Systems and methods for Smartkey information management
A system and method are provided for the secure sharing of information across and open network and for performing management of keys used for encrypting and decrypting data.
1. A key-provider-based computer file access system, said system including:
a user computer system operating an encryption/decryption application, wherein said encryption/decryption application receives:
public key data;
a data file; and
user password data,
wherein said encryption/decryption application combines said data file and said user password and encrypts them to form an encrypted data file,
wherein said encryption/decryption application places said encrypted data file into an electronic data file,
wherein said electronic data file is constructed according to the .ZIP file format, including a central directory electronic data structure;
wherein said encryption/decryption application forms a key provider electronic data structure including:
said user password in unencrypted form;
said public key data;
an encrypted encryption key data, wherein said encryption/decryption application combines said public key data and said user password data in unencrypted form and encrypts them to form said encrypted encryption key data;
a key hash data, wherein said encryption/decryption application determines said key hash data by hashing said public key data;
a size attribute data, wherein said encryption/decryption algorithm determines a numeric indication of the amount of computer memory required to store said key provider electronic data structure as said size attribute data; and
a key encrypting key ID data, wherein said key encrypting key ID data is a binary value used by said encryption/decryption application to identify a key provider electronic data structure,
wherein said encryption/decryption application places said key provider electronic data structure into said central directory electronic data structure of said electronic data file.
2. The system of claim 1 wherein said electronic data structure is encrypted prior to being placed in said electronic data file.
3. The system of claim 1 wherein said key provider electronic data structure further includes include owner identification data identifying an owner of said public key data.
4. The system of claim 1 wherein said key provider electronic data structure further includes include owner identification data identifying an owner of said user password data.
5. The system of claim 1 wherein at least one of said encryption operations is performed using a symmetric key as an encrypting key.
6. The system of claim 1 wherein at least one of said encryption operations is performed using an X.509 digital certificate as an encrypting key.
7. The system of claim 1 wherein at least one of said encryption operations is performed using random data as an encrypting key.