Source: https://patents.google.com/patent/US10020946B2
Timestamp: 2019-06-18 09:39:04
Document Index: 403330271

Matched Legal Cases: ['Application No. 62', 'Application No. 62', 'Application No. 62', 'Application No. 62', 'Application No. 62', 'Application No. 62', 'Application No. 62', 'Application No. 62', 'Application No. 62', 'Application No. 62']

US10020946B2 - Multi-key encryption method - Google Patents
Multi-key encryption method Download PDF
US10020946B2
US10020946B2 US14/841,288 US201514841288A US10020946B2 US 10020946 B2 US10020946 B2 US 10020946B2 US 201514841288 A US201514841288 A US 201514841288A US 10020946 B2 US10020946 B2 US 10020946B2
US14/841,288
US20160197721A1 (en
Cyph Inc
2015-01-07 Priority to US201562100693P priority Critical
2015-01-07 Priority to US201562100686P priority
2015-01-07 Priority to US201562100689P priority
2015-01-07 Priority to US201562100682P priority
2015-01-07 Priority to US201562100692P priority
2015-01-07 Priority to US201562100684P priority
2015-01-07 Priority to US201562100676P priority
2015-01-07 Priority to US201562100674P priority
2015-01-07 Priority to US201562100688P priority
2015-01-16 Priority to US201562104307P priority
2015-08-31 Priority to US14/841,288 priority patent/US10020946B2/en
2015-08-31 Application filed by Cyph Inc filed Critical Cyph Inc
2016-07-07 Publication of US20160197721A1 publication Critical patent/US20160197721A1/en
2018-02-21 Assigned to CYPH INC. reassignment CYPH INC. ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: ZADEGAN, Bryant, LESTER, Ryan
2018-07-10 Publication of US10020946B2 publication Critical patent/US10020946B2/en
This application claims priority to U.S. Provisional Application No. 62/100,688, entitled “MULTI-KEY ENCRYPTION METHOD” and filed Jan. 7, 2015.
Ser. No. 14/841,327, entitled “CROSS-CLIENT COMMUNICATION METHOD” and filed Aug. 31, 2015 and claiming priority to U.S. Provisional Application No. 62/100,674, filed on Jan. 7, 2015;
Ser. No. 14/841,318, entitled “CRYPTOGRAPHIC METHOD FOR SECURE COMMUNICATIONS” and filed Aug. 31, 2015 and claiming priority to U.S. Provisional Application No. 62/100,676, filed on Jan. 7, 2015;
Ser. No. 14/841,313, entitled “METHOD OF DENIABLE ENCRYPTED COMMUNICATIONS” and filed Aug. 31, 2015 and claiming priority to U.S. Provisional Application No. 62/100,682, filed on Jan. 7, 2015;
Ser. No. 14/841,281, entitled “ENCRYPTED GROUP COMMUNICATION METHOD” and filed Aug. 31, 2015 and claiming priority to U.S. Provisional Application No. 62/100,684, filed on Jan. 7, 2015;
Ser. No. 14/841,310, entitled “METHOD OF GENERATING A DENIABLE ENCRYPTED COMMUNICATIONS VIA PASSWORD ENTRY” and filed Aug. 31, 2015 and claiming priority to U.S. Provisional Application No. 62/100,686, filed on Jan. 7, 2015;
Ser. No. 14/841,302, entitled “METHOD OF EPHEMERAL ENCRYPTED COMMUNICATIONS” and filed Aug. 31, 2015 and claiming priority to U.S. Provisional Application No. 62/100,689, filed on Jan. 7, 2015;
Ser. No. 14/841,292, entitled “METHOD OF MULTI-FACTOR AUTHENTICATION DURING ENCRYPTED COMMUNICATIONS” and filed Aug. 31, 2015 and claiming priority to U.S. Provisional Application No. 62/100,692, filed on Jan. 7, 2015;
Ser. No. 14/841,296, entitled “METHOD OF USING SYMMETRIC CRYPTOGRAPHY FOR BOTH DATA ENCRYPTION AND SIGN-ON AUTHENTICATION” and filed Aug. 31, 2015 and claiming priority to U.S. Provisional Application No. 62/100,693, filed on Jan. 7, 2015; and
Ser. No. 15/001,015, entitled “SYSTEM AND METHOD OF CRYPTOGRAPHICALLY SIGNING WEB APPLICATIONS” and filed Aug. 31, 2015 and a continuation application of International Application Ser. No. PCT/US15/47788 filed on Aug. 31, 2015 and claiming priority to U.S. Provisional Application No. 62/104,307, filed on Jan. 16, 2015.
The difficulties of conventional encryption systems increase when the secret information is publicly known. For example, when the secret information is publicly known, the entire encryption system becomes compromised and must be revised (e.g., resetting passwords, passphrases, private keys, etc.). Since various methods to obtain this secret information are well known and frequently used—techniques such as such as man-in-the-middle attacks, social engineering, etc.—it is therefore desirable to reduce exposure to an encryption system's private information and provide additional layers of indirection, thereby reducing the potential attack surface of such an encryption system.
The embodiments herein provide a method to maintain encrypted data (e.g., an encrypted chat history) while further providing an efficient destruction of the encrypted data. For example, although a user (e.g., “Alice”) maintains a persistent encrypted chat history of her account on the Cyph™ secure messaging platform for reference, she must be assured that she retains the ability to completely wipe (or destroy) her chat history. In convention secure chat systems, however, the encrypted chat history is stored on servers that Alice does not trust (or control) to permanently wipe her chat history. Moreover, her chat history could even be public.
FIG. 1 illustrates a flow diagram illustrating a method 10 of encrypting data according to an embodiment herein. As shown in FIG. 1, a Client (e.g., a computing device shown in FIGS. 3 and 4) downloads encrypted data block from Server (e.g., a computing device shown in FIGS. 3 and 4), where the encrypted data block includes a server-stored secondary key in step 20. For example, Alice may sign onto a service or a platform (such as Cyph™ secure messaging platform). In step 30, Client decrypts encrypted data block with user password (e.g., a passphrase that Alice has memorized, such as “correct horse battery staple”). Finally, Client encrypts a message with the sever-stored secondary key retrieved from the downloaded encrypted data block in step 40, and transmits the message.
FIG. 2 illustrates a flow diagram illustrating a method 50 of decrypting data according to an embodiment herein. As shown in FIG. 2, in step 60, a Client downloads an encrypted data block from server, where the encrypted data block includes a server-stored secondary key. For example, Alice may sign onto a service or a platform (such as Cyph™ secure messaging platform). In step 70, the Client decrypts encrypted data block with a user password (e.g., a passphrase that Alice has memorized). Finally, in step 80, Client decrypts a received message with the sever-stored secondary key retrieved from the downloaded encrypted data block.
FIG. 4 illustrates an implementation of an exemplary networking environment (e.g., cloud computing environment 500) for the embodiments described herein is shown and described. The cloud computing environment 500 may include one or more resource providers 502 a, 502 b, 502 c (collectively, 502). Each resource provider 502 may include computing resources. In some implementations, computing resources may include any hardware and/or software used to process data. For example, computing resources may include hardware and/or software capable of executing algorithms, computer programs, and/or computer applications. In some implementations, exemplary computing resources may include application servers and/or databases with storage and retrieval capabilities. Each resource provider 502 may be connected to any other resource provider 502 in the cloud computing environment 500. In some implementations, the resource providers 502 may be connected over a computer network 508. Each resource provider 502 may be connected to one or more computing device 504 a, 504 b, 504 c (collectively, 504), over the computer network 508.
The high-speed interface 618 manages bandwidth-intensive operations for the computing device, while the low-speed interface manages lower bandwidth-intensive operations. Such allocation of functions is an example only. In some implementations, the high-speed interface 618 is coupled to the memory 614, the display 623 (e.g., through a graphics processor or accelerator), and to the high-speed expansion ports 619, which may accept various expansion cards (not shown). In the implementation, the low-speed interface is coupled to the storage device and the low-speed expansion port. The low-speed expansion port, which may include various communication ports (e.g., USB, Bluetooth®, Ethernet, wireless Ethernet) may be coupled to one or more input/output devices, such as a keyboard, a pointing device, a scanner, or a networking device such as a switch or router, e.g., through a network adapter.
The mobile computing device may communicate wirelessly through the communication interface 620, which may include digital signal processing circuitry where necessary. The communication interface 620 may provide for communications under various modes or protocols, such as GSM voice calls (Global System for Mobile communications), SMS (Short Message Service), EMS (Enhanced Messaging Service), or MMS messaging (Multimedia Messaging Service), CDMA (code division multiple access), TDMA (time division multiple access), PDC (Personal Digital Cellular), WCDMA (Wideband Code Division Multiple Access), CDMA2000, or GPRS (General Packet Radio Service), among others. Such communication may occur, for example, through the transceiver using a radio-frequency. In addition, short-range communication may occur, such as using a Bluetooth®, Wi-Fi™, or other such transceiver (not shown). In addition, a GPS (Global Positioning System) receiver module (not shown) may provide additional navigation- and location-related wireless data to the mobile computing device, which may be used as appropriate by applications running on the mobile computing device.
downloading, by a client computing device, an encrypted data block from a server, wherein the encrypted data block includes a server-stored symmetric key; and
decrypting, by the client computing device, the encrypted data block with a previously stored symmetric key that is stored locally to retrieve the server-stored symmetric key from the encrypted data block,
generating a new shared-symmetric key;
creating a new encrypted data block comprising the new shared-symmetric key and transmitting the new encrypted data block to the server,
wherein the server storing the sever-stored symmetric key:
encrypts a message before transmitting a message to it's intended recipient, and decrypts a received message,
wherein the server decrypts the new encrypted data block and overwrites the server-stored symmetric key with the new shared-symmetric key.
US14/841,288 2015-01-07 2015-08-31 Multi-key encryption method Active US10020946B2 (en)
US201562100689P true 2015-01-07 2015-01-07
US201562100682P true 2015-01-07 2015-01-07
US201562100692P true 2015-01-07 2015-01-07
US201562100684P true 2015-01-07 2015-01-07
US201562100693P true 2015-01-07 2015-01-07
US201562100686P true 2015-01-07 2015-01-07
US201562100676P true 2015-01-07 2015-01-07
US201562100674P true 2015-01-07 2015-01-07
US201562100688P true 2015-01-07 2015-01-07
US201562104307P true 2015-01-16 2015-01-16
US14/841,288 US10020946B2 (en) 2015-01-07 2015-08-31 Multi-key encryption method
US20160197721A1 US20160197721A1 (en) 2016-07-07
US10020946B2 true US10020946B2 (en) 2018-07-10
ID=56287069
US14/841,339 Active US10003465B2 (en) 2015-01-07 2015-08-31 System and method of encrypting authentication information
US14/841,310 Active US10103891B2 (en) 2015-01-07 2015-08-31 Method of generating a deniable encrypted communications via password entry
US14/841,327 Pending US20160197897A1 (en) 2015-01-07 2015-08-31 Cross-client communication method
US14/841,302 Active US9794070B2 (en) 2015-01-07 2015-08-31 Method of ephemeral encrypted communications
US14/841,288 Active US10020946B2 (en) 2015-01-07 2015-08-31 Multi-key encryption method
US14/841,296 Pending US20160197913A1 (en) 2015-01-07 2015-08-31 Method of using symmetric cryptography for both data encryption and sign-on authentication
US14/841,318 Pending US20160197896A1 (en) 2015-01-07 2015-08-31 Cryptographic method for secure communications
US15/001,015 Active US9906369B2 (en) 2015-01-07 2016-01-19 System and method of cryptographically signing web applications
US (8) US10003465B2 (en)
WO (1) WO2017091267A1 (en)
US9755832B2 (en) * 2015-12-29 2017-09-05 International Business Machines Corporation Password-authenticated public key encryption and decryption
US20180123782A1 (en) * 2016-10-27 2018-05-03 Motorola Solutions, Inc. Method for secret origination service to distribute a shared secret
US20130097419A1 (en) * 2011-05-09 2013-04-18 Feitian Technologies Co., Ltd. Method and system for accessing e-book data
US20150350894A1 (en) * 2014-05-29 2015-12-03 Entersekt, LLC Method and System for Establishing a Secure Communication Channel
US20160149867A1 (en) * 2013-07-29 2016-05-26 Alcatel Lucent Adaptive traffic encryption for optical networks
JP4067757B2 (en) * 2000-10-31 2008-03-26 株式会社東芝 Program distribution system
US7987363B2 (en) * 2007-12-21 2011-07-26 Harris Corporation Secure wireless communications system and related method
EP2416541A1 (en) * 2008-02-22 2012-02-08 Security First Corporation Systems and methods for secure workgroup management and communication
WO2011075139A1 (en) * 2009-12-18 2011-06-23 Hewlett-Packard Development Company, L.P. Methods and devices for updating firmware of a component using a firmware update application
KR101641809B1 (en) * 2011-12-27 2016-07-21 인텔 코포레이션 Method and system for distributed off-line logon using one-time passwords
JP6044775B2 (en) * 2012-03-09 2016-12-14 パナソニックＩｐマネジメント株式会社 Information recording system and recording media
RU2012133986A (en) * 2012-08-07 2014-02-27 Гугл Инк. Protection of user application settings from a third-party changes
US9083531B2 (en) * 2012-10-16 2015-07-14 Symantec Corporation Performing client authentication using certificate store on mobile device
EP3404901A1 (en) * 2013-12-31 2018-11-21 Google LLC Methods, systems, and media for providing access control for a computing device
CA2881644A1 (en) * 2014-03-31 2015-09-30 Smart Technologies Ulc Defining a user group during an initial session
WO2016205733A1 (en) * 2015-06-19 2016-12-22 Huawei Technologies Co., Ltd. Template uniform resource locator signing
2015-08-31 US US14/841,339 patent/US10003465B2/en active Active
2015-08-31 US US14/841,310 patent/US10103891B2/en active Active
2015-08-31 US US14/841,327 patent/US20160197897A1/en active Pending
2015-08-31 US US14/841,302 patent/US9794070B2/en active Active
2015-08-31 US US14/841,288 patent/US10020946B2/en active Active
2015-08-31 US US14/841,296 patent/US20160197913A1/en active Pending
2015-08-31 US US14/841,318 patent/US20160197896A1/en active Pending
2016-01-19 US US15/001,015 patent/US9906369B2/en active Active
2016-08-30 WO PCT/US2016/049443 patent/WO2017091267A1/en active Application Filing
US20160197721A1 (en) 2016-07-07
US9906369B2 (en) 2018-02-27
US20170078099A1 (en) 2017-03-16
US20160197896A1 (en) 2016-07-07
WO2017091267A1 (en) 2017-06-01
US20160197897A1 (en) 2016-07-07
US10103891B2 (en) 2018-10-16
US20160197913A1 (en) 2016-07-07
US20170063817A1 (en) 2017-03-02
US10003465B2 (en) 2018-06-19
US20160197894A1 (en) 2016-07-07
US9794070B2 (en) 2017-10-17
US20160197706A1 (en) 2016-07-07
CN103503364B (en) 2016-11-09 Cross-platform applications that use continuity
US8806609B2 (en) 2014-08-12 Security for remote access VPN
US20150207817A1 (en) 2015-07-23 Inter-extension messaging
US8756706B2 (en) 2014-06-17 Method for securing credentials in a remote repository
US9495544B2 (en) 2016-11-15 Secure data transmission and verification with untrusted computing devices
US20140032933A1 (en) 2014-01-30 Providing access to encrypted data
US20140282978A1 (en) 2014-09-18 Method and apparatus for secure interaction with a computer service provider
Owner name: CYPH INC., DELAWARE
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:LESTER, RYAN;ZADEGAN, BRYANT;SIGNING DATES FROM 20150824 TO 20150825;REEL/FRAME:044987/0006