System and method for securely exchanging messages
AssigneeSecure Exchanges Inc.
InventorCedric Boivin
Life of this patent
Estimating the term…
Abstract
The present system and method allow the exchange of messages, such as email, between a sender and a recipient while maintaining the data secure and the integrity of the content of the messages. The method and system do not require a user having an account to open a received message. The method comprises the server creating a new communication key upon reception of a request. The communication key is typically valid for a single request to ensure that each request is encrypted using different communication keys. The method typically comprises a client [A] establishing communication on [HANDSHAKE] with one or more servers [B]. The HANDSHAKE generally aims at initializing the encryption key that will be used to exchange information between A and B.
Claims46
1) A method for securing an electronic message, the method comprising:
- the client device creating a first key unknown to by the server, the first key having at least two portions;
- encrypting sensitive information using the first key;
- communicating a communication message comprising a first of the portions of the first key and the encrypted sensitive information to the server;
- storing the sensitive information on the server;
- generating parameters associated with the stored sensitive information, the parameters comprising a unique identification associated with the stored sensitive information;
- communicating the parameters to the client device;
- the client device further adding a second of the portions of the first key to the received parameters;
- the client device creating an electronic message comprising the completed parameters;
- the client device sending the created electronic message to a recipient.
26) A method for a recipient device to retrieve a secure electronic message, the method comprising:
- the recipient device receiving a secured access to the secured message;
- retrieving parameters associated with the secured access, the retrieved parameters comprising identification of the secure message and a first portion of an end-to-end key;
- the recipient device requesting the secured message associated with the identification of the secure message to the server;
- sending content of the secured message encrypted with the end-to-end key and a second portion of the end-to-end key to the recipient device;
- the recipient device combining the known first portion of the end-to-end key and the received second portion of the end-to-end key to forge the end-to-end key;
- using the end-to-end key to decrypt the content of the secured message.
35) A method to request sensitive information from a recipient and to establish a secure communication with the recipient, the method comprising:
- a client device sending a request for an envelope to a server;
- the server creating the envelope;
- sending to the recipient device an access to the envelope;
- the recipient device filling the envelope with sensitive data;
- storing and encrypting the sensitive data on the server using a first key known only by the server;
- sending to the client device a secured access to the sensitive information, the communication to the secured access being encrypted with a second key known to the server and to the client device.
Dependencies are inferred from the claim text.