Secure short message service (SMS) communications
AssigneeeBay Inc.
InventorUpendra Mardikar
Life of this patent
Estimating the term…
Abstract
Embodiments of the present disclosure provide systems and methods for secure Short Message Service (SMS) communications. According to an embodiment, a method of providing secure Short Message Service (SMS) communications comprises requesting that SMS data to be sent from a client device to a remote location be encrypted. The method also comprises encrypting the SMS data by processing the SMS data with a Message Authentication Code (MAC) and a timestamp and/or counter along with second factor authentication information. The method further comprises sending the encrypted SMS data to the remote location by a secure SMS application via a regular SMS channel of the client device.
Claims29
A method of providing secure Short Message Service (SMS) communications comprising:
- requesting, by a secure SMS application loaded inside a client device, that SMS data to be sent from the client device to a remote location be encrypted internally by a Crypto component in the client device, wherein the secure SMS application is in communication with the Crypto component;
- encrypting, internally by the Crypto component in the client device, the SMS data by processing the SMS data with a Message Authentication Code (MAC) and a timestamp and/or counter along with second factor authentication information;
- sending the encrypted SMS data to the remote location by the secure SMS application via a regular SMS channel of the client device;
- receiving encrypted SMS data from the remote location via the regular SMS channel of the client device;
- and
- decrypting and reading the received encrypted data using the secure SMS application of the client device, wherein the decrypting and reading further comprises:
- receiving an HMAC timestamp and/or counter with the received encrypted SMS data;
- comparing the received HMAC timestamp and/or counter with a pre-determined appropriate timestamp and/or counter to determine veracity;
- once the received HMAC timestamp and/or counter is verified, processing a pre-registered unique identifier associated with the remote location that is known by the client device so that a position of such identifier is proven.
A client device comprising:
- one or more processors;
- and
- one or more memories adapted to store a plurality of machine-readable instructions which when executed by the one or more processors are adapted to cause the client device to:
- request, by a secure SMS application loaded inside the client device, that SMS data to be sent from the client device be encrypted internally by a Crypto component in the client device, wherein the secure SMS application is in communication with the Crypto component;
- encrypt, internally by the Crypto component in the client device, the SMS data by processing the SMS data with a Message Authentication Code (MAC) and a timestamp and/or counter along with second factor authentication information;
- send the encrypted SMS data to a remote location by the secure SMS application via a regular SMS channel of the client device;
- receive an HMAC timestamp and/or counter along with received encrypted SMS data from the remote location via the regular SMS channel of the client device;
- compare the received HMAC timestamp and/or counter with a pre-determined appropriate timestamp and/or counter to determine veracity;
- once the received HMAC timestamp and/or counter is verified, process a pre-registered unique identifier associated with the remote location that is known by the client device so that a position of such identifier is proven;
- and
- decrypt and read the received encrypted SMS data using the secure SMS application of the client device.
A secure SMS system comprising:
- a client device in communication with a remote location via a network;
- one or more processors;
- and
- one or more memories adapted to store a plurality of machine-readable instructions which when executed by the one or more processors are adapted to cause the secure SMS system to:
- encrypt, internally by a Crypto component in the client device, SMS data to be sent from the client device by generating a Hash Message Authentication Code (HMAC) using an encryption algorithm and applying the HMAC to a combination of a timestamp and/or counter with second factor authentication information internally in the Crypto component of the client device;
- send encrypted SMS data via a secure SMS application using a regular SMS channel of the client device to the remote location, wherein the secure SMS application is in communication with the Crypto component;
- receive an HMAC timestamp and/or counter with received encrypted SMS data from the remote location via the regular SMS channel of the client device;
- compare the received HMAC timestamp and/or counter with a pre-determined appropriate timestamp and/or counter to determine veracity;
- once the received HMAC timestamp and/or counter is verified, process a pre-registered unique identifier associated with the remote location that is known by the client device so that a position of such identifier is proven;
- and
- decrypt and read the received encrypted SMS data using the secure SMS application of the client device.
Dependencies are inferred from the claim text.