Classifications

• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/60—Protecting data
  • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
  • G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
  • H04L63/0435—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2211/00—Indexing scheme relating to details of data-processing equipment not covered by groups G06F3/00 - G06F13/00
  • G06F2211/007—Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2211/00—Indexing scheme relating to details of data-processing equipment not covered by groups G06F3/00 - G06F13/00
  • G06F2211/007—Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
  • G06F2211/008—Public Key, Asymmetric Key, Asymmetric Encryption
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2211/00—Indexing scheme relating to details of data-processing equipment not covered by groups G06F3/00 - G06F13/00
  • G06F2211/009—Trust
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/2107—File encryption

Definitions

• the present invention relates generally to computer security and more specifically to allow the secure transfer and receipt of data between computers using anonymous keys.
• One way of securely transferring data over the Internet includes the use of a public key/private key system.
• a public key is provided by some designated authority as a key that, combined with a private key derived from the public key, can be used to effectively encrypt and decrypt messages and digital signatures.
• a public and private key are created simultaneously using the same algorithm (a popular one is known as RSA) by a certificate authority.
• the private key is given only to the requesting party and the public key is made publicly available (as part of a digital certificate) in a directory that all parties can access.
• the private key is never shared with anyone or sent across the Internet.
• the private key is used to decrypt text that has been encrypted with the public key counterpart by someone else who has the public key.
• Public key cryptography generally requires a large mathematical decomposition in order to work effectively. Generally, the length of a private key is in the order of 64 bytes. Decomposing these relatively small private keys requires considerable computational power. Public key cryptography is typically used as a one-way encryption and if a private key is changed, then everyone else that has the public key counterpart must receive a new public key.
• a system and method is provided of securely transmitting data between two computers over a network, such as the Internet, using anonymous keys that are private only to each user and are not shared with anyone else.
• the data is first encrypted at a first computer with a first private key into a first encrypted data file.
• the first encrypted data file is then transmitted to a second computer, wherein the first encrypted data file is encrypted with a second private key into a second encrypted data file.
• the second encrypted data file is then sent to the first computer, wherein the second encrypted data file is now decrypted with the first private key, known to the user at the first computer, into a third encrypted data file.
• the third encrypted data file is then sent to the second computer, wherein the third encrypted data file can not be fully decrypted into the original data file using the second private key.
• FIG. 1 is a schematic diagram illustrating a client transmitting secure data to a server over the Internet, in accordance with the present invention
• FIG. 2 is a block diagram of the server computer shown in FIG. 1 , in accordance with the present invention.
• FIG. 3 is a block diagram of one embodiment of the non-volatile memory module located within the server computer of FIG. 2;
• FIG. 4 is a block diagram of the client computers shown in FIG. 1, in accordance with the present invention
• FIG. 5 is a block diagram of one embodiment of the non-volatile memory module located within the client computers of FIG. 4;
• FIG. 6 is a flowchart of a method illustrating how a client, having a private key, passes encrypted data to a server computer, according to the invention.
• FIG. 1 a schematic diagram illustrates a server 100 used to receive encrypted data from a client computer 102 through the Internet 106 using anonymous keys that are private and unknown to others.
• FIG. 2 is a block diagram of the server computer 100 shown in FIG. 1.
• Server 100 includes a CPU 202, a RAM 204, a non-volatile memory 206, an input device 208, a display 210, and an Internet interface 212 for providing access to the Internet.
• FIG. 3 is a block diagram of one embodiment of the non-volatile memory module 206 located within the server computer 100 of FIG. 2.
• the non-volatile memory 206 includes an encrypt/ decrypt engine 302, and a secure data database 304 for storing secured data.
• the encrypt/ decrypt engine 302 is programmed to encrypt and decrypt data using a password or a key provided by the user.
• the encryption/ decryption engine is programmed to use associative properties that would provide an associative-type of algorithm for the encryption and decryption of data. For example, if the data is encrypted by 'X then that would result in encrypted data(X). If encrypted data(X) is then encrypted by Y' then that would result in encrypted data(X*Y). If encrypted data(X*Y) is decrypted by 'X' then that would result in encrypted data(Y). If encrypted data(Y) is decrypted by ⁇ ' then that would result in obtaining the original un-encrypted data.
• the computation power required to encrypt and decrypt data using this system and method is much less than the computational power required in a public/private key system, therefore longer keys can be used to provide an extremely high-level of security.
• FIG. 4 is a block diagram of a client computer 102 shown in FIG. 1.
• Client 102 includes a CPU 402, a RAM 404, a non-volatile memory
• FIG. 5 is a block diagram of one embodiment of the non-volatile memory module 404 located within the client 102 of FIG. 4.
• the nonvolatile memory 406 includes an encrypt/ decrypt engine 502 for encrypting and decrypting data.
• the encrypt/ decrypt engine 502 can also be stored in RAM 404, and excellent results can be obtained when the encrypt/ decrypt engine is served up as a JavaTM applet to the client 102, thereby eliminating the need for the client to install his own encrypt/ decrypt engine on his hard drive.
• FIG. 6 is a flowchart of a method illustrating how a client, with a private key, passes data securely encrypted to a server computer through the Internet in accordance with the invention. It is not necessary for the data to pass to a server computer, it can equally work between two client computers.
• the process begins at step 600.
• a user enters data on the client computer at step 602.
• the data is encrypted with the encrypt/ decrypt engine using the user's private key (El) and the once- encrypted data (Dl) is sent over the Internet to the server.
• El user's private key
• Dl once- encrypted data
• the server encrypts the once-encrypted data with the server private key (E2) and the twice-encrypted data [(D 1)*(D2)] is sent back to the client over the Internet.
• the client re-enters his private key and decrypts the twice-encrypted data with his private key resulting in once-encrypted data (D2) that is encrypted with the server private key.
• the once-encrypted data (D2) is sent over the Internet back to the server.
• the server can decrypt the once-encrypted data with the server private key (E2) to obtain full access to the original data fully decrypted.
• the server can then store the data in a secure data database 304 or process the data accordingly. The process then ends at step 612.
• the private key of both the client and server is not known by anybody else, therefore, the private key can be different every time a user utilizes this system and method of transmitting data.
• the private keys can also be very long (i.e. 1000 bytes) and could include biometric data, such as a digitized fingerprint of the user. Since this secure system and method of transmitting encrypted data utilizes a totally private key unknown to others, the various different applications of this invention are virtually limitless. Furthermore, the encrypted data would be virtually impossible to decrypt by a hacker since private keys can be much longer than a typical private key (64 bytes) used in a private /public key system.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Hardware Design (AREA)
• Theoretical Computer Science (AREA)
• General Engineering & Computer Science (AREA)
• Software Systems (AREA)
• Health & Medical Sciences (AREA)
• Bioethics (AREA)
• General Health & Medical Sciences (AREA)
• Computer Networks & Wireless Communication (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Computing Systems (AREA)
• Signal Processing (AREA)
• Storage Device Security (AREA)
• Communication Control (AREA)
• Circuits Of Receivers In General (AREA)
• Computer And Data Communications (AREA)
• Hardware Redundancy (AREA)
• Information Transfer Between Computers (AREA)
• Management, Administration, Business Operations System, And Electronic Commerce (AREA)
• Data Exchanges In Wide-Area Networks (AREA)

Applications Claiming Priority (3)

Publications (1)

Family

ID=22299551

Family Applications (4)

Family Applications Before (3)

Country Status (7)

Families Citing this family (13)

Family Cites Families (18)

• 1999
  • 1999-10-14 IL IL13647699A patent/IL136746A0/xx unknown
  • 1999-10-14 EP EP99970527A patent/EP1040616A4/fr not_active Ceased
  • 1999-10-14 AU AU12076/00A patent/AU1207600A/en not_active Abandoned
  • 1999-10-14 EP EP99970526A patent/EP1125393B1/fr not_active Expired - Lifetime
  • 1999-10-14 WO PCT/US1999/024088 patent/WO2000022510A1/fr not_active Application Discontinuation
  • 1999-10-14 AU AU13151/00A patent/AU1315100A/en not_active Abandoned
  • 1999-10-14 CA CA002312967A patent/CA2312967C/fr not_active Expired - Lifetime
  • 1999-10-14 AU AU17067/00A patent/AU1706700A/en not_active Abandoned
  • 1999-10-14 IL IL13674599A patent/IL136745A0/xx unknown
  • 1999-10-14 CA CA002312980A patent/CA2312980A1/fr not_active Abandoned
  • 1999-10-14 AT AT99970526T patent/ATE456103T1/de not_active IP Right Cessation
  • 1999-10-14 WO PCT/US1999/024191 patent/WO2000022496A2/fr not_active Application Discontinuation
  • 1999-10-14 CA CA002312981A patent/CA2312981A1/fr not_active Abandoned
  • 1999-10-14 IL IL13674899A patent/IL136748A0/xx unknown
  • 1999-10-14 EP EP99956566A patent/EP1038217A1/fr not_active Withdrawn
  • 1999-10-14 CA CA002313081A patent/CA2313081A1/fr not_active Abandoned
  • 1999-10-14 WO PCT/US1999/024157 patent/WO2000022774A1/fr active Search and Examination
  • 1999-10-14 IL IL13674799A patent/IL136747A0/xx unknown
  • 1999-10-14 DE DE69941958T patent/DE69941958D1/de not_active Expired - Lifetime
  • 1999-10-14 EP EP99960133A patent/EP1038369A2/fr not_active Withdrawn
  • 1999-10-14 AU AU12072/00A patent/AU1207200A/en not_active Abandoned
  • 1999-10-14 WO PCT/US1999/024142 patent/WO2000022773A1/fr active Search and Examination

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events