Secured data transmission using identity-based cryptography

A secure message transmission device (SMTD) for secured data transmission and automated performance of operations by an operational system based thereon, the SMTD being connected to an end-point computer configured to generate a digital model data file for transmission via a work order message, or an end-point operational system configured to receive the work order message including the digital model data file, the SMTD comprising:

• a network port connected to a communication network to permit transmission of the work order message between the end-point computer and the end-point operational system via the communication network;
• a non-volatile storage medium storing a public master key for use in creating an encryption key, a private decryption key, a revocation list including identifiers of message recipients having revoked access to the public master key or private decryption key, and a secure messaging module;
• and
• a processor configured to execute the secure messaging module and a key generator module, the key generator module being configured to generate, using a key generation algorithm, one or more public encryption keys, each of the one or more public encryption keys being unique to a designated message recipient and generated using an input including the public master key, a validity period, and an identifier of the designated message recipient;
• and
• wherein, for the SMTD connected to the end-point computer, the secure messaging module is configured to:
• receive the work order message from the end-point computer for transmission to the designated message recipient, and
• if the identifier of the designated message recipient matches an identifier within the revocation list, delete the work order message and transmit a message to notify a user at the end-point computer of a failed transmission of the work order message, and
• if the identifier of the designated message recipient does not match an identifier within the revocation list, effect generation at the SMTD of an ephemeral copy of a public encryption key, the public encryption key being generated using the key generator module and inputs including the public master key, a validity period, and an identifier of the designated message recipient, and encrypt the work order message using the ephemeral copy of the public encryption key, and transmit the work order message to the end-point operational system through the network port;
• and
• wherein, for the SMTD connected to the end-point operational system, the secure messaging module is configured to:
• receive the work order message from the network port for transmission to the designated message recipient, and
• if the identifier of the designated message recipient matches an identifier within the revocation list, delete the work order message and transmit a message to notify a user at the end-point computer of a failed transmission of the work order message, and
• if the identifier of the designated message recipient does not match an identifier within the revocation list, decrypt the work order message using the private decryption key and transmit the work order message to the end-point operational system, and upon receipt of the work order message,
• the end-point operational system being configured to use the digital model data file therein to perform an operation for implementing an object represented by the digital model data file.

A method for secured data transmission and automated performance of operations by an operational system based thereon, the method comprising, at a secure message transmission device (SMTD) connected to an end-point computer configured to generate a digital model data file for transmission via the work order message, or an end-point operational system configured to receive the work order message including the digital model data file, the method comprising:

• transmitting or receiving, through a network port and via a communication network, the work order message between the end-point computer and the end-point operational system including:
• storing, in a non-volatile storage medium, a public master key for use in creating an encryption key, a private decryption key, and a revocation list including identifiers of message recipients having revoked access to the public master key or private decryption key;
• generating, using a key generation algorithm, one or more public encryption keys, each of the one or more public encryption keys being unique to a designated message recipient and generated using an input including the public master key, a validity period, and an identifier of the designated message recipient;
• and
• wherein, for the SMTD connected to the end-point computer, the method further comprising:
• receiving the work order message from the end-point computer for transmission to the designated message recipient, and
• if the identifier of the designated message recipient matches an identifier within the revocation list, deleting the work order message and transmitting a message to notify a user at the end-point computer of a failed transmission of the work order message, and
• if the identifier of the designated message recipient does not match an identifier within the revocation list, effecting generation of an ephemeral copy of a public encryption key, the public encryption key being generated using inputs including the public master key, a validity period, and an identifier of the designated message recipient, and encrypting the work order message using the ephemeral copy of the public encryption key, and transmitting the work order message to the end-point operational system through the network port;
• and
• wherein, for the SMTD connected to the end-point operational system, the method further comprising:
• receiving the work order message from the network port for transmission to the designated message recipient, and
• if the identifier of the designated message recipient matches an identifier within the revocation list, deleting the work order message and transmitting a message to notify a user at the end-point computer of a failed transmission of the work order message, and
• if the identifier of the designated message recipient does not match an identifier within the revocation list, decrypting the work order message using the private decryption key and transmitting the work order message to the end-point operational system, and upon receipt of the work order message,
• the end-point operational system being configured to use the digital model data file therein to perform an operation for implementing an object represented by the digital model data file.