Secure transmission system with upgraded encryption strength

1. An apparatus comprising:

a memory; and

a processor coupled to the memory, the processor configured to:

receive a request to communicate an intended message to an intended recipient, the intended message comprising a body;

receive a first public key of the intended recipient and a second public key of the intended recipient;

receive a first and a second corporate monitor key associated with an authorized third party, wherein the authorized third party is associated with a domain to which at least one of a sender or the intended recipient belongs;

encrypt the body using a first message key and a first encryption scheme to produce a first encrypted body;

encrypt the first message key using the first public key to produce a first encrypted message key;

encrypt the first message key using the first corporate monitor key to produce a first corporate monitor encrypted message key, wherein the first corporate monitor key is distinct from the first public key;

encrypt the first encrypted message key, the first encrypted body, and the first corporate monitor encrypted message key using a second message key and a second encryption scheme to produce a second encrypted body;

encrypt the second message key using the second public key to produce a second encrypted message key;

encrypt the second message key using the second corporate monitor key to produce a second corporate monitor encrypted message key, wherein the second corporate monitor key is distinct from the second public key; and

communicate an encrypted message to the intended recipient, the encrypted message comprising the second encrypted message key, the second encrypted body, and the second corporate monitor encrypted message key.

2. The apparatus of claim 1 , wherein the processor is further configured to:

receive a transaction certificate; and

add the transaction certificate to the intended message to the intended recipient before encrypting the body using the first message key.

3. The apparatus of claim 1 , wherein the processor is further configured to lock the encrypted message by:

encrypting the first encrypted message key with a third message key to produce a locked message key; and

producing a fourth encrypted body by encrypting the locked message key and the first encrypted body.

4. The apparatus of claim 1 , wherein the first encryption scheme is one or more of Triple DES encryption and AES-128 encryption, and the second encryption scheme is one or more of AES-192 encryption and AES-256 encryption.

5. The apparatus of claim 1 , wherein:

the second message key is encrypted by the second public key using one or more of RSA-2048 encryption, RSA-3072 encryption, and elliptic curve encryption; and

the first encrypted message key and the first encrypted body are encrypted using one or more of AES-192 encryption and AES-256 encryption.

6. The apparatus of claim 1 , wherein the processor is further configured to receive a receipt indicating that the intended recipient received the encrypted message.

7. The apparatus of claim 1 , wherein:

the intended message to the intended recipient further comprises a header, the header comprising a first extensible group of fields to communicate coded recipient email account address data and a second extensible group of fields to communicate encrypted key data; and

the second extensible group of fields comprises the second encrypted message key.

8. The apparatus of claim 1 , wherein the first message key is a random symmetric key.

9. A system comprising:

a first memory and a second memory; and

a first processor coupled to the first memory, the first processor configured to:

receive, from a sender, a request for a first public key and a second public key of an intended recipient, the intended recipient being the recipient of an intended message;

in response to receiving the request, communicate the first public key and the second public key of the intended recipient to the sender;

determine whether at least one of the sender or the intended recipient belongs to a domain and whether an authorized party is associated with the domain; and

in response to determining that at least one of the sender or the intended recipient belongs to the domain and that the authorized third party is associated with the domain, communicate a first and a second corporate monitor key to the sender, wherein both the first and the second corporate monitor keys are associated with the domain and the authorized third party; and

a second processor coupled to the second memory, the second processor configured to:

receive a request to communicate the intended message to the intended recipient, wherein the intended message comprises a body;

receive the first public key of the intended recipient and the second public key of the intended recipient;

receive the first corporate monitor key and the second corporate monitor key;

encrypt the body using a first message key and a first encryption scheme to produce a first encrypted body;

encrypt the first message key using the first public key to produce the first encrypted message key;

encrypt the first message key using the first corporate monitor key to produce a first corporate monitor encrypted message key, wherein the first corporate monitor key is distinct from the first public key;

encrypt the first encrypted message key, the first encrypted body, and the first corporate monitor encrypted message key using a second message key and a second encryption scheme to produce a second encrypted body;

encrypt the second message key using the second public key to produce a second encrypted message key;

encrypt the second message key using the second corporate monitor key to produce a second corporate monitor encrypted message key, wherein the second corporate monitor key is distinct from the second public key; and

communicate an encrypted message to the intended recipient, the encrypted message comprising the second encrypted message key, the second encrypted body, and the second corporate monitor encrypted message key.

10. The system of claim 9 , wherein the first processor is further configured to communicate a transaction certificate, wherein the transaction certificate is added to the intended message to the intended recipient before the body is encrypted using the first message key.

11. The system of claim 9 , wherein the encrypted message is locked by:

encrypting the first encrypted message key with a third message key to produce a locked message key; and

producing a fourth encrypted body by encrypting the locked message key and the first encrypted body.

12. The system of claim 9 , wherein the first encryption scheme is one or more of Triple DES encryption and AES-128 encryption, and the second encryption scheme is one or more of AES-192 encryption and AES-256 encryption.

13. The system of claim 9 , wherein:

the second message key is encrypted by the second public key using one or more of RSA-2048 encryption, RSA-3072 encryption, and elliptic curve encryption; and

the first encrypted message key and the first encrypted body are encrypted using one or more of AES-192 encryption and AES-256 encryption.

14. The system of claim 9 , wherein the first processor is further configured to receive a receipt indicating that the intended recipient received the encrypted message.

15. The system of claim 9 , wherein:

the intended message to the intended recipient further comprises a header, the header comprising a first extensible group of fields to communicate coded recipient email account address data and a second extensible group of fields to communicate encrypted key data; and

the second extensible group of fields comprises the second encrypted message key.

16. The system of claim 9 , wherein the first message key is a random symmetric key.

17. A method comprising:

receiving a request to communicate an intended message to an intended recipient, the intended message comprising a body;

receiving a first public key of the intended recipient and a second public key of the intended recipient;

receiving a first and a second corporate monitor key, wherein the first and second corporate monitor keys are associated with a domain and an authorized third party;

encrypting, by a processor, the body using a first message key and a first encryption scheme to produce a first encrypted body;

encrypting, by the processor, the first message key using the first public key to produce a first encrypted message key;

encrypting, by the processor, the first message key using the first corporate monitor key to produce a first corporate monitor encrypted message key, wherein the first corporate monitor key is distinct from the first public key;

encrypting, by the processor, the first encrypted message key, the first encrypted body, and the first corporate monitor encrypted message key using a second message key and a second encryption scheme to produce a second encrypted body;

encrypting, by the processor, the second message key using the second public key to produce a second encrypted message key;

encrypting, by the processor, the second message key using the second corporate monitor key to produce a second corporate monitor encrypted message key, wherein the second corporate monitor key is distinct from the second public key; and

communicating an encrypted message to the intended recipient, the encrypted message comprising the second encrypted message key, the second encrypted body, and the second corporate monitor encrypted message key.

18. The method of claim 17 , further comprising:

receiving a transaction certificate; and

adding the transaction certificate to the intended message to the intended recipient before encrypting the body using the first message key.

19. The method of claim 17 , further comprising locking the encrypted message by:

encrypting, by the processor, the first encrypted message key with a third message key to produce a locked message key; and

producing a fourth encrypted body by encrypting the locked message key and the first encrypted body.

20. The method of claim 17 , wherein the first encryption scheme is one or more of Triple DES encryption and AES-128 encryption, and the second encryption scheme is one or more of AES-192 encryption and AES-256 encryption.

21. The method of claim 17 , wherein:

the second message key is encrypted by the second public key using one or more of RSA-2048 encryption, RSA-3072 encryption, and elliptic curve encryption; and

the first encrypted message key and the first encrypted body are encrypted using one or more of AES-192 encryption and AES-256 encryption.

22. The method of claim 17 , further comprising receiving a receipt indicating that the intended recipient received the encrypted message.

23. The method of claim 17 , wherein:

the intended message to the intended recipient further comprises a header, the header comprising a first extensible group of fields to communicate coded recipient email account address data and a second extensible group of fields to communicate encrypted key data; and

the second extensible group of fields comprises the second encrypted message key.

24. The method of claim 17 , wherein the first message key is a random symmetric key.