Method for providing information security for wireless transmissions
A wireless communication system includes a pager or similar device that communicates to a home terminal. The home terminal confirms the identify of the pager and attaches a certificate to the message for ongoing transmission. Where the recipient is also a pager, an associated home terminal verifies the transmission and forwards it in a trusted manner without the certificate to the recipient.
1 ) A method of communicating between a pair of correspondents through an intermediary comprising the steps, registering one of said correspondents with said intermediary to share an identifier, preparing at said one correspondent a secure communication including a message between said correspondents,
preparing a signature component including a derivation of said secure communication and said identifier forwarding said signature component to said intermediary and verifying said signature component at said intermediary,
attaching to said communication a certificate of the public key and identity of said one correspondent, and forwarding said communication and certificate to said other correspondent.
2 ) A method according to claim 1 wherein said signature component includes a unique to each communication.
3 ) A method according to claim 1 wherein said communication includes a message signed by said one correspondent.
4 ) A method according to claim 3 wherein said secure communication includes ciphertext encrypted with a public key of the other of said correspondents.
5 ) A method according to claim 1 wherein said intermediary recovers said identifier from said signature component and retrieves said certificate based on said identifier.
6 ) A method according to claim 1 wherein aid intermediary forwards said communication and certificate to a recipient who utilizes said certificate to determine the public key of said one correspondent.
7 ) A method according to claim 6 wherein recipient signs a message including said public key of said one correspondent and forwards said secure communication and said signed message to said other correspondent.
8 ) A method according to claim 7 wherein said other correspondent retrieves said public key of said one correspondent from said signed message and extracts said message from said secure transmission.
9 ) A method according to claim 1 wherein said registration includes transferring a public key of said intermediary to said one correspondent and transferring said public key of said one correspondent to said intermediary.
10 ) A method according to claim 9 wherein said one correspondent includes a public key of a trusted party and said intermediary has a certificate of its public key signed by said trusted party, said one correspondent verifying said public key of said intermediary with said public key of said trusted party.
11 ) A method according to claim 10 wherein said public key of said intermediary is used to sign its public key for secure transfer to said intermediary.
12 ) A method according to claim 11 wherein said one correspondent forwards authorization information to said intermediary during registration and said intermediary verifies that said one correspondent is not prior registered with a certifying authority.
13 ) A method according to claim 12 wherein said authorization information includes an address particular to said one correspondent for identification by said verifying authority.
14 ) A method according to claim 11 wherein said identifier is transferred from said intermediary upon verification by said certifying authority.
15 ) A method according to claim 14 wherein transfer of said identifier is secured by the public key of said one correspondent and said private key of said intermediary.