System and method for email and file decryption without direct access to required decryption key
AssigneeZeva Inc.
InventorIssam ANDONI
Life of this patent
Estimating the term…
Abstract
Exemplary systems and methods are directed to decrypting electronic messages in a network. The system includes a processor configured to receive or monitor message sources for encrypted messages, where private keys associated with the encrypted messages are not previously provided to the system. For each message, extract a set of user certificate identifiers and corresponding encrypted session keys, securely communicate with private key provider to decrypt the encrypted session key with an acquired private key, and decrypt the message with the unencrypted session key.
Claims22
A system for decrypting electronic messages, comprising:
- a processor configured to receive or monitor message sources on a network for encrypted messages, wherein private keys associated with the encrypted messages are not previously provided to the processor,
- wherein for each message the processor is configured to extract a set of user certificate identifiers and corresponding encrypted session keys, securely communicating with private key provider to acquire a private key for decrypting the encrypted session key, and decrypt the message with the unencrypted session key.
A method for decrypting electronic messages in a system having at least one computing device connected to a network, the method comprising:
- receiving or monitoring a network for encrypted messages sent by at least one message source on the network, wherein private keys associated with the encrypted messages are not previously provided to the system;
- and
- for each received message:
- extracting a set of user certificate identifiers and corresponding encrypted session keys;
- securely communicating with a private key provider to obtain a private key for decrypting the encrypted session key;
- and
- decrypting the message with the unencrypted session key.
A computer readable medium for executing a method for decrypting electronic messages in a network, the medium having program code recorded thereon such that when placed in communicable contact with a processor the processor performs the steps of:
- monitoring the network for encrypted messages sent by at least one message source, wherein private keys associated with the encrypted messages of the message source are not previously provided to the processor;
- and
- for each received message:
- extracting a set of user certificate identifiers and corresponding encrypted session keys;
- sending the certificate identifiers to a key management server to obtain a private key for decrypting the encrypted session key;
- and
- decrypting the message with the unencrypted session key.
A system for decrypting electronic messages, comprising:
- a processor configured to monitor message sources on a network for encrypted messages wherein private keys associated with the encrypted messages are not previously provided to the system, and decrypt at least one message with a session key obtained based on a private key acquired over a network connection.
Dependencies are inferred from the claim text.