Granted Patent B2

US 7,587,051 · App. 10/755,668 · Granted Sep 8, 2009

Abstract

Claims (50)

1. An information processing method comprising:

generating a first key in a First Information Processing System (FIPS);

encrypting sensitive data using the generated first key, thereby generating temporary secured sensitive data;

selecting a correspondent to whom the sensitive data is destined;

transmitting the first key and correspondent selection data from the FIPS to a Second Information Process System (SIPS) which is arranged separate from the FIPS;

identifying among SIPS stored key identifiers and keys a correspondent key identifier and a correspondent key based on received correspondent selection data from the FIPS;

encrypting the first key using the identified correspondent key, thereby generating a secured first key in said SIPS;

encrypting the identified correspondent key identifier using a SIPS stored public key, thereby generating a secured key identifier in said SIPS;

transmitting the secured first key and the secured key identifier from the SIPS to the FIPS; and

integrating into integrated secured sensitive data the temporarily secured data, the secured first key, and the key identifier,

wherein said correspondent key is established with a system operated by the correspondent prior to performing said information processing method without having communicated said identified correspondent key outside said SIPS.

2. The method of claim 1 , further comprising authenticating a user and granting SIPS use to the user.

3. The method of claim 1 , further comprising at least one of:

storing integrated secured data on accessible holding means; and

communicating integrated secured data to a correspondent FIPS.

4. The method of claim 1 , further comprising erasing the first key, the temporarily secured sensitive data, and the SIPS communicated secured key and secured key identifier from the FIPS.

5. The method of claim 1 , further comprising puzzling communication between the SIPS and the FIPS by at least one of:

creating unnecessary signals between valuable signals transmitted to the FIPS; and

modifying SIPS generated signals and data transmitted to the FIPS in order to render more difficult the reading of said signals and data.

6. An information processing method comprising:

extracting from integrated secured sensitive data a secured first key and a secured key identifier on a First Information Processing System (FIPS);

transmitting the secured first key and the secured key identifier from the FIPS to a Second Information Processing System (SIPS) separate from the FIPS;

decrypting the key identifier using a SIPS stored public key on the SIPS, thereby extracting a correspondent key identifier;

identifying a correspondent key associated to the identified correspondent key identifier among SIPS stored keys and key identifiers on the SIPS;

decrypting the secured first key using the identified correspondent key on the SIPS, thereby extracting a first key;

transmitting the first key from the SIPS to the FIPS; and

decrypting the sensitive data using the first key on the FIPS, thereby extracting sensitive data

wherein said correspondent key is established with a system which has generated said integrated secured sensitive data prior to performing said information processing method without having communicated said identified correspondent key outside said SIPS.

7. The method of claim 6 , further comprising authenticating a user and granting SIPS use to the user.

8. The method of claim 6 , further comprising storing extracted sensitive data on FIPS storing means.

9. The method of claim 6 , further comprising erasing FIPS extracted data from the FIPS.

10. A method of securely transmitting sensitive data between a sender and a receiver, the method comprising:

generating a first encryption key on a sender First Information Processing System (FISP), the sender FIPS being under control of the sender and said first encryption key being unknown to a receiver FIPS being under control of the receiver;

encrypting on the sender FIPS said sensitive data using said first encryption key, therefore generating encrypted sensitive data;

providing, separate from the sender FIPS and the receiver FIPS, Second Information Processing Systems (SIPSs), a sender SIPS in secure local communication with the sender FIPS, and a receiver SIPS in secure local communication with the sender FIPS;

the sender FIPS transmitting to the sender SIPS said first encryption key and information relative to identity of the receiver;

the sender SIPS selecting one of a plurality of second encryption keys, said selected second encryption key corresponding to the information transmitted by the sender FIPS regarding the identity of the receiver, and a unique second key identifier corresponding to said selected encryption second key, wherein said selected second key identifier and said selected second encryption key are known by the receiver SIPS while unknown by the receiver FIPS;

the sender SIPS encrypting the first encryption key using the selected second encryption key therefore generating an encrypted first key;

the sender SIPS encrypting said second key identifier using a third encryption key known by the receiver SIPS while unknown by the receiver FIPS, therefore generating an encrypted second key identifier;

the sender SIPS communicating to the sender FIPS said encrypted first key and said encrypted second key identifier;

the sender FIPS combining said encrypted sensitive data, said encrypted first key, and said encrypted second key identifier into a message;

the sender FIPS transmitting said message to the receiver FIPS over a generally unsecured transmission link;

the receiver FIPS extracting from said message said encrypted second key identifier and said encrypted first key;

the receiver FIPS communicating said encrypted second key identifier and said encrypted first key to the receiver SIPS;

the receiver SIPS decrypting said encrypted second key identifier using the third encryption key;

the receiver SIPS retrieving said second encryption key using said second key identifier;

the receiver SIPS decrypting said encrypted first encryption key using said second encryption key;

the receiver SIPS communicating said first encryption key to the receiver FIPS; and

the receiver FIPS decrypting said sensitive data using said decrypted first encryption key therefore generating decrypted sensitive data in a usable format for the receiver,

wherein the sender and the receiver are adapted to initiate a pairing process over said generally unsecured transmission link during which pairing process the sender SIPS and the receiver SIPS exchange signals to establish the use of a common second encryption key without communicating said second encryption key over said generally unsecured transmission link.

Assignments (9)

Continuity (2)