Method and system for asymmetrically encrypting .ZIP files
The present invention provides a method of integrating existing strong encryption methods into the processing of a .ZIP file to provide a highly secure data container which provides flexibility in the use of symmetric and asymmetric encryption technology. The present invention adapts the well established .ZIP file format to support higher levels of security and multiple methods of data encryption and key management, thereby producing a highly secure and flexible digital container for electronically storing and transferring confidential data.
1. A .Zip file format data container stored on a computer, said data container including:
an encrypted data file,
wherein said encrypted data file has been encrypted by an application using symmetric encryption, wherein said symmetric encryption employs a symmetric key having one of a plurality of available bit lengths,
wherein said symmetric key is asymmetrically encrypted to form an encrypted symmetric key,
wherein said data container is constructed by an application in accordance with a .Zip file format,
wherein said data container includes a local record header for said encrypted data
wherein said encrypted symmetric key is placed in said data container,
wherein said data container includes a central directory record identifying the location of said encrypted data file inside said data container,
wherein said central directory record is used to access said encrypted data file in the process of decrypting said encrypted data file,
wherein said data container also includes a local decryption header, wherein said local decryption header includes an identification of the one of said plurality of available bit lengths that was used in said symmetric key to encrypt said symmetric key
wherein said local decryption header is separate from said central directory record.
2. The .Zip file format data container of claim 1 wherein said encrypted data has been compressed before encryption.
3. The .Zip file format data container of claim 2 wherein said encrypted data has been compressed before encryption using a Lempel-Ziv (LZ)-type data compression algorithm.
4. The .Zip file format data container of claim 2 wherein said encrypted data has been compressed before encryption using a Deflate-type data compression algorithm.
5. The .Zip file format data container of claim 2 wherein said encrypted data has been compressed before encryption using a Burrows-Wheeler Transform (BWT)-type data compression algorithm.
6. The .Zip file format data container of claim 1 wherein said encrypted data has not been compressed before encryption.
7. The .Zip file format data container of claim 1 wherein said asymmetric encryption employs a public key.
8. The .Zip file format data container of claim 1 wherein said asymmetric encryption employs a X.509 digital certificate.