Back to results
US 12,113,906 B1Granted
End-to-end encryption based on a simple shared secret
OwnerBoris Reitmaninventor
Life of this patent
Estimating the term…
Abstract
This invention enables asynchronous encrypted communication under a protection of a simple password which must be communicated out-of-band. The password is easily communicable in-person, by telephone or by a text message. The invention assumes that one of the parties has an online device, such as a smartphone. After the encrypted session has been established, it can be used for a variety of cryptographic applications, such as encrypting or decrypting messages, sharing of cryptographic keys, and verifying data. The invention also has the secondary benefit of authenticating both parties to each other.
Claims38
A method to securely transmit a first password over a network by transmitting a second password out-of-band, the method comprising:
- a first operator registering a first device on a primary network;
- recording to a first memory of the first device (i) a first password for sharing;
- and (ii) a second password or a value derived from the second password, wherein the first password and the second password or the value derived from the second password are recorded under a first identifier;
- first operator communicating the second password to a second operator in one of a face-to-face meeting, a voice conversation, or over a secondary out-of-band network;
- establishing a first communication channel between the first device and a second device over the primary network, wherein the second device is pre-programmed with the second password and the first identifier;
- performing a data exchange between the first device and the second device over the established first communication channel, wherein the data exchange comprises:
- transmitting, from the second device to the first device, an authentication request comprising the first identifier and a first set of parameters of a pre-determined Password Authenticated Key Exchange (PAKE) protocol, wherein the first set of parameters of the pre-determined PAKE protocol are derived from the first password;
- computing, on the first device, a first symmetric cryptographic key based on the first password or the value derived from the first password and the first set of parameters of the pre-determined PAKE protocol received from the second device;
- transmitting, from the first device to the second device, a second set of parameters of the pre-determined PAKE protocol, a first message authentication code (MAC) derived from the computed first symmetric cryptographic key, first and second sets of parameters of the pre-determined PAKE protocol, and a first command, wherein the first command is encrypted with the computed first symmetric cryptographic key to provide a first encrypted command;
- computing, on the second device, the first symmetric cryptographic key based on the first set of parameters of the pre-determined PAKE protocol and the received second set of parameters of the pre-determined PAKE protocol;
- deriving, on the second device, a first candidate MAC based on the first and second parameters of the pre-determined PAKE protocol, the first encrypted command, and the computed first symmetric cryptographic key;
- validating, on the second device, that the derived first candidate MAC and the received first MAC match;
- wherein if the first candidate MAC and the first MAC match, the second device (i) processes the received first encrypted command and generates a second command, wherein the second command is encrypted with the computed first symmetric cryptographic key to provide a second encrypted command, and (ii) transmits to the first device the second encrypted command, second encrypted data to be shared, and a second MAC derived from (a) the computed first symmetric cryptographic key, (b) the first and second sets of parameters of the pre-determined PAKE protocol;
- (c) the first and second encrypted commands;
- and (d) the second encrypted data to be shared;
- and
- deriving, on the first device, a second candidate MAC based on (a) the computed first symmetric cryptographic key, (b) the first and second sets of parameters of the pre-determined PAKE protocol;
- (c) the first and second encrypted commands;
- and (d) the second encrypted data to be shared;
- validating, on the first device, that the second candidate MAC and the received second MAC match;
- wherein if the derived second candidate MAC and the received second MAC match, the first device (i) decrypts and processes the received second encrypted command and decrypts and stores the received second encrypted data;
- and (ii) transmits the first encrypted data to be shared to the second device;
- and
- deciphering, on the second device, the received strong password using the computed first symmetric cryptographic key.
21 more elements
A method of encrypted electronic mail (email) messaging, the method comprising:
- a first operator configuring a first device, the configuration comprising:
- (i) choosing a first symmetric cryptographic key;
- (ii) creating a ciphertext by encrypting information using the first symmetric cryptographic key;
- (iii) composing an email message, where the email message comprises (a) a body comprising the created ciphertext and additional information;
- (b) a header including an email address of one or more recipients, where the one or more recipients includes at least a second operator;
- and a subject header including (i) encrypted subject information, and (ii) additional subject information;
- (iv) deriving a first identifier based on the composed email message;
- (v) recording to a first memory of a first device (i) the first symmetric cryptographic key;
- and (ii) a first password or a value derived from the first password, wherein the first symmetric cryptographic key and the first password or the value derived therefrom are recorded under the first identifier;
- registering the first device on a network;
- transmitting the composed email message to the one or more recipients;
- receiving the composed email message on at least a second device and identifying that it includes ciphertext;
- deriving, on the second device, the first identifier from the received composed email message;
- establishing a first communication channel between the first device and the second device, wherein the second device is pre-programmed with the first password and the first identifier;
- performing a data exchange between the first device and the second device over the established first communication channel, wherein the data exchange comprises:
- transmitting, from the second device to the first device, an authentication request comprising the first identifier and a first set of parameters of a pre-determined Password Authenticated Key Exchange (PAKE) protocol, wherein the first set of parameters of the pre-determined PAKE protocol are derived from the first password;
- computing, on the first device, a second symmetric cryptographic key based on the first password or the value derived from the first password and the first set of parameters of the pre-determined PAKE protocol received from the second device;
- transmitting, from the first device to the second device, a second set of parameters of the pre-determined PAKE protocol, a first message authentication code (MAC) derived from the computed first symmetric cryptographic key, first and second sets of parameters of the pre-determined PAKE protocol, and a first command, wherein the first command is encrypted with the computed second symmetric cryptographic key to provide a first encrypted command;
- computing, on the second device, the second symmetric cryptographic key based on the first set of parameters of the pre-determined PAKE protocol and the received second set of parameters of the pre-determined PAKE protocol;
- deriving, on the second device, a first candidate MAC based on at least the first and second parameters of the pre-determined PAKE protocol, the first encrypted command, and the computed second symmetric cryptographic key;
- validating, on the second device, that the derived first candidate MAC and the received first MAC match;
- wherein if the first candidate MAC and the first MAC match, the second device (i) decrypts and processes the received first encrypted command and generates a second command, wherein the second command is encrypted with the computed second symmetric cryptographic key to provide a second encrypted command, and (ii) transmits to the first device the generated second encrypted command and a second MAC derived from (a) the computed second symmetric cryptographic key, (b) the first and second sets of parameters of the pre-determined PAKE protocol;
- (c) the first and second encrypted commands;
- and
- deriving, on the first device, a second candidate MAC based on (a) the computed second symmetric cryptographic key, (b) the first and second sets of parameters of the pre-determined PAKE protocol;
- (c) the first and second encrypted commands;
- validating, on the first device, that the second candidate MAC and the received second MAC match;
- wherein if the derived second candidate MAC and the received second MAC match, the first device (i) decrypts and processes the received second encrypted command;
- and (ii) transmits to the second device the first symmetric cryptographic key encrypted with the second symmetric key;
- and
- the second device decrypts the first symmetric encryption key using the computed second symmetric key;
- deciphering the ciphertext included in the email message using the received first symmetric cryptographic key;
- wherein a pre-determined number of authentication attempts may be performed, and wherein if the pre-determined number of authentication attempts is exceeded one of the first or second devices rejects any further authentication attempts during a pre-determined rejection time period.
30 more elements
The method of 16, wherein the second device is pre-programmed with second operator's asymmetric public key, the second command includes a second operator's asymmetric public key and the first device stores it in a contact card of the second operator;
- and, subsequent emails from the first operator to the second operator are encrypted asymmetrically using the asymmetric public key of the second operator.
Dependencies are inferred from the claim text.