: the sender obtaining a symmetric key Ks and encrypting the message M with said symmetric key Ks to thereby form an encrypted message Me; the sender encrypting first information comprising the symmetric key Ks with a public encryption key Ke associated with the recipient to thereby form an encrypted symmetric key Kse; the sender sending the encrypted symmetric key Kse to the key server; the key server storing decryption key information needed by the recipient to form a decryption key suitable for decrypting the encrypted message, the decryption key information being formed from the encrypted symmetric key Kse; the key server transmitting to the sender, key retrieval information Kr that indexes the decryption key information; the sender transmitting to the recipient, the encrypted message and the key retrieval information Kr; the recipient transmitting the key retrieval information to the key server and receiving said decryption key information in response thereto; the recipient deriving the encrypted symmetric key Kse from said decryption key information; the recipient decrypting the encrypted symmetric key Kse with a private decryption key Kd of the recipient to thereby form the symmetric key Ks; and the recipient decrypting the encrypted message Me with the symmetric key Ks to read the original message M. 15. The method according to claim 14, comprising the additional step of adding at least one of signing data and timestamp data to the message M, before encrypting the message with said symmetric key Ks. 16. The method according to claim 14, wherein the decryption key information comprises the encrypted symmetric key Kse. 17. The method according to claim 14, wherein the key server generates the symmetric key Ks. 18. A method for secure communication of a message M between a sender and a recipient, with the assistance of a key server, the method comprising the steps of: the key server obtaining first and second split-key fragments Ks1 and Ks2, respectively, corresponding to a symmetric key Ks; the key server storing decryption key information needed by the recipient to form a decryption key suitable for decrypting the encrypted message, the decryption key information being formed from the second split-key fragment Ks2; the key server transmitting to the sender, a public encryption key Ke associated with the recipient, symmetric key information sufficient to form Ks, and key retrieval information Kr that indexes the decryption key information; the sender encrypting the message M with Ks to thereby form an encrypted message Me, the sender also encrypting first information comprising the first split-key fragment Ks1 with the recipient's public encryption key Ke to form an encrypted first split-key fragment Kse1; the sender transmitting to the recipient, the encrypted message Me, the key retrieval information Kr, and the encrypted first split-key fragment Kse1; the recipient transmitting the key retrieval information Kr to the key server and receiving said decryption key information in response thereto; the recipient decrypting the encrypted first split-key fragment Kse1 with a private decryption key Kd of the recipient to thereby form the first split-key fragment Ks1; the recipient forming Ks from the first and second split-key fragments Ks1 and Ks2, respective, Ks2 being derived from the decryption key information; and the recipient decrypting the encrypted message Me with the symmetric key Ks to read the original message M. 19. The method according to claim 18, comprising the additional step of adding at least one of signing data and timestamp data to the message M, before encrypting the message with Ks. 20. The method according to claim 18, wherein the decryption key information comprises the second split-key fragment Ks2. 21. The method according to claim 18, wherein: the decryption key information comprises an encrypted second split-key fragment Kse2 formed by encrypting the second split-key fragment Ks2 with the recipient's public encryption key Ke; and the recipient forms Ks2 by decrypting Kse2 with the recipient's private decryption key Kd. 22. The method according to claim 18, wherein the symmetric key information comprises the symmetric key Ks, and wherein the sender forms the first split-key fragment Ks1 from the symmetric key Ks received from the key server. 23. The method according to claim 18, wherein the symmetric key information comprises the first and second split-key fragments Ks1 and Ks2, respectively. 24. The method according to claim 18, wherein: the symmetric key information comprises the first and second split-key fragments Ks1 and Ks2, respectively; and. the decryption key information comprises the second split-key fragment Ks2. 25. A method of operating a key server in a secure communication system to facilitate secure transmission of a message M between a first entity and a second entity, the method comprising the steps of: during a first sequence of exchanges: receiving from a first entity, a request to provide a public encryption key Ke corresponding to a second entity specified by the first entity; transmitting to the first entity, said public encryption key Ke; storing decryption key information needed by the second entity to form a decryption key suitable for decrypting an encrypted version of message M; transmitting to the first entity, key retrieval information Kr which indexes said decryption key information; and during a second sequence of exchanges: receiving from the second entity, the key retrieval information Kr; and transmitting to the second entity, said decryption key information, without ever receiving the message or the encrypted version of the message. 26. The method according to claim 25, comprising the step of receiving from the first entity, the decryption key information, prior to the step of storing the decryption key information. 27. The method according to claim 26, wherein the decryption key information comprises a split-key fragment of a symmetric key encrypted by said public encryption key Ke. 28. The method according to claim 26, wherein the decryption key information comprises a symmetric key encrypted by said public encryption key Ke. 29. The method according to claim 25, further comprising during the first sequence of exchanges, the steps of: providing first and second split-key fragments Ks1 and Ks2, respectively, associated with a symmetric key Ks; and transmitting to the first entity, said first and second split-key fragments Ks1 and Ks2 in addition to the public encryption key Ke and the key retrieval information Kr. 30. The method according to claim 29, wherein the decryption key information comprises the second split-key fragment Ks2. 31. The method according to claim 25, further comprising during the first sequence of exchanges, the steps of: the key server checking whether the second entity is a registered user of the secure communication system, and if the second entity is not a registered user: the key server generating an encryption key and a decryption key for the second entity, and the key server sending the encryption key to the first entity, along with a notification that the second entity is not a registered user. 32. The method according to claim 31, further comprising during the second sequence of exchanges, the step of: if the second entity is not a registered user, inviting the second entity to register; and sending the decryption key to the second entity. 33. A key server computer in a secure communication system configured to facilitate secure transmission of a message M between a sender and a recipient, the key server computer being programmed to: during a first sequence of exchanges: receive from a first entity, a request to provide a public encryption key Ke corresponding to a second entity specified by the first entity; transmit to the first entity, said public encryption key Ke; store decryption key information needed by the second entity to form a decryption key suitable for decrypting an encrypted version of message M; transmit to the first entity, key retrieval information Kr which indexes said decryption key information; and during a second sequence of exchanges: receive from the second entity, the key retrieval information Kr; and transmit to the second entity, said decryption key information, without having to receive the message or the encrypted version of the message. 34. A computer-readable memory having executable code stored thereon, the code including: a first set of code comprising: code to receive from a first entity, a request to provide a public encryption key Ke corresponding to a second entity specified by the first entity; code to transmit to the first entity, said public encryption key Ke; code to store decryption key information needed by the second entity to form a decryption key suitable for decrypting an encrypted version of a message M; code to transmit to the first entity, key retrieval information Kr which indexes said decryption key information; and a second set of code comprising: code to receive from the second entity, the key retrieval information Kr; and code to transmit to the second entity, said decryption key information. 35. A method for secure communication of a message M between a sender and a recipient, with the assistance of a key server, the method comprising the steps of: the sender encrypting the message M with a message encryption key Kme to form an encrypted message; the sender encrypting first information derived from a message decryption key Kmd corresponding to the message encryption key Kme, using a public encryption key Ke of the recipient; the key server storing decryption key information needed by the recipient to form said message decryption key Kmd suitable for decrypting the encrypted message; the sender receiving key retrieval information Kr which indexes the decryption key information; the sender sending to the recipient, at least the encrypted message and the key retrieval information Kr; the recipient sending the key retrieval information Kr to the key server and receiving the decryption key information in response thereto; the recipient forming the message decryption key Kmd from at least the decryption key information and a private decryption key Kd of the recipient; and the recipient decrypting the encrypted message with the message decryption key Kmd; without the message or the encrypted message being sent to the key server. 36. The method according to claim 35, wherein the message encryption key Kme and the message decryption key Kmd form an asymmetric key pair. 37. The method according to claim 35, wherein the message encryption key Kme and the message decryption key Kmd are identical and are a symmetric key Ks. 38. A method for secure communication of a message M between a sender and a recipient, with the assistance of a key server, the method comprising the steps of: the sender encrypting the message M with a message encryption key Kme to form an encrypted message; the sender encrypting first information derived from a message decryption key Kmd corresponding to the message encryption key Kme, using a public encryption key Ke of the recipient; the key server storing decryption key information needed by the recipient to form said message decryption key Kmd suitable for decrypting the encrypted message; the sender sending to the recipient, at least the encrypted message; the recipient sending key retrieval information Kr to the key server which indexes the decryption key information, and receiving the decryption key information in response thereto; the recipient forming the message decryption key Kmd from at least the decryption key information and a private decryption key Kd of the recipient; and the recipient decrypting the encrypted message with the message decryption key Kmd; without the message or the encrypted message being sent to the key server. 39. The method according to claim 38, wherein the message encryption key Kme and the message decryption key Kmd form an asymmetric key pair. 40. The method according to claim 38, wherein the message encryption key Kme and the message decryption key Kmd are identical and are a symmetric key Ks. 41. The method according to claim 38, wherein the recipient creates the key retrieval information Kr based on information received from the sender. 42. The method according to any one of claims 1, 10, 14 or 18, further comprising, by the sender, establishing at least one policy governing the retrieval of decryption key information. 43. The method according to any one of claims 1, 10, 14, 18 or 25, further comprising, by the key server, establishing at least one policy governing the retrieval of decryption key information. 44. The method according to any one of claims 1, 10, 14, or 18 further comprising: updating a first audit log at the key server to reflect at least one of storing the decryption key information and sending the decryption key information to the recipient; and updating a second audit log at the sender to reflect transmission of a message from the sender to the recipient. 45. The method according to claim 44, further comprising: verifying a correspondence between entries in the first audit log that correspond to messages sent by the sender, with entries in the second audit log. 46. The method according to any one of claims 1, 10, 14, or 18 further comprising: the sender requesting that the recipient attest to the sender's identity.
TECHNICAL FIELD [0001] The present invention is directed to a secure electronic messaging system for a community of users through the auditable use of private/public key pairs. BACKGROUND OF INVENTION [0002] There are various systems that allow users to securely exchange electronic messages such as e-mail and instant messages. To send Internet e-mail, the sender assembles the message contents, affixes to the message the Internet e-mail addresses of the desired recipient(s), possibly invokes a signing scheme that certifies that the message was composed by the sender and not modified in transit, possibly invokes an encryption scheme that secures access to contents of the message by the recipients only, and transmits the message using the Internet e-mail infrastructure. [0003] To exchange information in an Instant Messaging (IM) system, a user authenticates herself to an IM system, selects the recipient among the available community of users, prepares the message contents, and transmits the message through the IM infrastructure. Encryption services may be provided by the IM service based on the credentials of the authenticated users. [0004] [0004]FIG. 1 shows a prior art communication architecture 100 that allows a sender 110 and a recipient 120 to exchange an encrypted message Me over a network 130. In this instance, the sender 110 and recipient 120 are part of a community of users that use public/private key pairs for the purposes of digitally signing and encrypting their communication. The Key Server 140 allows the sender 110 and recipient 120 to obtain other users' public keys and participate in the generation and/or controlled access of symmetric key fragments for a given messaging session. A database 142 associated with the Key server 140 keeps information about the sender and the receiver and the keys that they've used. The network 130 can be a local area net (LAN), a wide area net (WAN), the Internet, or any of a number of other types of communication infrastructures. SUMMARY OF THE INVENTION [0005] The present invention is directed to a system and method for secure communication of electronic messages and electronic data streams amongst a community of users, in such a way that their use of private/public key pairs for authentication and encryption purposes be recorded and auditable. [0006] In the present invention, the principal entities are a sender, a recipient and a key server. The sender wishes to send an encrypted message to the recipient, and this is facilitated by the key server. The key server sends key retrieval information to the sender. The key retrieval information references decryption information that is required to decrypt an encrypted message. The sender sends the encrypted message and the key retrieval information to the recipient. The encrypted message itself is not sent to the key server. The recipient then sends the key retrieval information to the key server and receives the decryption information in response. The recipient then uses the decryption information to decrypt the encrypted message. [0007] In one aspect of the present invention, the sender of a data message accesses the key server to obtain public key information about the intended recipient of the data message. Either the key server or the sender, or both in cooperation, generate either a symmetric encryption key or an asymmetric encryption key pair. The sender uses the appropriate encryption key to encrypt the data message contents. The decryption key (which is either the symmetric key or the decryption portion of the asymmetric key pair) is split into a first portion and a second portion. The second portion is stored by the key server. The sender forms a transmission package comprising the encrypted data message, the first portion of the decryption key, and key retrieval information for a recipient to obtain the second portion of the decryption key. Optionally, in the transmission package, the first portion of the decryption key and/or the key retrieval information may themselves be encrypted by the recipient's public encryption key. In any event, the transmission package is then sent to the recipient. The recipient unpacks the transmission package, and decrypts the first portion of decryption key and/or the key retrieval information, if needed. The recipient then creates and sends a key retrieval request comprising the recipient's identification information and the key retrieval information to the key server. In response to a proper key retrieval request, the key server returns the second, complementary portion of the decryption key to the recipient. The recipient then combines the first and second portions of the decryption key to decrypt the encrypted data message to access the original data message. [0008] In another aspect of the present invention, the sender does not break up the decryption key into first and second portions. Instead, the sender sends the entire decryption key to the key server, and the key server sends the key retrieval information corresponding to the stored decryption key back to the sender. In this instance, the sender sends only the encrypted data message and the key retrieval information to the recipient, who then sends the key retrieval information to the server to obtain the entire decryption key. [0009] In yet another aspect of the present invention, the key server creates the encryption key, stores the decryption key, and sends the encryption key to the sender, along with the key retrieval information. The sender sends the encrypted data message and the key retrieval information to the recipient, who then sends the key retrieval information to the server to obtain the decryption key. [0010] The present invention is also directed to a message audit system. The key server maintains a database of all transactions associated with each key. A sender, or other authorized entity, is permitted to access transaction information concerning that sender's keys. This permits the sender to view a key transaction log showing the status of the various keys used by that sender. The key transaction log may thus show whether a recipient submitted a key retrieval request to obtain the decryption key information, thereby indicating whether or not the recipient could have read the message. If the key transaction log indicates that the decryption key information corresponding to a transmission package has not yet been retrieved, the sender optionally may effectively cancel the message, by submitting a key-cancellation request which informs the key server to no longer honor the corresponding key retrieval request. This would prevent the recipient from obtaining the decryption key information, and thereby preclude the recipient from ever reading the encrypted message, since the recipient, though it may have the encrypted message, cannot read it since it can no longer obtain the decryption key information necessary to read the encrypted message.
BRIEF DESCRIPTION OF THE DRAWINGS [0011] The present invention is now described with respect to the following detailed description and drawings in which: [0012] [0012]FIG. 1 shows the architecture of a general prior art communication system between a second and a receiver over a network, with the assistance of a key server; [0013] [0013]FIG. 2 shows the message flow in accordance with a first embodiment of the present invention; [0014] [0014]FIG. 3 shows the message flow in accordance with a second embodiment of the present invention; [0015] [0015]FIG. 4 shows the message flow in accordance with a third embodiment of the present invention; [0016] [0016]FIGS. 5a & 5 b are flowcharts describing the sender's and receiver's actions, respectively, in accordance with the first embodiment of the present invention; [0017] [0017]FIGS. 6a & 6 b are flowcharts describing the sender's and receiver's actions, respectively, in accordance with the second embodiment of the present invention; [0018] [0018]FIGS. 7a & 7 b are flowcharts describing the sender's and receiver's actions, respectively, in accordance with the third embodiment of the present invention; and [0019] [0019]FIG. 8 illustrates the registration process for a new registrant who wishes to register with the system.
DETAILED DESCRIPTION OF THE INVENTION [0020] In the present description, it should be noted that the term ‘sender’ can refer to either a person, or to the client program which transmits the message, while the term ‘recipient’ can refer to either the person, or to the client program which receives the message transmitted by the sender. In the present parlance, ‘key server’ refers to the platform and to the server-end computer program residing thereon, which is programmed to perform the duties associated with such an entity. It is understood that the executable software code comprising the key server, the sender and the recipient may each reside in the computer-readable memory of a general purpose, or other computer, or even a specialized computer. Furthermore, the software can be distributed in any number of forms of computer-readable memory, such from servers on a web site, floppy disks, CD-ROMs, tapes, and the like. [0021] For the purposes of the present disclosure, a sender and a recipient may themselves each be on a separate (or even a common) network having one or more nodes through which the sender or receiver communicates to the outside world Such a network may have, among other things, an Internet gateway, a store-and-forward e-mail server, and other well-known assets. [0022] In the following discussion, various embodiments of a messaging session are presented in which a sender communicates with a recipient via the Internet e-mail infrastructure and communicates with a key server via the HTTP messaging protocol. It should be kept in mind, however, that the system described below is independent of infrastructure and so may operate over a wireless network in addition to, or in conjunction with, any other data carriers. It should also be kept in mind, however, that other communication channels (instant messaging) and other communication protocols (e.g., ftp, TCP-IP) may likewise be used and are contemplated as being within the scope of the present invention. [0023] In the case of e-mail, senders and recipients are used by persons, who interact with software programs called mail user agents (MUAs) to compose and transmit Internet e-mail messages. Accordingly, the computers associated with such users (referred to for convenience as a “sender computer” and “recipient computer”) typically are provided with an MUA program along with the necessary means for contacting the Internet e-mail infrastructure. Furthermore, these computers are normally provided with one or more input devices such as a keyboard, a mouse, along with both volatile and non-volatile memories, all as known to those skilled in the art. It should be noted, however, that senders and the recipients may instead be software programs not normally operated by a user, but rather operating in an unattended “server” mode. [0024] First Embodiment [0025] [0025]FIG. 2 presents the message flows 200 in accordance with a first embodiment of the present invention, with reference to a sender 210, a recipient 220 and a key server 240 having an associated memory comprising a database 242. Database 242 stores information about registered users of the system, including their e-mail addresses and their preferred public encryption keys, and also stores key usage information, decryption key information indexed by retrieval information (discussed below), and the like. [0026] Prior to any action depicted in FIG. 2, an authentication process takes place between the sender 210 and the key server 240 to open a connection between the two. For this, the sender sends an authentication request message to the key server and the latter responds with a number of strings of random bits, one such string to be used for each message sent to the key server. The sender then digitally signs each string of random bits as a message is sent, and key server can confirm that that message was sent by the sender. The sender may use any of the well-established, standard signing techniques using a private signing key, for example by digesting and encryption with RSA key pairs. The key server, for its part, may verify the sender's signature by using the sender's public signing key. Henceforth, this type of authentication information is preferably included with each message sent by the sender to the key server. [0027] [0027]FIG. 5a presents a flowchart 500 illustrating the principal steps experienced by the sender 210 in the first embodiment. [0028] In step 502, the sender and the key server establish a communication link and the sender is authenticated. Authentication may entail, for example, checking the sender's identifying information, such as the sender's e-mail address and making sure that the sender is registered with the system. [0029] In step 504, the sender 210 sends a recipient public key request 251 to the key server 240, and this is received by the server. The recipient public key request preferably includes the authentication information, the sender's identifying information, and a data field comprising a designation of the intended recipient's identifying information (preferably in the form of a recipient's e-mail address). This message 251 requests the recipient's public encryption key. If the e-mail message is to go to more than one recipient, the recipient field includes the e-mail address of each recipient designated in the data field. [0030] In step 506, the key server checks the database 242 to make sure that the sender's 210 account is current. If the sender's account is not current, the key server so informs the sender in step 508. [0031] In step 510, if the sender's account is current, the key server 240 next consults the database to retrieve information about the recipient 220 identified in recipient public key request. The key server 240 then prepares a recipient public key response 252 which preferably includes a message identifier to track the message, a data field comprising the recipient's 220 preferred public encryption key Ke, and related auditing information. If the recipient public key request 251 listed more than one recipient, the data field comprises an array of keys, one for each recipient. The message identifier, however, is uniquely assigned to this message being sent by the sender to the recipient(s). The key server 240 also keeps track of the event—the time at which the sender 210 requested the recipient's 220 public encryption key. Finally, the key server 240 sends the recipient public key response 252 to the sender 210. [0032] It may be possible that a recipient designated by the sender is not registered to use the system. This scenario, with an unregistered recipient, is discussed further below. [0033] In step 512, the sender 210 generates a symmetric key Ks. It should be noted, however, that Ks may have been generated even before the sender sent the recipient public key request to the key server 240. The sender then encrypts symmetric key Ks using the recipient's public encryption key Ke (provided in the recipient public key response) to thereby form Kse, which can only be decrypted by the recipient 220 using the recipient's private decryption key Kd corresponding to the recipient's public encryption key Ke. The sender next cryptographically splits Kse into a first split-key fragment Kse1 and a second split-key fragment Kse2, both of which are required to create Kse. This can be done, for instance by using well-established techniques to form two fragments Kse1, Kse2 which, when XORed together, result in the encrypted symmetric key Kse. If more than one recipient has been designated, this process is done for each such recipient using that recipient's corresponding public encryption key. [0034] In step 514, the sender 210 then sends a key fragment storage request 253 to the key server 240. The key fragment storage request preferably includes the authentication information, the message identifier, the sender's identifying information, a first data field comprising the recipient's identifying information, a second data field comprising the second split-key fragment Kse2 for that recipient, and perhaps also related auditing information. If more than one recipient is involved, then the first and second data fields effective comprise an array mapping each recipient to that recipient's second split-key fragment. [0035] In step 516, the key server 240 sends an archival message 254 to database 242 to store decryption key information comprising Kse2 cross-referenced by recipient's e-mail address and the message identifier. The decryption-key information preferably also is cross-referenced by the sender's identifying information. The key server 240 also generates key retrieval information Kr. The key retrieval information Kr may be in universal resource locator (URL) format, or may be some other identifier which indexes a record comprising at least Kse2. If more than one recipient was designated, this process is performed for each. [0036] In step 518, if the archival storage and the generation of Kr is successful, the key server 240 then sends a key storage response 255 which preferably includes the message identifier and the key retrieval information Kr for retrieving Kse2. If either the archival storage or Kr generation is unsuccessful, an error message is sent to the sender in step 520. [0037] In step 522, the sender 210 receives the key storage response, optionally signs (with the sender's own private signing key) and optionally securely timestamps the original message M, and if applicable, attaches the signature data S and the timestamp data T generated by these two processes. Secure timestamping may be performed in any number of ways, such as those disclosed in U.S. Pat. Nos. 5,136,646 and 5,136,647. The sender's signature data S and the timestamp data T, if present, are appended to the original message and then encrypted together using the symmetric key Ks to form an encrypted message Me. The sender next attaches the first split-key fragment Kse1 and the key retrieval information Kr to the encrypted message Me. The message identifier and additional auditing information may also be attached. This process creates a composite message C1. It should be noted, however, that the encryption step can take place either before or after the key Kse is split, and any time after Ks is generated and the message has been optionally signed and/or securely timestamped. [0038] Finally, in step 524, the sender 210 then transmits the composite message 256 to the recipient 220 using the typical MUA functionality. Alternatively, for security reasons, the encrypted message Me may be sent separately from the remaining data. [0039] [0039]FIG. 5b presents a flowchart 550 illustrating the principal steps experienced by the recipient 220 in the first embodiment. [0040] In step 552, the recipient 220 receives the composite message C1 and in step 554 unpacks' at least the encrypted message Me, the first split-key fragment Kse1 and the key retrieval information Kr. [0041] In step 556, the recipient 220 and the key server 240 establish a communication link and the recipient is authenticated. Authentication may entail, for example, checking the recipient's identifying information, such as the recipient's e-mail address and making sure that the recipient is registered with the system. [0042] In step 558, after authentication, the recipient 220 sends and the key server 240 receives, a key fragment retrieval request 257. The key fragment retrieval request has a number of fields and preferably includes the recipient's authentication information, the message identifier (if received from the sender in the composite message C1), the recipient's identifying information (such as the recipient's e-mail address), the key retrieval information Kr, and perhaps also additional auditing information. It should be noted here that the message identifier and the key retrieval information may be identical, and in such case only one field may be used. If more than one recipient was originally designated, each recipient must independently send such a key fragment retrieval request to be able to read the encrypted message. The key server 240, upon receiving the key fragment retrieval request, first checks to see whether the recipient's account 220 is current, and whether the recipient is entitled to receive the decryption key information. If the recipient's account is not current, the recipient is so notified in step 560. [0043] In step 562, assuming that the recipient's account is current, the key server 240 retrieves the archived second split-key fragment Kse2 referenced by Kr. If the retrieval of Kse2 is successful, the key server 240 then sends a key fragment retrieval response 258 back to the recipient 220 in step 560. The key fragment retrieval response preferably includes the message identifier, the second split-key fragment, and perhaps also auditing information. The key server 240 also updates the database 242 to reflect the fact that the recipient submitted the key retrieval information Kr and was sent the second split-key fragment Kse2. The sender, by logging onto the key server 240, can determine whether the recipient retrieved Kse2 (and therefore presumably was able to read the message). Alternatively, the key server may be set up to automatically send a fax or e-mail to the sender, to notify the sender that the key retrieval information corresponding to one or more of the sender's outgoing encrypted messages, has been presented by a recipient. [0044] In step 564, the recipient 220, upon receiving Kse2 (sent by the key server in the key fragment retrieval response), then cryptographically combines Kse1 (which was in the composite message C1) with Kse2 to re-create Kse. The recipient then decrypts Kse using his own private decryption key Kd, to thereby produce symmetric key Ks. [0045] In step 566, the recipient then uses symmetric key Ks to decrypt the encrypted message Me sent by the sender. In the event that the sender originally appended either signature data S and/or timestamp data T, these can be verified by the recipient in a known manner, which may entail an additional request to key server (such as to obtain the sender's public signing key) or a request to a secure timestamp server for verification of the timestamp data T. [0046] In the first embodiment described above, the key server 240 never has both of the split-key fragments Kse1 and Kse2. Therefore, in the first embodiment, even if the key server 240 were to somehow obtain the encrypted message Me, it could not decrypt the message, since it only has one of the two split-key fragments. [0047] Second Embodiment [0048] [0048]FIG. 3 presents the message flows 300 in accordance with a second embodiment of the present invention, with reference to a sender 310, a recipient 320 and a key server 340 having an associated memory comprising a database 342. The sequence of messages in this embodiment is substantially the same as in the first embodiment, the principal difference being the content of some of the message flows. [0049] [0049]FIG. 6a presents a flowchart 600 illustrating the principal steps experienced by the sender 310 in the second embodiment. [0050] In step 602, the sender 310 and the key server 340 establish a communication link and the sender is authenticated. Authentication may entail, for example, checking the sender's identifying information, such as the sender's e-mail address and making sure that the sender is registered with the system. [0051] In step 604, the sender 310 sends a recipient public key request 351 to the key server 340, and this is received by the key server. The recipient public key request preferably includes the authentication information, the sender's identifying information, and a data field comprising a designation of the intended recipient's identifying information (preferably in the form of a recipient's e-mail address). This message 351 requests the recipient's public encryption key. If the e-mail message is to go to more than one recipient, the recipient field includes the e-mail address of each recipient designated in the data field. [0052] In step 606, the key server 340 checks the database 242 to make sure that the sender's 310 account is current. If the sender's account is not current, the key server so informs the sender in step 608. [0053] In step 610, if the sender's account is current, the key server 340 next consults the database to retrieve information about the recipient 320 identified in recipient public key request. The key server 340 then prepares a recipient public key response 352 which preferably includes a newly created message identifier, the recipient's 320 preferred public encryption key Ke, and related auditing information. The key server 340 also updates the database 342 to include the recipient public key request event. [0054] In step 612, the sender 310 receives the recipient public key response, generates a symmetric key Ks and encrypts the symmetric key Ks using Ke, to thereby produce encrypted symmetric key Kse. [0055] In step 614, the sender 310 then sends a key storage request 353 to the key server. This key storage request, however, includes the entire encrypted symmetric key Kse, instead of just a split-key fragment of the encrypted symmetric key. [0056] In step 616, The key server 340 sends an archival message 354 to database 242 to store decryption key information comprising Kse and generates appropriate key retrieval information Kr. If this process is not successful, an error message is sent to the sender in step 618. If, however, the archival message and the generation of Kr are successful, the key server 340 then sends a key storage response 355 in step 620. The key storage response comprises the message identifier and key retrieval information Kr to the sender 310. [0057] In step 622, the sender 310 optionally signs and/or securely timestamps the original message, and attaches the signature data and/or the timestamp data generated by these two processes, if used, to the original message. The sender then encrypts the original message (along with the signature and/or timestamp data, if present) using the symmetric key Ks to form an encrypted message Me. The sender next attaches the key retrieval information Kr to the encrypted message Me. Additional auditing information may also be attached. This process creates a composite message C2. [0058] Finally, in step 624, the sender 310 then transmits the composite message 356 to the recipient 320 using the typical MUA functionality. Alternatively, for security reasons, the encrypted message Me may be sent separately from the remaining information. [0059] [0059]FIG. 6b presents a flowchart 650 illustrating the principal steps experienced by the recipient 320 in the second embodiment. [0060] In step 652, the recipient 320 receives the composite message C2 and in step 654, ‘unpacks’ it into at least the encrypted message Me and the key retrieval information Kr. [0061] In step 656, the recipient 320 and the key server 340 establish a communication link and the recipient is authenticated. Authentication may entail, for example, checking the recipient's identifying information, such as the recipient's e-mail address and making sure that the recipient is registered with the system. [0062] In step 658, after authentication, the recipient 320 sends and the key server 340 receives, a key fragment retrieval request 357. The key retrieval request preferably includes the authentication information, a message identifier (if sent by the sender), the recipient's identifying information (such as the recipient's e-mail address), the key retrieval information Kr, and perhaps also auditing information. The key server 340 checks to see whether the recipient's 320 account is current and valid. If not, an error message is sent to the recipient 320 in step 660. [0063] In step 662, assuming the recipient's account is current and valid, the key server 340 retrieves the archived encrypted symmetric key Kse referenced by Kr, and sends a key retrieval response 358 back to the recipient 320. The key retrieval response preferably includes the message identifier, the encrypted symmetric key Kse, and perhaps also related auditing information. The key server 340 also updates the database 342 to reflect the fact that the recipient submitted the key retrieval information Kr and was sent the encrypted symmetric key Kse. The sender, by logging onto the key server 340, can determine whether the recipient retrieved Kse (and therefore presumably read the message). [0064] In step 664, the recipient 320, upon receiving Kse from the key server, then decrypts Kse using his own private decryption key Kd, to thereby produce symmetric key Ks. [0065] Finally, in step 666, the recipient may then use symmetric key Ks to decrypt the encrypted message Me sent by the sender. After decryption of Me, the recipient may then verify the signature data S and the timestamp T, if present. [0066] Third Embodiment [0067] [0067]FIG. 4 shows the message flow 400 for a third embodiment of the present invention, with reference to a sender 410, a recipient 420 and a key server 440 having an associated memory comprising a database 442. The sequence of messages in this embodiment differs somewhat from the corresponding sequences for the first and second embodiments. [0068] [0068]FIG. 7a presents a flowchart 700 illustrating the principal steps experienced by the sender 410 in the third embodiment. [0069] In step 702, the sender 410 and the key server 440 establish a communication link and the sender is authenticated, just as in the above-described embodiments. [0070] In step 704, the sender 410 sends, and the key server 440 receives, the recipient public key request for the intended recipient 420, again, just as in the first and second embodiments. [0071] In step 706, the key server 440 checks to see whether the sender's 410 account is current. [0072] If the sender's account is not current, the key server 440 informs the sender 410 of this in step 708. [0073] In step 710, assuming the senders' account is current, the key server 440 generates a symmetric key Ks and cryptographically splits the symmetric key Ks into two split-key fragments Ks1 and Ks2. The key server 440 then sends an archival message 452 to database 442 to store decryption key information comprising Ks2 (or its encrypted version Kse2 formed with the recipient's public encryption key Ke) and generates appropriate key retrieval information Kr. The key server 440 then sends a key storage response 453 back to the sender. The key storage response preferably comprises a message identifier, the recipient's preferred public encryption key Ke, symmetric key information sufficient to form Ks2, and the key retrieval information Kr, along with additional related auditing information. The symmetric key information preferably comprises both split-key fragments Ks1 and Ks2, although it may simply be Ks2 itself. [0074] In step 712, the sender 410 combines Ks1 and Ks2 to generate Ks. (Alternatively, if the key server 440 sends Ks rather than Ks1 and Ks2 as the symmetric key information, the sender splits Ks in the exact same manner as done by the key server). The sender 410 then optionally signs and/or securely timestamps the original message, and attaches the signature data S and/or the timestamp data T generated by these two processes, if used, to the original message. The sender then encrypts the original message M (along with the signature and/or timestamp data, if used) using the symmetric key Ks to form an encrypted message Me. The sender also encrypts the split-key fragment Ks1 using the recipient's public encryption key Ke to produce the encrypted spilt-key fragment Kse1. Then sender attaches Kse1 and the key retrieval information Kr to the encrypted message Me. The message identifier and additional auditing information may also be attached. This process creates a composite message C3. [0075] Finally, in step 714, The sender 410 then transmits the composite message 454 to the recipient 420 using the typical MUA functionality. Alternatively, for security reasons, the encrypted message Me may be sent separately from the remaining data. [0076] [0076]FIG. 7b presents a flowchart 750 illustrating the principal steps experienced by the recipient 420 in the third embodiment. [0077] In step 752, the recipient 420 receives the composite message C3 and in step 754 ‘unpacks’ it into the encrypted message Me, the encrypted spilt-key fragment Kse1, and the key retrieval information Kr. [0078] In step 756, the recipient 420 and the key server 440 establish a communication link and the recipient is authenticated. Authentication may entail, for example, checking the recipient's identifying information, such as the recipient's e-mail address and making sure that the recipient is registered with the system. [0079] In step 758, after authentication, the recipient 420 sends and the key server 440 receives, a key retrieval request 455. The key retrieval request preferably includes the recipient's authentication information, the message identifier (if sent by the sender), the recipient's identifying information the key retrieval information Kr, and perhaps also auditing information. Upon receiving the key retrieval request, the key server 440 checks to see whether the recipient's 420 account is current and valid. If not, a message is sent to the recipient 420 in step 760. [0080] In step 762, assuming the recipient's account is current and valid, the key server 440 retrieves the archived split-key fragment Ks2 (or Kse2) that is referenced by Kr. The key server 440 then sends a key retrieval response 456 back to the recipient 420. The key retrieval response preferably includes the message identifier, the split-key fragment Ks2 (or Kse2), and perhaps also auditing information. The key server 440 also updates the database 442 to reflect the fact that the recipient submitted the key retrieval information Kr and was sent the split-key fragment Ks2 (or Kse2). The sender 410, by logging onto the key server 440, can determine whether the recipient retrieved Ks2 (or Kse2) (and therefore presumably read the message). [0081] In step 764, the recipient 420, upon receiving Ks2 (or Kse2) from the key server, decrypts Kse1 using the recipient's own private decryption key Kd to form Ks1, combines Ks1 with Ks2 (perhaps obtained by first decrypting Kse2 sent by the key server 440) to form symmetric key Ks. Finally, in step 766, the recipient 440 then decrypts the encrypted message Ms using Ks. The recipient may also then verify the signature data and the timestamp, as discussed above. [0082] Comparison of Embodiments [0083] In each of the above-described embodiments, each encrypted message prepared with the mediation of the Key Server results in the key server archiving some information that a recipient must obtain to decrypt the encrypted message. However, the key server never receives the message itself (whether encrypted or not). This not only saves on both bandwidth and storage space at the key server, but also provides the sender and the recipient with a measure of security since the message itself is not provided to an entity having any portion of the keys required to decrypt the message. [0084] In addition, in each of the above embodiments, the sender must use the recipient's public encryption key Ke to encrypt some information derived from the symmetric key Ks. For these purposes, the information derived from the symmetric key Ks may be Ks itself, or the split-key fragments Ks1 and/or Ks2. Furthermore, the recipient must use his private decryption key Kd, in conjunction with some information that the recipient obtains from the key server, to obtain the symmetric key Ks, before the recipient may read the encrypted message Me. [0085] In each of the above-described embodiments, it makes no difference how the sender and recipient are connected. Thus, they may use different Internet service providers and may be in different countries. All that is required is that the sender and the recipient have e-mail addresses, and that they have registered with the key server authority that operates the key server. [0086] Also, while the Key server's principal role is to mediate the encryption and key retrieval process, the Key Server may also place access restrictions upon the key based on user choices or other policies. For example, the user may specify that a key (or key fragment) may not be released until a certain time in the future or should no longer be made available either immediately or at some time in the future. Other policies may release keys based on aspects of either the sender or receiver's account history or current account status; the manner in which, the location from which, or the device with which either party attempts to gain access to the key; or other factors surrounding the transaction. Still other policies may allow for the Key Server to permanently delete a decryption key (or key fragment) from its archival area, rendering the message virtually non-decryptable. [0087] In those instances where the original message is signed by the sender, the signature may be verified by the recipient by requesting the sender's public signing key from the Key Server. And in those instances in which the original message is securely timestamped, appropriate action may be taken by the recipient to verify that the timestamp receipt matches the data that was securely timestamped. The action taken by the recipient depends, of course, on the type of Timestamping protocol used. [0088] The first embodiment of this invention offers the highest degree of security in the communication of messages between sender and recipient. At no time does the key server 240 have access to the encrypted split key Kse1. Furthermore, decryption of the encrypted message requires: [0089] (1) the encrypted split key Kse2 stored by the key server; [0090] (2) the contents of the message and its attached encrypted split key Kse1; and [0091] (3) the recipient's private decryption key Kd; [0092] The second embodiment of this invention offers a fairly strong degree of security. At no time does the key server 340 have access to an unencrypted version of key Kse. Additionally, the decryption of the message requires: [0093] (1) the encrypted symmetric key Kse stored by the key server (which the key server cannot decrypt); [0094] (2) the contents of the message; and [0095] (3) the recipient's private decryption key Kd. [0096] The third embodiment offers a strong degree of security. In this embodiment, the key server generates the symmetric key Ks, so it would be possible for an entity having access to this information to decrypt the encrypted message. Decryption of the message requires: [0097] (1) the split-key Ks2 stored by the key server (which the key server can use since it also had access to Ks1) [0098] (2) the contents of the message and the attached encrypted split key Kse1; and [0099] (3) the recipient's private decryption key Kd. [0100] In instant messaging applications, once users have interacted with the Key Server to establish a symmetric key Ks, they may communicate with each other independent of the Key Server, in a peer-to-peer way if at all possible, using the established key to maintain a secure messaging connection. This reduces the load on channel traffic and also on the demands made on the key server, or another server under the direction of the key server, to conduct an instant messaging session. [0101] Key Retrieval Strategies [0102] In the above embodiments, the key retrieval information is sent by the key server to the sender, for transmission to the recipient. It should be noted, however that the key retrieval information may instead be created by the sender and obtained by the recipient in other ways. [0103] In one set of scenarios, the key retrieval information is created by the sender. One example may be that the sender generates the key retrieval information from the encrypted message, such as by using a hash function, and sending the resulting hash to the key server to be used as an index to the decryption key information. The recipient may obtain the key retrieval information either directly from the sender, or may independently create the key retrieval information by executing the same hash function on the encrypted message received from the sender. As another example, the sender may instead create the key retrieval information from the plaintext message and send the resulting hash to both the key server and the recipient. Yet another example may be that the sender creates a random number to be used as an index, and sends this to both the key server to recipient for use as the key retrieval information. This method risks a very small chance that distinct messages will produce identical random values. [0104] In another set of scenarios, the message ID may be used in combination with other information to index the decryption key information. For instance, combining the message ID with the recipient's e-mail address would be sufficient for use as the key retrieval information. In such case, the key server, upon establishing the message ID and knowing who the recipient is, produces a key retrieval index. The sender, in one of the messages received from the key server, receives the message ID and can formulate the key retrieval information. If the message ID is sent to the recipient in the composite message, the recipient can effectively recreate the key retrieval information, since the recipient obviously knows its own e-mail address. Since each entity can create the key retrieval information by itself knowing nothing more that the message ID and the recipient's e-mail address, there is no need to send the complete key retrieval information from the key server to the sender, or from the sender to the recipient. [0105] What is important in all the scenarios, is that the recipient send some key retrieval information to the key server to receive the decryption key information, in return. [0106] Registration [0107] The present invention contemplates that only users registered with the Key Server or other affiliated entity can send encrypted messages to a recipient. The registration process preferably is accomplished by having a user fill out a registration form posted on a web site associated with the key server. However, various other forms of communication, including telephone or postal delivery, could be used to provide the information required to register. The web-based registration form requests the user to present some personal identifying information to the system so as to set up an account. Preferably, at a minimum, the personal identifying information will include a username and a password. For simplicity, the username can be the user's e-mail address, although this is not a requirement. If a subscription or other user fee is required, the registration process may also request payment information, such as a credit card. [0108] In one embodiment, the true identity of a registered user is not verified. And since e-mail addresses themselves do not always reveal an individual's identify, the present invention enables one to pseudonymously send encrypted e-mail to a recipient whose e-mail address is known. However, as part of the registration process, the system may “authenticate” a user by sending e-mail to the e-mail address that the user has designated. Users must follow the instructions contained in the e-mail, such as by clicking on a URL or going to a webpage and answering additional questions for future identification purposes in order to complete the registration process. [0109] In an alternate embodiment, however, the personal identifying information may be verified. In such case, upon registration, the user may also be asked to supply additional credentials, such as a public key certificate, an ITU X.509 certificate, or the like. Such credentials can then be used in the future to determine which, if any, features of the system, a user may access. [0110] Once the identifying information has been provided, client-side software is then delivered to the user's computer and installed. As part of the installation process, the user will establish a new key pair, Ke, Kd for which only the user will retain possession of the private key Kd while Ke is stored by the key server as being associated with that user. Users may generate new key pairs (Ke, Kd) for use with the system and update the preferred public encryption key Ke registered with the Key Server at any time. Older key pairs preferably are stored locally and may be used to decrypt messages which used the now-defunct public keys for encryption. [0111] During the registration process, the user may also be provided with an opportunity to select certain preferences pertinent to how the user wishes to interact with the Key Server. Included among these are: (1) how the user-sender will be notified of Key Server access by recipients of his messages (e.g., by e-mail or by the user logging onto the web site and looking up the status of the various activities); (2) the privileges that the user would like (e.g., sending messages, receiving messages, or both); and (3) device-related or other policy-related restrictions (e.g. allow for sending encrypted messages from work computer only Monday through Friday between 8 am and 6 pm). [0112] [0112]FIG. 8 presents a flowchart 800 of the steps for registering a user. In step 802, a user contacts the enrollment process. In step 804, the user presents some number of data items which uniquely identify the user to the enrollment process (for example, a username, the user's full name, phone number, or e-mail address). In step 806, the user downloads and installs the client software. In step 808, the user generates a key pair (Ke, Kd) on their local machine, or alternatively, uses a public key certificate in his possession, such as ITU X.509 certificates or Pretty Good Privacy (PGP) certificates. In step 810, the user submits the public encryption key Ke to the Key Server. In step 812, the user selects additional options. Finally, in step 814, the Key Server updates its database with the new user's information and corresponding credential. Thereafter, the Key Server can use the credential information to determine which registered user has requested a specific encryption or decryption key, and which services that user has requested. [0113] Client-Side Software [0114] The client-side software may be installed from any number of conventional non-volatile memory storage devices such as floppy disks, CD-ROMs, PCMCIA cards, and the like. However, in most instances, it is likely that the client-side software will be obtained from a web site associated with the key server. [0115] The client-side software may comprise a plug-in that cooperates with the user's existing e-mail system. The software installed may act as an extension to an existing Mail User Agent (MUA) or be a self-contained MUA; it may also be some software that can be used in conjunction with an MUA or a Web-based e-mail software. Similarly, in the instant messaging context, the software may be a plug-in to an existing Instant Messaging Agent (IMA) or a self-contained IMA or some software that may be used in conjunction with an IMA. [0116] The process of installing the downloaded software on a user's computer results in a plugin module being installed within the user's MUA clients (for example, Microsoft Outlook, Qualcomm Eudora, and other similar programs) or Instant Messaging clients, as well as new settings being defined within the Operating System environment. Depending on the user's choice, the software may install a self-sufficient MUA client or IM clients. [0117] Another software implementation of this invention may result in software being installed as an extension or a plug-in module within a network's MTA (mail transfer agent), for example, Microsoft Exchange, Lotus Notes, and other similar programs. In such a case, the interaction between the MUA clients and the installed software is governed by the MTA administrator while the role of sender and recipient is carried out by the MTA plugin module. [0118] The client-side software that operates as an MUA extension or other application used to view mail may be configured in a number of ways, depending on the security requirements. Thus, for example, the MUA extension may incorporate a ‘one-time-read’ feature which restricts the user from copying the message once it has been decrypted and displayed. In such case, the user would not be allowed to save or buffer the message and once the message ceases to be displayed, it becomes non-decryptable and is potentially deleted. [0119] Unregistered Recipients [0120] If the recipient designated by a sender is not a member of the community of users, i.e., is not registered, the key server will not have a public encryption key Ke for that designated recipient. This situation can be handled be either having the server create a temporary key pair for the recipient, or by having the sender create a temporary key pair for the recipient. [0121] If the key server creates the key pair, it performs a few additional steps in its interaction with the sender and the recipient: (1) the Key Server generates a temporary key pair (Ket, Kdt) on behalf of the non-member recipient and this pair is assigned to the e-mail address of the recipient designated in the sender's recipient public key request; and (2) The Key server returns the temporary public encryption key Ket to the sender along with appropriate information denoting that the intended recipient is not registered with the service, and that encryption key Ket was generated not by the recipient but on his behalf. The sender is given the option to continue or cancel the transaction. If he continues, the sender will send a key (or key fragment) storage request to the key server and the key server will respond to the sender with the key retrieval information Kr, as usual. [0122] Instead of having the key server generate the recipient's temporary key pair, this can be done by the sender using the client software resident on the sender computer. The sender may then send the temporary key pair Ket, Kdt to the key server, along with a designation of the recipient's e-mail address to which the temporary key pair corresponds. The key server saves the temporary key pair and transmits it to the recipient when the recipient registers with the service. [0123] As an additional feature, an unencrypted message may be sent to the recipient, advising the recipient about the nature of this encryption service. This unencrypted message may come from the sender, and be automatically included with the encrypted message, for a non-registered recipient. The unencrypted message may include a link which the recipient may click on to begin the registration process. Alternatively, the unencrypted message may come in the form of an e-mail from the key server, advising the first-time recipient that the recipient will receive an encrypted message from the sender, and in order to read the message, the first-time recipient should log onto the web site associated with the key server authority and register as a user. [0124] From the recipient's perspective, the unencrypted message (from either the sender or the key server) directs the recipient to contact the appropriate location where the client software may be downloaded or otherwise obtained. Once the recipient completes the registration process, the temporary key pair (Ket, Kdt) that was used for the encryption of the first received message from the sender is delivered to the recipient and the decryption of the message received is done in the same manner as described above. Thus, in the first embodiment described above, for the initial message, the temporary key pair Ket, Kdt is downloaded and used to decrypt Kse after the first-time recipient receives Kse1 from the sender and retrieves Kse2 from the key server. Thereafter, the recipient becomes a member of the community of users and may create a new key pair (Ke, Kd) for sending and receiving encrypted messages in the future. The registered user retains total ownership of the newly generated private decryption key Kd, while the public encryption key Ke is submitted to the Key Server as the preferred public key for this user. [0125] The key server may re-use temporary key pairs and provide the recipient's temporary public encryption key Ket to other registered users of the service who try to send e-mail to the same recipient BEFORE this recipient registers with the service, letting them know at the same time that they are receiving a temporary public key. Alternatively, new temporary key pairs may be created each time a different sender wishes to send an encrypted message to the same recipient, so long as the recipient has not yet registered and generated its own keys. In this instance, however, the recipient will have to download multiple key pairs when he/she finally registers with the system, before all the received encrypted messages can be read. [0126] It should be noted that, in a less-secure system where it is not as critical that the symmetric key be encrypted for the initial communication between a sender and an unregistered recipient, one may do away with generating key pairs, altogether. The symmetric key Ks would be used for message encryption as before, and everything proceeds as before, with no encryption key Ke or decryption key Kd being used. Thus, in the first embodiment described above, the sender creates Ks and the recipient obtains Ks1 from the sender and Ks2 from the key server; in the second embodiment the recipient obtains Ks from the key server; and in the third embodiment, after the key server generates Ks, the sender sends Ks1 to the recipient while the key server provides Ks2 to the recipient. In all of these embodiments, the recipient need not bother with decrypting anything to obtain the key Ks. [0127] The method described above to handle encrypted messages sent to unregistered recipients could also be used on its own as a general-purpose method to deliver secure messages. However, it is not as secure as the methods described in the embodiments of this invention. [0128] User Credentials [0129] Instead of, or in addition to, simply a username and password, the system may accept a wide variety of credentials from a user. Thus, the system, during registration, may provide a user with the opportunity to specify multiple credentials (ITU X.509 certificates, e-mail addresses, Instant Messaging IDs, credit card numbers, and other contact information), and the user may change those credentials later on, if desired. Credential management is also provided. Thus, a user may securely timestamp the exact time that user claimed a given credential and the exact time they ceased to claim it. This information can then be used as part of an auditing process to further determine the authenticity of a user's credentials. Furthermore, a user may export his or her local credentials (key pairs or ITU X.509 certificates) and settings and then import them into the client software running on another machine. [0130] The credentialing services provided by the system are part of the context through which the broader community of users gains trust in the identity of each user. Access to a user's credentials by other users is controlled, depending on various policies and user preferences. For example, details of some or all of a member's credentials may always be hidden, revealed to only specific members of the community, or published to all. [0131] When a member changes any of his credentials certain other members may be informed of this change either proactively at the time of the change or at some other point in the future. For example, senders who have previously sent a message to a registered recipient will be informed when a recipient's (non-temporary) key pair has changed since the last time the sender sent him or her a message. This serves to inform members that either the recipient has left the service but a new member now inhabits the same e-mail address or that the recipient has not changed but has generated a new key pair for security reasons. Thus, members of the community of users may be notified either passively or actively of changes in the credentials of other members. In addition, a member may specify that he or she is to be warned interactively when sending a message to, or receiving a message from, another member whose credentials are above or below a certain level of security. [0132] In general, however, members may be allowed to attest to the authenticity and strength of their credentials through various means such as key signing (see PGP's “Web of Trust”) or other activities by which users can develop a better reputation such as the self-rating system used by the eBay, Inc. online auction community. Community members may also be given the option to provide feedback about a user's identity through other means. [0133] In a preferred embodiment, the system may allow members to attest to the authenticity of other member's credentials when they receive encrypted e-mail from them. For example, a sender may activate an option in the client software requesting that a recipient specifically attest to the sender's identity after having read a message. The recipient will be given the option of either accepting the sender's identity, rejecting it, or ignoring the request. Positive attestations may raise a sender's rating while rejections may lower it. The increase or decrease in a sender's rating may depend on the rating of the recipient doing the attestation. [0134] For example, if member Alice wants to increase her rating in the community of users, she may compose a message to Bob, who is another member in good standing. Before sending the message, Alice activates the option to have Bob attest to her identity. Alice sends her ESP encrypted message to Bob. Bob gets the message, decrypts it, and reads it. Once he closes the message, he's prompted with a dialog advising him that “Alice has requested that you attest to the authenticity of this message. If you believe this message to have come from Alice, please click Yes. If you are reasonably certain that this message is not from Alice, click No. If you'd rather not respond, click Ignore.” The client software will report to the server whether Bob clicks “Yes”, “No” or “Ignore”. As a member accumulates “Yes” clicks, her rating will go up according to some rules that may depend on the rating of the members who responded to the requests for attestation. As a member accumulates “No” clicks, the key server authority may monitor that member's account more closely, re-examine that member's credentials, contact and question the member, or even disable the account and notify past recipients. How aggressively this is done with any given member may be subject to review on a case-by-case basis, although a default, formal policy may be implemented as a baseline for each member. [0135] As a further feature, a member will preferably also be able to report spam. This can be done by such measures as providing a webpage on which a member can provide details, by simply forwarding the spam, or even by building a “spam alert button” into the client softrware. The purpose of this reporting is not to challenge a member's identity but rather to report a member's improper usage of the system. [0136] Key Access Policies [0137] The system may permit policies to be established governing access to the decryption key or key fragment. These policies may be defined by the key server authority, or by an individual community member. For example, a community member may specify that a key (or key fragment) may not be released until a certain time in the future, or should no longer be made available either immediately or at some time in the future. Other policies may also be put into place. For example, these policies may release keys based on aspects of either the sender's or recipient's account history or current account status; the manner in which, the location from which, or the device with which either party attempts to gain access to the key; or other factors surrounding the transaction. [0138] Key Types [0139] The key pairs (Ke, Kd) employed in the above embodiments preferably created using asymmetric encryption algorithms such as the RSA algorithm, the Elliptic Curve algorithms, the El Gamal algorithms, and the DSA algorithms. The symmetric keys Ks employed in the above embodiments preferably are created using symmetric encryption algorithms such as AES, DES, 3DES and the like. All of these are known to those skilled in the art of cryptographic systems. [0140] In the system described above, each member of the community may have a single key pair that is used for both encryption/decryption of keys and signing, or may have two key pairs—a first pair used for encryption/decryption of keys and a second pair used for signing. [0141] As to the encryption and decryption of the messages, it is preferred that a symmetric encryption/decryption key Ks be used. Symmetric keys have obvious computational efficiency advantages, as is known to those skilled in the art. However, it is also possible to use an asymmetric pair of keys—a message encryption key Kme and corresponding message decryption keys Kmd, for the message, instead. Either the key server or the sender, or both in cooperation, may generate an asymmetric encryption key pair. In such case, it is the portion Kmde2 of the encrypted version Kmde of the decryption key Kmd (first embodiment), or the entire encrypted version Kmde of the decryption key Kmd (second embodiment) or the unencrypted portion Kmd2 of the decryption key Kmd (third embodiment), that is stored by the key server and/or sent to the recipient [0142] Communication Protocols [0143] In all of the above embodiments, the key server preferably communicates with the sender and with the recipient using encrypted communication such as TLS 1.0 or SSLv3, or other appropriate cryptographic protocols. For example, one can circumvent a full SSL-type implementation while still securely sending information to the key server (by either the sender or the recipient) using the key server's public encryption key, perhaps using an X.509 certificate. Similarly, the key server may send information, such as keys, to the sender or recipient using their public encryption keys, which are known to the key server. [0144] Audit Logs [0145] In the above embodiments, the key server logs all transactions related to keys (generation, archival, access), along with sufficient data that identify the accessing computer and user (the latter, perhaps by e-mail address) involved in the action. In addition, the client software on both the sender and recipient machines is configured to log similar information whenever that machine interacts with the Key Server, allowing for a user to cross-check the locally stored log with the log of actions stored by the Key Server. These audit trails can be examined in either a manual mode (user specifically requesting a check) or an automatic mode (client computer and key server talking to each other without specific operator action) and help detect key pair use and misuse, thus strengthening the authority associated with a given key pair after issuance. The frequency and thoroughness of the user's examination of these audit trails can be measured and used as additional evidence of the authenticity and security of the user's key pair. In addition, the key server and the client software could securely timestamp all or a relevant portion of the audit logs themselves, to prevent and detect any tampering. [0146] As an example, the key server may update a first audit log to reflect one ore more of sending an encryption key Ke, storing the decryption key information, and sending the decryption key information to the recipient. Similarly, the sender may update a second audit log to reflect such actions as requesting and/or receiving an encryption key, sending a key or key fragment to the key server for storage, receiving key retrieval information, and sending an encrypted message (and/or the key retrieval information) to the recipient. Subsequently, in either a manual mode, or in an automatic mode, the sender may verify a message audit trail by comparing entries generated by the key server in the first audit log that correspond to messages sent by the sender, with corresponding entries in the second audit log generated by the sender. [0147] A user may examine his or her audit logs and auditable information can be communicated in a number of ways, such as: sending it by e-mail, making the information accessible on a website to an authorized viewer, providing the information via another application, sending the information directly from a server to an MUA for automatic validation, or through other appropriate means. [0148] Any embodiment of this invention generates quasi-unique device identifiers associated with the device used by a user to send or receive messages. These unique identifiers can be used as additional auditable information or as part of a policy to restrict key pair usage to certain devices and during certain periods of time. [0149] While the present invention has been described with reference to certain preferred embodiments, it should be kept in mind that the invention is not limited to these. Variations of the above may well be within the present invention, whose extent is given by the scope of the claims presented below. It should also be kept in mind, that practicing the claimed invention need not necessarily result in any, let alone all, of the advantages and benefits discussed above. Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS5276737 *Apr 20, 1992Jan 4, 1994Silvio MicaliFair cryptosystems and methods of useUS5418854 *Apr 28, 1992May 23, 1995Digital Equipment CorporationMethod and apparatus for protecting the confidentiality of passwords in a distributed data processing systemUS5436972 *Oct 4, 1993Jul 25, 1995Fischer; Addison M.Method for preventing inadvertent betrayal by a trustee of escrowed digital secretsUS5481613 *Apr 15, 1994Jan 2, 1996Northern Telecom LimitedComputer network cryptographic key distribution systemUS5519778 *Sep 26, 1994May 21, 1996Silvio MicaliMethod for enabling users of a cryptosystem to generate and use a private pair key for enciphering communications between the usersUS5553145 *Aug 4, 1995Sep 3, 1996Micali; SilviaSimultaneous electronic transactions with visible trusted partiesUS5557346 *Aug 11, 1994Sep 17, 1996Trusted Information Systems, Inc.System and method for key escrow encryptionUS5557678 *Jul 18, 1994Sep 17, 1996Bell Atlantic Network Services, Inc.System and method for centralized session key distribution, privacy enhanced messaging and information distribution using a split private key public cryptosystemUS5557765 *Feb 21, 1995Sep 17, 1996Trusted Information Systems, Inc.System and method for data recoveryUS5623546 *Jun 23, 1995Apr 22, 1997Motorola, Inc.Encryption method and system for portable dataUS5666414 *Mar 21, 1996Sep 9, 1997Micali; SilvioGuaranteed partial key-escrowUS5689565 *Jun 29, 1995Nov 18, 1997Microsoft CorporationCryptography system and method for providing cryptographic services for a computer applicationUS5745573 *Jan 10, 1997Apr 28, 1998Trusted Information Systems, Inc.System and method for controlling access to a user secretUS5748735 *Jun 7, 1996May 5, 1998Bell Atlantic Network Services, Inc.Securing E-mail communications and encrypted file storage using yaksha split private key asymmetric cryptographyUS5751813 *Apr 29, 1996May 12, 1998Motorola, Inc.Use of an encryption server for encrypting messagesUS5799086 *Feb 19, 1997Aug 25, 1998Certco LlcEnhanced cryptographic system and method with key escrow featureUS5838792 *Aug 8, 1996Nov 17, 1998Bell Atlantic Network Services, Inc.Computer system for centralized session key distribution, privacy enhanced messaging and information distribution using a split private key public cryptosystemUS5905799 *Oct 15, 1996May 18, 1999Bell Atlantic Network Services, Inc.Programmed computer for identity verification, forming joint signatures and session key agreement in an RSA public cryptosystemUS5907618 *Jan 3, 1997May 25, 1999International Business Machines CorporationMethod and apparatus for verifiably providing key recovery information in a cryptographic systemUS6009173 *Jan 31, 1997Dec 28, 1999Motorola, Inc.Encryption and decryption method and apparatusUS6058188 *Jul 24, 1997May 2, 2000International Business Machines CorporationMethod and apparatus for interoperable validation of key recovery information in a cryptographic systemUS6084968 *Oct 29, 1997Jul 4, 2000Motorola, Inc.Security token and method for wireless applicationsUS6119227 *Apr 17, 1996Sep 12, 2000Hewlett-Packard CompanyMethods and apparatus for authenticating an originator of a messageUS6160891 *Oct 20, 1997Dec 12, 2000Sun Microsystems, Inc.Methods and apparatus for recovering keysUS6185685 *Dec 11, 1997Feb 6, 2001International Business Machines CorporationSecurity method and system for persistent storage and communications on computer network systems and computer network systems employing the sameUS6249585 *Apr 8, 1998Jun 19, 2001Network Associates, IncPublicly verifiable key recoveryUS6272632 *Feb 12, 1998Aug 7, 2001Network Associates, Inc.System and method for controlling access to a user secret using a key recovery fieldUS6336186 *Sep 16, 1998Jan 1, 2002Networks Associates Technology, Inc.Cryptographic system and methodology for creating and managing crypto policy on certificate serversUS6377688 *Dec 31, 1997Apr 23, 2002International Business Machines CorporationCryptographic communication method and systemUS6807277 *Jun 12, 2000Oct 19, 2004Surety, LlcSecure messaging system with return receiptsUS6947556 *Aug 21, 2000Sep 20, 2005International Business Machines CorporationSecure data storage and retrieval with key management and user authenticationUS20010050990 *Dec 27, 1999Dec 13, 2001Frank Wells SudiaMethod for initiating a stream-oriented encrypted communicationUS20020059144 *Mar 26, 2001May 16, 2002Meffert Gregory J.Secured content delivery system and methodUS20020091928 *Oct 3, 2001Jul 11, 2002Thaddeus BouchardElectronically verified digital signature and document delivery system and methodUS20030026432 *Jul 31, 2001Feb 6, 2003Intel CorporationSystem and method for enhanced piracy protection in a wireless personal communication deviceUS20050138374 *Dec 21, 2004Jun 23, 2005Wachovia CorporationCryptographic key backup and escrow system* Cited by examinerReferenced byCiting PatentFiling datePublication dateApplicantTitleUS7277549Nov 25, 2003Oct 2, 2007Secure Data In Motion, Inc.System for implementing business processes using key server eventsUS7325127Nov 26, 2002Jan 29, 2008Secure Data In Motion, Inc.Security server systemUS7376835Nov 25, 2003May 20, 2008Secure Data In Motion, Inc.Implementing nonrepudiation and audit using authentication assertions and key serversUS7469340 *Mar 20, 2003Dec 23, 2008Kryptiq CorporationSelective encryption of electronic messages and dataUS7596697 *Feb 14, 2005Sep 29, 2009Tricipher, Inc.Technique for providing multiple levels of securityUS7599493 *Feb 14, 2005Oct 6, 2009Tricipher Inc.Asymmetric key pair having a kiosk modeUS7653816Dec 30, 2003Jan 26, 2010First Information Systems, LlcE-mail certification serviceUS7711962 *Jan 19, 2004May 4, 2010Makoto KatoData transmission system, data transmission method, and deviceUS7730139 *Jan 10, 2005Jun 1, 2010I-Fax.Com Inc.Asynchronous tamper-proof tag for routing e-mails and e-mail attachmentsUS7730142Jun 30, 2006Jun 1, 20100733660 B.C. Ltd.Electronic mail system with functionality to include both private and public messages in a communicationUS7756932 *Jul 29, 2005Jul 13, 2010Research In Motion LimitedSystem and method for processing messages being composed by a userUS7783711Jun 30, 2006Aug 24, 20100733660 B.C. Ltd.Electronic mail system with functionally for senders to control actions performed by message recipientsUS7822820Jun 30, 2006Oct 26, 20100733660 B.C. Ltd.Secure electronic mail system with configurable cryptographic engineUS7870204Jun 30, 2006Jan 11, 20110733660 B.C. Ltd.Electronic mail system with aggregation and integrated display of related messagesUS7870205Jun 30, 2006Jan 11, 20110733660 B.C. Ltd.Electronic mail system with pre-message-retrieval display of message metadataUS7949138Jun 30, 2005May 24, 2011Microsoft CorporationSecure instant messagingUS7949873 *Jun 30, 2005May 24, 2011Microsoft CorporationSecure instant messagingUS8015211 *Oct 1, 2004Sep 6, 2011Architecture Technology CorporationSecure peer-to-peer object storage systemUS8032751Dec 7, 2009Oct 4, 2011First Information Systems, LlcE-mail certification serviceUS8037149Jul 12, 2010Oct 11, 2011Research In Motion LimitedSystem and method for processing messages being composed by a userUS8099598 *Jan 3, 2005Jan 17, 2012Gary Gang LiuSecure messaging system with automatic recipient enrollmentUS8127367Mar 20, 2008Feb 28, 2012Dmvich Software, LlcRefreshing software licensesUS8213608 *Sep 8, 2008Jul 3, 2012Vmware, Inc.Roaming utilizing an asymmetric key pairUS8230517 *Nov 12, 2007Jul 24, 2012Kryptiq CorporationOpaque message archivesUS8238555 *Oct 21, 2008Aug 7, 2012Hitachi, Ltd.Management server, communication apparatus and program implementing key allocation system for encrypted communicationUS8244820Sep 12, 2011Aug 14, 2012Research In Motion LimitedSystem and method for processing messages being composed by a userUS8301875 *Sep 5, 2003Oct 30, 2012NEC Infrontia CoroprationNetwork, IPsec setting server apparatus, IPsec processing apparatus, and IPsec setting method used thereforUS8321660 *Mar 17, 2008Nov 27, 2012Samsung Electronics Co., Ltd.Method and devices for reproducing encrypted content and approving reproductionUS8340287Mar 23, 2010Dec 25, 2012Vmware, Inc.Securing multifactor split key asymmetric crypto keysUS8340289Sep 29, 2005Dec 25, 2012Research In Motion LimitedSystem and method for providing an indication of randomness quality of random number data generated by a random data serviceUS8422667Aug 9, 2006Apr 16, 2013The Chamberlain Group, Inc.Method and apparatus to facilitate transmission of an encrypted rolling codeUS8452970Sep 2, 2010May 28, 2013Research In Motion LimitedSystem and method for code signingUS8453218 *Nov 18, 2011May 28, 2013Reputation.comSystem and methods for facilitating secure communications on a websiteUS8494968 *Jun 18, 2007Jul 23, 2013Visa U.S.A. Inc.Terminal data encryptionUS8504758Sep 21, 2010Aug 6, 2013Amazon Technologies, Inc.System and method for logical deletion of stored data objectsUS8516068Aug 7, 2012Aug 20, 2013Research In Motion LimitedSystem and method for processing messages being composed by a userUS8520855 *Mar 5, 2010Aug 27, 2013University Of WashingtonEncapsulation and decapsulation for data disintegrationUS8538028 *May 19, 2008Sep 17, 2013Toposis CorporationSystem and method for secure electronic communication servicesUS8538624 *Oct 1, 2007Sep 17, 2013Continental Automotive GmbhMethod and apparatus for transmitting data between a tachograph and a data processing deviceUS8539603 *Jun 1, 2004Sep 17, 2013Privashere AGSystem and method for secure communicationUS8565422 *Aug 9, 2011Oct 22, 2013Salesforce.Com, Inc.Method and system for enryption key versioning and key rotation in a multi-tenant environmentUS8581695May 27, 2009Nov 12, 2013Grant B. CarlsonChannel-switching remote controlled barrier opening systemUS8619986Jul 21, 2011Dec 31, 2013Patton Protection Systems LLCSystems and methods for secure communication using a communication encryption bios based upon a message specific identifierUS8650156Dec 23, 2010Feb 11, 2014Amazon Technologies, Inc.System and method for fetching the latest versions of stored data objectsUS8682979Jun 30, 2006Mar 25, 2014Email2 Scp Solutions Inc.Secure electronic mail systemUS8688790Jan 3, 2011Apr 1, 2014Email2 Scp Solutions Inc.Secure electronic mail system with for your eyes only featuresUS8725643Apr 30, 2010May 13, 2014Blackberry LimitedSystem and method for verifying digital signatures on certificatesUS8762726 *Mar 21, 2011Jun 24, 2014Bce Inc.System and method for secure accessUS8775791Dec 22, 2005Jul 8, 2014Blackberry LimitedSystem and method for secure messaging between wireless device and application gatewayUS8806207Dec 22, 2008Aug 12, 2014Cocoon Data Holdings LimitedSystem and method for securing dataUS8826002Aug 21, 2012Sep 2, 2014Reputation.Com, Inc.System and methods for facilitating secure communications on a websiteUS8849825 *Dec 23, 2010Sep 30, 2014Amazon Technologies, Inc.System and method for clustering distributed hash table entriesUS8874897Aug 21, 2012Oct 28, 2014Reputation.Com, Inc.System and methods for facilitating secure communications on a websiteUS8886651Dec 22, 2011Nov 11, 2014Reputation.Com, Inc.Thematic clusteringUS8918312Mar 15, 2013Dec 23, 2014Reputation.Com, Inc.Assigning sentiment to themesUS8925099Mar 14, 2013Dec 30, 2014Reputation.Com, Inc.Privacy scoringUS8938074 *Dec 17, 2012Jan 20, 2015Patton Protection Systems, LlcSystems and methods for secure communication using a communication encryption bios based upon a message specific identifierUS8970345Oct 29, 2013Mar 3, 2015Overhead Door CorporationChannel-switching remote controlled barrier opening systemUS8996831Jul 29, 2013Mar 31, 2015Amazon Technologies, Inc.System and method for logical deletion of stored data objectsUS9053054Feb 10, 2014Jun 9, 2015Amazon Technologies, Inc.System and method for fetching the latest versions of stored data objectsUS9053310Aug 8, 2014Jun 9, 2015Duo Security, Inc.System and method for verifying status of an authentication device through a biometric profileUS9077524Nov 20, 2012Jul 7, 2015Blackberry LimitedSystem and method for providing an indication of randomness quality of random number data generated by a random data serviceUS9092302Sep 10, 2014Jul 28, 2015Duo Security, Inc.System and method for determining component version compatibility across a device ecosystemUS9121401Sep 6, 2013Sep 1, 2015Aperia Technologies, Inc.Passive pressure regulation mechanismUS9148409Jun 30, 2005Sep 29, 2015The Chamberlain Group, Inc.Method and apparatus to facilitate message transmission and reception using different transmission characteristicsUS9231928 *Dec 18, 2008Jan 5, 2016Bce Inc.Validation method and system for use in securing nomadic electronic transactionsUS9235476Mar 30, 2015Jan 12, 2016Amazon Technologies, Inc.System and method for logical deletion of stored data objectsUS9245139Sep 15, 2014Jan 26, 2016John R. ThorpeNon-retained message systemUS9258595 *Feb 21, 2003Feb 9, 2016Thomson LicensingDevice for processing and method for transmission of encoded data for a first domain in a network pertaining to a second domainUS9282085 *Dec 20, 2011Mar 8, 2016Duo Security, Inc.System and method for digital user authenticationUS9300659Apr 22, 2015Mar 29, 2016Antique Books, Inc.Method and system of providing a picture password for relatively smaller displaysUS9323435Jun 2, 2015Apr 26, 2016Robert H. Thibadeau, SR.Method and system of providing a picture password for relatively smaller displaysUS9338156Feb 24, 2014May 10, 2016Duo Security, Inc.System and method for integrating two-factor authentication in a deviceUS9357376Jul 1, 2014May 31, 2016Ip.Access LimitedNetwork elements, wireless communication system and methods thereforUS9361451May 6, 2014Jun 7, 2016Duo Security, Inc.System and method for enforcing a policy for an authenticator deviceUS9401900Apr 12, 2012Jul 26, 2016Cirius Messaging Inc.Secure electronic mail system with thread/conversation opt outUS9443073Aug 8, 2014Sep 13, 2016Duo Security, Inc.System and method for verifying status of an authentication deviceUS9454365Jun 18, 2015Sep 27, 2016Duo Security, Inc.System and method for determining component version compatibility across a device ecosystemUS9454656May 4, 2015Sep 27, 2016Duo Security, Inc.System and method for verifying status of an authentication device through a biometric profileUS9455988Apr 11, 2016Sep 27, 2016Duo Security, Inc.System and method for verifying status of an authentication deviceUS9467463Aug 31, 2012Oct 11, 2016Duo Security, Inc.System and method for assessing vulnerability of a mobile deviceUS9483935Feb 5, 2015Nov 1, 2016Overhead Door CorporationChannel-switching remote controlled barrier opening systemUS9485096 *Feb 5, 2014Nov 1, 2016Apurva ShrivastavaEncryption / decryption of data with non-persistent, non-shared passkeyUS9490974 *Mar 29, 2012Nov 8, 2016Certicom Corp.Identity-based decryptionUS9490981Jun 2, 2015Nov 8, 2016Robert H. Thibadeau, SR.Antialiasing for picture passwords and other touch displaysUS9491175Oct 17, 2014Nov 8, 2016Duo Security, Inc.System and method for proxying federated authentication protocolsUS9497157Dec 20, 2013Nov 15, 2016Cirius Messaging Inc.Secure electronic mail systemUS9497158Dec 20, 2013Nov 15, 2016Cirius Messaging Inc.Secure electronic mail systemUS9497172 *Jun 26, 2013Nov 15, 2016Litera Corp.Method of encrypting and transferring data between a sender and a receiver using a networkUS9497186 *Aug 11, 2015Nov 15, 2016Antique Books, Inc.Methods and systems for securing proofs of knowledge for privacyUS20030046533 *Apr 25, 2000Mar 6, 2003Olkin Terry M.Secure E-mail systemUS20030074552 *Nov 26, 2002Apr 17, 2003Secure Data In MotionSecurity server systemUS20040030893 *Mar 20, 2003Feb 12, 2004Karamchedu Murali M.Selective encryption of electronic messages and dataUS20040030918 *Mar 20, 2003Feb 12, 2004Karamchedu Murali M.Enterprise based opaque message archivesUS20040093524 *Sep 5, 2003May 13, 2004Nec CorporationNetwork, IPsec setting server apparatus, IPsec processing apparatus, and IPsec setting method used thereforUS20040148500 *Nov 25, 2003Jul 29, 2004Secure Data In Motion, Inc.System for implementing business processes using key server eventsUS20040151323 *Nov 25, 2003Aug 5, 2004Secure Data In Motion, Inc.Implementing nonrepudiation and audit using authentication assertions and key serversUS20050084108 *Feb 21, 2003Apr 21, 2005Alain DurandDevice for processing and method for transmission of encoded data for a first domain in a network pertaining to a second domainUS20050120212 *Mar 14, 2003Jun 2, 2005Rajesh KanungoSystems and method for the transparent management of document rightsUS20050225791 *Jan 27, 2004Oct 13, 2005Samsung Electronics Co., Ltd.Security server for facsimile machine and method of selectively printing document data using the security serverUS20050228997 *Apr 7, 2004Oct 13, 2005Bicker Dennis DMethods and devices for providing secure communication sessionsUS20050240591 *Oct 1, 2004Oct 27, 2005Carla MarceauSecure peer-to-peer object storage systemUS20060168039 *Jan 10, 2005Jul 27, 2006I-Fax.Com Inc.Asynchronous tamper-proof tag for routing e-mails and e-mail attachmentsUS20060182276 *Feb 14, 2005Aug 17, 2006Tricipher, Inc.Asymmetric key pair having a kiosk modeUS20060182277 *Feb 14, 2005Aug 17, 2006Tricipher, Inc.Roaming utilizing an asymmetric key pairUS20060230461 *Jun 1, 2004Oct 12, 2006Ralf HauserSystem and method for secure communicationUS20060234731 *Dec 22, 2005Oct 19, 2006Taylor Sean PSystem and method for secure messaging between wireless device and application gatewayUS20060239455 *Jan 19, 2004Oct 26, 2006Makoto KatoData transmission system, data transmission method, and deviceUS20070003065 *Jun 30, 2005Jan 4, 2007Microsoft CorporationSecure instant messagingUS20070003066 *Jun 30, 2005Jan 4, 2007Microsoft CorporationSecure instant messagingUS20070005713 *Jun 30, 2006Jan 4, 2007Levasseur ThierrySecure electronic mail systemUS20070005714 *Jun 30, 2006Jan 4, 2007Levasseur ThierryElectronic mail system with functionality to include both private and public messages in a communicationUS20070005715 *Jun 30, 2006Jan 4, 2007Levasseur ThierryElectronic mail system with aggregation and integrated display of related messagesUS20070005716 *Jun 30, 2006Jan 4, 2007Levasseur ThierryElectronic mail system with pre-message-retrieval display of message metadataUS20070005717 *Jun 30, 2006Jan 4, 2007Levasseur ThierryElectronic mail system with functionality for senders to control actions performed by message recipientsUS20070038704 *Jul 29, 2005Feb 15, 2007Research In Motion LimitedSystem and method for processing messages being composed by a userUS20070055867 *Oct 25, 2006Mar 8, 2007Rajesh KanungoSystem and method for secure provisioning of encryption keysUS20070055878 *Feb 14, 2005Mar 8, 2007Tricipher, IncTechnique for providing multiple levels of securityUS20070058811 *Aug 9, 2006Mar 15, 2007The Chamberlain Group, Inc.Method and apparatus to facilitate transmission of an encrypted rolling codeUS20070071238 *Sep 29, 2005Mar 29, 2007Research In Motion LimitedSystem and method for providing an indication of randomness quality of random number data generated by a random data serviceUS20070074047 *Sep 26, 2005Mar 29, 2007Brian MetzgerKey rotationUS20070086469 *Jul 20, 2004Apr 19, 2007Weon Ho SeoMethod for preventing illegal use of service information registered and system using the sameUS20070091914 *May 28, 2004Apr 26, 2007Ashley Alexis S RSecure transfer of dataUS20070113101 *Jun 30, 2006May 17, 2007Levasseur ThierrySecure electronic mail system with configurable cryptographic engineUS20070179794 *Jan 20, 2006Aug 2, 2007Jamie FisherInternet based credential management systemUS20070233796 *Apr 4, 2007Oct 4, 2007Muller Marken Gmbh & Co. Betriebs-KgAutomatic verification of messenger contact dataUS20070260876 *May 5, 2006Nov 8, 2007Research In Motion LimitedMethod and system for sending secure messagesUS20080046579 *Aug 18, 2006Feb 21, 2008Denis Brent WaltonSecure email recipientUS20080065891 *Nov 12, 2007Mar 13, 2008Kryptiq CorporationOpaque message archivesUS20080091955 *Sep 21, 2007Apr 17, 2008Paymetric, Inc.System and method for rotating data in crypto systemUS20080103982 *Jun 18, 2007May 1, 2008Ayman HammadTerminal Data EncryptionUS20080155668 *Dec 20, 2007Jun 26, 2008Matsushita Electric Industrial Co., Ltd.Password setting method, video receiving system, program and recording mediumUS20080260157 *Jul 28, 2006Oct 23, 2008Matsushita Electric Industrial Co., Ltd.Recording Apparatus and Recording MediumUS20080285756 *Mar 20, 2008Nov 20, 2008Dmvich Software, LlcRandom shared keyUS20080285758 *Mar 20, 2008Nov 20, 2008Dmvich Software, LlcRefreshing software licensesUS20090013172 *Mar 17, 2008Jan 8, 2009Samsung Electronics Co., Ltd.Method and devices for reproducing encrypted content and approving reproductionUS20090055649 *Oct 21, 2008Feb 26, 2009Hitachi, Ltd.Key allocating method and key allocation system for encrypted communicationUS20090077381 *Dec 3, 2008Mar 19, 2009Rajesh KanungoSystems and method for the transparent management of document rightsUS20090198997 *May 19, 2008Aug 6, 2009Tet Hin YeapSystem and method for secure electronic communication servicesUS20090222658 *Sep 8, 2008Sep 3, 2009Ravinderpal Singh SandhuRoaming utilizing an asymmetric key pairUS20090327719 *Jun 27, 2008Dec 31, 2009Microsoft CorporationCommunication authenticationUS20100004813 *Oct 1, 2007Jan 7, 2010Continental Automotive GmbhMethod and Apparatus for Transmitting Data Between a Tachograph and a Data Processing DeviceUS20100008509 *Feb 10, 2009Jan 14, 2010Kabushiki Kaisha ToshibaCommunication apparatus, key server, and management serverUS20100088385 *Dec 7, 2009Apr 8, 2010First Information Systems, LlcE-mail certification serviceUS20100202609 *Mar 23, 2010Aug 12, 2010Ravinderpal Singh SandhuSecuring multifactor split key asymmetric crypto keysUS20100211795 *Apr 30, 2010Aug 19, 2010Research In Motion LimitedSystem and method for verifying digital signatures on certificatesUS20100217979 *Dec 19, 2006Aug 26, 2010Karim YaghmourSystem and Method for Providing Certified Proof of Delivery Receipts for Electronic MailUS20100250945 *May 10, 2010Sep 30, 2010Certicom Corp.Privacy-enhanced e-passport authentication protocolUS20100281128 *Jul 12, 2010Nov 4, 2010Research In Motion LimitedSystem and method for processing messages being composed by a userUS20100301999 *May 27, 2009Dec 2, 2010Overhead Door CorporationChannel-switching remote controlled barrier opening systemUS20100332848 *Sep 2, 2010Dec 30, 2010Research In Motion LimitedSystem and method for code signingUS20110040964 *Dec 22, 2008Feb 17, 2011Lawrence Edward NussbaumSystem and method for securing dataUS20110113109 *Jan 3, 2011May 12, 20110733660 Bc Ltd (Dba E-Mail2)Secure Electronic Mail SystemUS20110145576 *Nov 16, 2010Jun 16, 2011ThalesSecure method of data transmission and encryption and decryption system allowing such transmissionUS20110170696 *Mar 21, 2011Jul 14, 2011Tet Hin YeapSystem and method for secure accessUS20110246780 *Dec 18, 2008Oct 6, 2011Tet Hin YeapValidation method and system for use in securing nomadic electronic transactionsUS20120089830 *May 20, 2009Apr 12, 2012Kande Mohamed MMethod and device for digitally attesting the authenticity of binding interactionsUS20120131169 *Nov 23, 2011May 24, 2012Timofei Adamovich MouraveikoSystem and method for controlling an un-addressable network applianceUS20120140923 *Aug 9, 2011Jun 7, 2012Salesforce.Com, Inc.Method and system for enryption key versioning and key rotation in a multi-tenant environmentUS20120198228 *Dec 20, 2011Aug 2, 2012Jon OberheideSystem and method for digital user authenticationUS20120227096 *Feb 28, 2012Sep 6, 2012Intercede LimitedMethod and apparatus for transferring dataUS20120254616 *Mar 29, 2012Oct 4, 2012Certicom CorporationIdentity-Based DecryptionUS20120331162 *Mar 27, 2012Dec 27, 2012Samsung Electronics Co., Ltd.Method for sharing contents using temporary keys and electronic device using the sameUS20130110920 *Oct 27, 2011May 2, 2013Alcatel-Lucent Usa Inc.Network-assisted peer-to-peer secure communication establishmentUS20130124863 *Dec 17, 2012May 16, 2013Steven J. DruckerSystems and methods for secure communication using a communication encryption bios based upon a message specific identifierUS20140355757 *Feb 5, 2014Dec 4, 2014Apurva ShrivastavaEncryption / decryption of data with non-persistent, non-shared passkeyUS20150006880 *Jun 26, 2013Jan 1, 2015Litera Corp.Method of Encrypting and Transferring Data Between a Sender and a Receiver Using a NetworkCN102656839A *Nov 17, 2010Sep 5, 2012西门子公司Device and method for securing a negotiation of at least one cryptographic key between unitsCN103338437A *Jul 11, 2013Oct 2, 2013成都三零瑞通移动通信有限公司Encryption method and system of mobile instant messageDE102014100173A1 *Jan 9, 2014Jul 23, 2015Kobil Systems GmbhVerfahren zum geschützten Übermitteln eines DatenobjektsEP2060051A2 *Sep 6, 2007May 20, 2009Sslnext Inc.Method and system for providing authentication service for internet usersEP2106643A1 *Nov 16, 2007Oct 7, 2009Echoworx CorporationMethod and system for content management in a secure communication systemEP2448172A1 *Mar 22, 2010May 2, 2012ZTE CorporationMethod and system for delaying transmission of media information in internet protocol (ip) multimedia subsystemEP2448172A4 *Mar 22, 2010Jun 25, 2014Zte CorpMethod and system for delaying transmission of media information in internet protocol (ip) multimedia subsystemEP2894829A1 *Jan 8, 2015Jul 15, 2015Kobil Systems GmbHMethod for secure transmission of a data objectWO2004049137A2 *Nov 26, 2003Jun 10, 2004Secure Data In Motion, Inc.Secure key server with nonrepudiation and auditWO2004049137A3 *Nov 26, 2003Apr 6, 2006Secure Data In Motion IncSecure key server with nonrepudiation and auditWO2006110984A1 *Dec 22, 2005Oct 26, 2006Research In Motion LimitedSystem and method for secure messaging between wireless device and application gatewayWO2008061344A1 *Nov 20, 2007May 29, 2008Tet Hin YeapSystem and method for secure electronic communication servicesWO2008116060A1 *Mar 20, 2008Sep 25, 2008Dmvich Software, LlcSecure electronic messaging system requiring key retrieval for deriving decryption keyWO2009158214A2 *Jun 12, 2009Dec 30, 2009Microsoft CorporationCommunication authenticationWO2009158214A3 *Jun 12, 2009Mar 4, 2010Microsoft CorporationCommunication authenticationWO2011085101A1 *Jan 6, 2011Jul 14, 2011Osr Open Systems Resources, Inc.Network encryptionWO2014151140A1 *Mar 12, 2014Sep 25, 2014Thorpe John RNon-retained message systemWO2016025059A1 *Jun 4, 2015Feb 18, 2016Intel CorporationNetwork-enabled device provisioningWO2016081895A1 *Nov 20, 2015May 26, 2016Yaana Technologies, Llc.System and method for transmitting a secure message over a signaling network* Cited by examinerClassifications U.S. Classification380/277International ClassificationH04L9/08Cooperative ClassificationH04L2209/56, H04L63/06, H04L2209/60, H04L63/0823, H04L9/083European ClassificationH04L63/08C, H04L63/06, H04L9/08Legal EventsDateCodeEventDescriptionMar 27, 2002ASAssignmentOwner name: SURETY, INC., VIRGINIAFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:ANDIVAHIS, DIMITRIOS;CARNELL, SHAWN MICHAEL EDWARDS;FISCHER, ADDISON MCELROY;AND OTHERS;REEL/FRAME:012739/0251;SIGNING DATES FROM 20020321 TO 20020325May 18, 2004ASAssignmentOwner name: SURETY, LLC, VIRGINIAFree format text: MERGER;ASSIGNOR:WORLDGATE MANAGEMENT, LLC;REEL/FRAME:015334/0966Effective date: 20030630Owner name: WORLDGATE MANAGEMENT, LLC, DELAWAREFree format text: MERGER;ASSIGNOR:SURETY, INC.;REEL/FRAME:015341/0069Effective date: 20030630May 27, 2004ASAssignmentOwner name: SURETY, LLC, VIRGINIAFree format text: MERGER;ASSIGNOR:WORLDGATE MANAGEMENT, LLC;REEL/FRAME:015418/0271Effective date: 20030630Jan 27, 2005ASAssignmentOwner name: WORLDGATE MANAGEMENT, LLC, DELAWAREFree format text: CORRECTIVE TO REMOVE INCORRECT PATENT NUMBER (5,37,3561) AND REPLACE IT WITH CORRECT PATENT NUMBER (5,771,629) PREVIOUSLY RECORDED ON REEL 015341 FRAME 0069;ASSIGNOR:SURETY, INC.;REEL/FRAME:016195/0489Effective date: 20030630Jan 28, 2005ASAssignmentOwner name: SURETY, LLC, VIRGINIAFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:WORLDGATE MANAGEMENT, LLC;REEL/FRAME:016226/0552Effective date: 20030630Dec 27, 2006ASAssignmentOwner name: FISCHER, ADDISON, FLORIDAFree format text: SECURITY AGREEMENT;ASSIGNOR:SURETY, LLC;REEL/FRAME:018731/0404Effective date: 20061204Jun 7, 2010FPAYFee paymentYear of fee payment: 4Jul 3, 2010ASAssignmentOwner name: FISCHER, ADDISON, FLORIDAFree format text: SECURITY AGREEMENT;ASSIGNOR:SURETY, LLC;REEL/FRAME:024630/0302Effective date: 20090123May 7, 2014FPAYFee paymentYear of fee payment: 8RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services