System and method for securing information, including a system and method for setting up a correspondent pairing

An information process arrangement comprising a First Information Processing System (FIPS) and a Second Information Processing System (SIPS) arranged separate from the FIPS and capable of exchanging signals with the FIPS, wherein the FIPS comprises

• FIPS key generation means to generate a first key;
• FIPS encryption means to encrypt sensitive data using the first key, thereby generating temporarily secured sensitive data;
• FIPS correspondent selection means to select correspondent data to which the sensitive data is destined;
• and
• FIPS storage means to store temporarily secured sensitive data;
• the SIPS comprises
• SIPS storage means to store correspondence data, a plurality of keys, a plurality of key identifiers, and a public key;
• SIPS identification means to identify a correspondent key and a correspondent key identifier based on received FIPS selected correspondent data;
• and
• SIPS encryption means to encrypt FIPS received first key using said identified correspondent key, and to encrypt correspondent key identifier using said public key, thereby generating a secured first key and a secured key identifier;
• and the FIPS further comprises
• FIPS secured data integration means to integrate into temporarily secured sensitive data, received SIPS secured first key and secured key identifier into integrated secured sensitive data.

An information process arrangement comprising a First Information Processing System (FIPS) and a Second Information Processing System (SIPS) arranged separate from the FIPS and capable of exchanging signals with the FIPS, wherein

• the FIPS comprises
• FIPS storage means to store integrated secured sensitive data;
• and
• FIPS secured data extraction means to extract from integrated secured sensitive data a secured first key, a secured key identifier, and temporarily secured sensitive data;
• the SIPS comprises
• SIPS storage means to store correspondence data, a plurality of keys, a plurality of key identifiers, and a public key;
• and
• SIPS decryption means to decrypt FIPS received secured key identifier using the public key, thereby extracting the correspondent key identifier, to decrypt FIPS received secured first key using the key corresponding in the SIPS storage means to extracted key identifier, thereby extracting the first key;
• and
• the FIPS further comprises
• FIPS decryption means to decrypt temporarily secured sensitive data using the SIPS received first key, therefore extracting the sensitive data.

An Information Processing System (IPS) comprising:

• storage means to store correspondence data, a plurality of keys, a plurality of key identifiers, and a public key;
• input means to receive from an external IPS a correspondent signal and a first key used by said external IPS to encrypt sensitive data;
• selection means to identify a correspondent key and a correspondent key identifier corresponding to the received correspondent signal in the storage means;
• encryption means to encrypt the first key using said identified correspondent key, and to encrypt correspondent key identifier using said public key, thereby generating a secured first key and a secured key identifier;
• and
• outputting means to transmit the secured first key and the secured key identifier to the external IPS as to said external IPS to store the encrypted sensitive data, the secured first key and the secured key identifier into integrated data.

An Information Processing System (IPS) comprising:

• storage means to store correspondence data, a plurality of keys, a plurality of key identifiers, and a public key;
• input means to receive from an external IPS a secured first key and a secured key identifier extracted from integrated secured sensitive data by said external IPS;
• decryption means to decrypt the secured key identifier using the public key, thereby extracting a correspondent key identifier, and to decrypt the secured first key using an identified correspondent key, thereby extracting a first key;
• selection means to identify a correspondent key corresponding to the extracted correspondent key identifier in the storage means;
• and
• outputting means to transmit the first key to the external IPS as to said external IPS to decrypt integrated secured sensitive data using said first key, thereby extracting the sensitive data.

An information process arrangement comprising a plurality of Information Processing Systems (IPSs) completing at least one of encrypting and decrypting a first key used for the encryption of sensitive data exchanged between two external information processing systems with pairing of an encryption participating IPS with a decryption participating IPS being required for the decryption participating IPS to decrypt the first key encrypt by the encryption participating IPS, the IPSs being communicatively linked and capable of exchanging signals, wherein each IPS comprises

• storage means to store a public key, correspondent data, a plurality of keys, and a plurality of key identifiers;
• selection means to identify a key and a key identifier in the storage means;
• ciphering means to generate availability codes based on identified key and key identifier;
• communication means to exchange availability codes with another IPS;
• verification means to compare received availability codes with keys and key identifiers stored in storage means;
• correspondence setting means to associate identified key and key identifier to correspondent data, whereby two IPSs exchanging availability codes complete a correspondence pairing process.

An Information Processing System (IPS) completing at least one of encrypting and decrypting a first key used for the encryption of sensitive data exchanged with another IPS and wherein the decryption of the first key requires a correspondent pairing of the encrypting IPS with the decrypting IPS, wherein the IPS comprises

• storage means to store a public key, correspondent data, a plurality of keys, and a plurality of key identifiers;
• selection means to identify a key and a key identifier in the storage means;
• ciphering means to generate availability codes based on identified key and key identifier;
• communication means to exchange availability codes with another IPS;
• verification means to compare received availability codes with keys and key identifiers stored in storage means;
• correspondence setting means to associate identified key and key identifier to correspondent data, whereby a correspondence pairing process is completed between the ISP and said other ISP.

An information processing method comprising:

• generating a first key in a First Information Processing System (FIPS);
• encrypting sensitive data using the generated first key, thereby generating temporary secured sensitive data;
• selecting a correspondent to whom the sensitive data is destined;
• transmitting the first key and correspondent selection data from the FIPS to a Second Information Process System (SIPS) which is arranged separate from the FIPS;
• identifying among SIPS stored key identifiers and keys a correspondent key identifier and a correspondent key based on received correspondent selection data from the FIPS;
• encrypting the first key using the identified correspondent key, thereby generating a secured first key in said SIPS;
• encrypting the identified correspondent key identifier using a SIPS stored public key, thereby generating a secured key identifier in said SIPS;
• transmitting the secured first key and the secured key identifier from the SIPS to the FIPS;
• and
• integrating into integrated secured sensitive data the temporarily secured data, the secured first key, and the key identifier.

An information processing method comprising:

• extracting from integrated secured sensitive data a secured first key and a secured key identifier on a First Information Processing System (FIPS);
• transmitting the secured first key and the secured key identifier from the FIPS to a Second Information Processing System (SIPS) separate from the FIPS;
• decrypting the key identifier using a SIPS stored public key on the SIPS, thereby extracting a correspondent key identifier;
• identifying a correspondent key associated to the identified correspondent key identifier among SIPS stored keys and key identifiers on the SIPS;
• decrypting the secured first key using the identified correspondent key on the SIPS, thereby extracting a first key;
• transmitting the first key from the SIPS to the FIPS;
• and
• decrypting the sensitive data using the first key on the FIPS, thereby extracting sensitive data.

An information processing method comprising:

• receiving from an external information processing system a first key used to encrypt sensitive data and correspondent data designating to whom the sensitive data is destined;
• identifying a correspondent key and a correspondent key identifier among stored keys and key identifiers using the received correspondent data;
• encrypting the received key using the identified correspondent key, thereby generating a secured first key;
• encrypting the identified correspondent key identifier using a stored public key, thereby generating a secured key identifier;
• and
• transmitting the secured first key and secured key identifier to the external information processing system for integration into integrated secured sensitive data.

An information processing method comprising:

• receiving from an external information processing system a secured first key and a secured key identifier extracted from integrated secured sensitive data;
• decrypting the secured key identifier using a stored public key, thereby extracting a correspondent key identifier;
• identifying an associated correspondent key based on correspondent key identifier among stored keys and key identifiers;
• decrypting the secured first key based on identified correspondent key, thereby extracting a first key;
• and
• transmitting the first key to the external information processing system for decryption of the integrated secured sensitive data, thereby extracting sensitive data.

A correspondent pairing method between two Information Processing Systems (IPSs) storing a public key, correspondent data, a plurality of keys and a plurality of key identifiers, with each said IPS completing at least one of encrypting and decrypting a first key used for the encryption of sensitive data and wherein the decryption of the first key requires a correspondent pairing of the encrypting IPS with the decrypting IPS, the method comprising:

• establishing communication between the IPSs;
• identifying an available IPS stored key and key identifier among a plurality of stored keys and key identifiers on a primary IPS;
• generating ciphered availability codes based on identified key and key identifier on the primary IPS;
• exchanging the availability codes with the secondary IPS;
• verifying the key and the key identifier availability by comparing the exchanged ciphered availability codes with ciphered stored keys and key identifiers on the secondary IPS;
• setting correspondent data on the two IPSs when the exchanged availability codes identify an available key and key identifier on the two IPSs, whereby a correspondent pairing is created between the two IPSs.

A correspondent pairing method for a primary Information Processing System (IPS) to set identical correspondent pairing data than at least one secondary IPS with the IPSs storing a public key, correspondent data, a plurality of keys and a plurality of key identifiers, with each said IPS completing at least one of encrypting and decrypting a first key used for the encryption of sensitive data and wherein the decryption of the first key requires a correspondent pairing of the encrypting IPS with the decrypting IPS, the method comprising:

• authenticating the secondary IPS;
• generating a ciphering seed common to the primary and the secondary IPS based on secondary IPS authentication;
• identifying an available IPS stored key and key identifier among a plurality of stored keys and key identifiers;
• generating ciphered availability codes based on the identified key and key identifier;
• transmitting the ciphered availability codes to the secondary IPS;
• receiving an availability code response from the secondary IPS;
• setting correspondent pairing data corresponding to the key and key identifier associated with a positive availability code response.

A program storage device which stores program codes readable from a communication system in order to facilitate two Information Processing Systems (IPSs) to complete a correspondent pairing process, each IPS storing a public key, correspondent data, a plurality of keys and a plurality of key identifiers, with each said IPS completing at least one of encrypting and decrypting a first key used for the encryption of sensitive data and wherein the decryption of the first key requires a correspondent pairing of the encrypting IPS with the decrypting IPS, where in the program codes are responsible for the communication system complete the steps of:

• receiving user authorization to complete a correspondent pairing process;
• establishing communication between a primary IPS and a secondary IPS;
• and
• receiving user correspondent data.