Method for strongly encrypting .ZIP files
The present invention provides a method of integrating existing strong encryption methods into the processing of a .ZIP file to provide a highly secure data container which provides flexibility in the use of symmetric and asymmetric encryption technology. The present invention adapts the well-established .ZIP file format to support higher levels of security and multiple methods of data encryption and key management, thereby producing a highly secure and flexible digital container for electronically storing and transferring confidential data.
1. A method of constructing a modified .ZIP file format data container on a computer, said method including:
receiving a first data file at an application on a computer, wherein said first data file has been retrieved from an electronic computer data storage by said application;
encrypting said first data file to form a first encrypted data file, wherein said encrypting uses symmetric encryption employing a first encryption method using a first symmetric key received from a user,
wherein said first encryption method is selected from a plurality of available encryption methods selectable by a user,
wherein said symmetric encryption uses one of a plurality of bit lengths selectable by a user;
asymmetrically encrypting said first symmetric key using a public key to form asymmetric key data,
wherein said public key is received by said application from a memory including a public key storage location on said computer,
wherein said public key is hashed by said application to form hash of public key data; and
constructing a modified .ZIP file format data container based on the .ZIP file format,
wherein said modified .ZIP file format data container includes a central directory,
wherein said central directory has been modified from the .ZIP file format to include an asymmetric key data storage location receiving and storing said asymmetric key data,
wherein said modified .ZIP file format data container includes an encrypted data file storage location receiving and storing said encrypted data file,
wherein said asymmetric key data storage location is logically associated with said encrypted data file storage location based on the position of said asymmetric key data storage location in said central directory and the location of said encrypted data file storage location in said modified .ZIP file format data container,
wherein said central directory stores said hash of public key data.
2. The method of claim 1 further including:
receiving a second data file at said application on said computer, wherein said second data file has been retrieved from electronic computer data storage by said application;
encrypting said second data file to form a second encrypted data file, wherein said encrypting uses symmetric encryption employing a second encryption method using a symmetric key having a second symmetric key bit length,
wherein said second symmetric key bit length is one of said plurality of available symmetric key bit lengths that may be used to perform said encrypting; and
placing said second encrypted data file in said modified .ZIP file format data container using said application on said computer.
3. The method of claim 2 wherein said second symmetric key bit length is not equal to said first symmetric key bit length.
4. The method of claim 2 wherein said second encryption method is not the same as said first encryption method.
5. The method of claim 4 wherein said modified .ZIP file format data container is modified from said .ZIP file format to include an additional data field identifying an encryption record version of said second encrypted data file, wherein said encryption record version of said first encrypted file is not the same as said encryption record version of said second encrypted file.