System and method for securely exchanging messages
AssigneeSecure Exchanges Inc.
InventorCedric Boivin
Life of this patent
Estimating the term…
Abstract
The present system and method allow the exchange of messages, such as email, between a sender and a recipient while maintaining the data secure and the integrity of the content of the messages. The method and system do not require a user having an account to open a received message. The method comprises the server creating a new communication key upon reception of a request. The communication key is typically valid for a single request to ensure that each request is encrypted using different communication keys. The method typically comprises a client [A] establishing communication on [HANDSHAKE] with one or more servers [B]. The HANDSHAKE generally aims at initializing the encryption key that will be used to exchange information between A and B.
Claims34
A method for securing an electronic message, the method comprising:
- a client device creating a first key unknown to a server, the first key having at least two portions;
- encrypting sensitive information using the first key;
- communicating a communication message comprising a first of the at least two portions of the first key and the encrypted sensitive information to the server;
- storing the encrypted sensitive information on the server;
- generating parameters associated with the stored encrypted sensitive information, the parameters comprising a unique identification associated with the stored encrypted sensitive information;
- communicating the parameters to the client device;
- the client device further adding a second of the at least two portions of the first key to the received parameters;
- the client device creating an electronic message comprising the received parameters;
- the client device sending the created electronic message to a recipient.
A method for a recipient device to retrieve a secure electronic message, the method comprising:
- the recipient device receiving a secured access to the secured message;
- retrieving parameters associated with the secured access, the retrieved parameters comprising identification of the secure electronic message and a first portion of an end-to-end key;
- the recipient device requesting the secured message associated with the identification of the secure message to the server;
- sending content of the secured message encrypted with the end-to-end key and a second portion of the end-to-end key to the recipient device;
- the recipient device combining the first portion of the end-to-end key and the received second portion of the end-to-end key to forge the end-to-end key;
- using the end-to-end key to decrypt the content of the secured electronic message.
Dependencies are inferred from the claim text.