IP Library Granted Patent US 10,187,361
Granted Patent B2
US 10,187,361 · App. 15/693,046 · Granted Jan 22, 2019

Method for secure communication using asymmetric and symmetric encryption over insecure communications

Inventor: Jay Alan Carlson (Foster City, CA)
Assignee: SONY INTERACTIVE ENTERTAINMENT INC.
H04L63/045H04L9/0825H04L63/0435H04L63/0442H04L63/061H04L2463/062
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,187,361
App. No.
15/693,046
Granted
Jan 22, 2019
Kind
B2
Abstract

Data may be protected using a combination of symmetric and asymmetric cryptography. A symmetric key may be generated and the data may be encrypted with the symmetric key. The symmetric key and a only a portion of the symmetrically encrypted data may then be encrypted with an asymmetric public key. The entire set of encrypted data, including the asymmetrically encrypted symmetric key, the doubly encrypted portion of data, and the remainder of the symmetrically encrypted data may then be sent to a remote device using insecure communications.

Claims (32)

1. A method of encrypting a set of data with a first computing device, the method comprising:

a) generating a symmetric key with a key generation algorithm;

b) encrypting the set of data first, with the symmetric key, thereby converting the set of data into a set of symmetrically encrypted data;

c) receiving an asymmetric key pair, generated by a second computing device, from the second computing device over a network; and

d) encrypting the symmetric key with a public key of an asymmetric key pair and performing a second encryption on a portion of the symmetrically encrypted data with the public key of the asymmetric key pair, thereby converting the symmetric key into an asymmetrically encrypted symmetric key, thereby converting the portion of the symmetrically encrypted data into a portion of doubly encrypted data, and thereby generating a total set of encrypted data, the total set of encrypted data comprising the asymmetrically encrypted symmetric key, the portion of doubly encrypted data, and a remainder of symmetrically encrypted data, wherein the remainder of the symmetrically encrypted data is a subset of the symmetrically encrypted data that is not the empty set, wherein the size of the asymmetric key is larger than the size of the symmetric key, wherein said encrypting the symmetric key and the portion of the symmetrically encrypted data with the public key of the asymmetric key pair significantly increases a randomness of the total set of encrypted data, wherein the total set of encrypted data is sent over a network using an insecure channel.

2. The method of claim 1 , further comprising decrypting the total set of encrypted data with the second computing device, wherein said decrypting comprises:

e) decrypting the asymmetrically encrypted symmetric key and the portion of doubly encrypted data with a private key of the asymmetric key pair, thereby converting the asymmetrically encrypted symmetric key into a decrypted symmetric key, thereby converting the portion of doubly encrypted data into a partially decrypted symmetrically encrypted portion of data;

f) decrypting the partially decrypted symmetrically encrypted portion of data and the remainder of symmetrically encrypted data with the symmetric key.

3. The method of claim 1 , further comprising, before b): e) adding salt to the set of data.

4. The method of claim 3 , wherein said adding the salt in e) includes adding the salt to the portion of data that becomes the doubly encrypted portion.

5. The method of claim 1 , wherein the asymmetric key pair is a Rivest-Shamir-Adelman (RSA) key pair.

6. The method of claim 1 , further comprising:

performing a plurality of repetitions of a) to d) on a new set of data with each said repetition,

wherein the new set of data in each said repetition includes at least a portion of common data that is common across each said new set of data,

wherein at least part of the common portion becomes the doubly encrypted portion of each said repetition.

7. A system comprising:

a processor,

a memory,

instructions embodied in the memory and executable by the processor to encrypt a set of data by:

a) generating a symmetric key with a key generation algorithm;

b) encrypting the set of data first, with the symmetric key, thereby converting the set of data into a set of symmetrically encrypted data;

c) receiving an asymmetric key pair, generated by a second computing device, from the second computing device over a network; and

d) encrypting the symmetric key with a public key of an asymmetric key pair and performing a second encryption on a portion of the symmetrically encrypted data with the public key of the asymmetric key pair, thereby converting the symmetric key into an asymmetrically encrypted symmetric key, thereby converting the portion of the symmetrically encrypted data into a portion of doubly encrypted data, and thereby generating a total set of encrypted data, the total set of encrypted data comprising the asymmetrically encrypted symmetric key, the portion of doubly encrypted data, and a remainder of symmetrically encrypted data, wherein the remainder of the symmetrically encrypted data is a subset of the symmetrically encrypted data that is not the empty set, wherein a size of the asymmetric key is larger than a size of the symmetric key, wherein said encrypting the symmetric key and the portion of the symmetrically encrypted data with the public key of the asymmetric key pair significantly increases a randomness of the total set of encrypted data, wherein the total set of encrypted data is sent over a network using an insecure channel.

8. The system of claim 7 , wherein the method further comprises:

performing a plurality of repetitions of a) to d) on a new set of data with each said repetition,

wherein the new set of data in each said repetition includes at least a portion of common data that is common across each said new set of data,

wherein at least part of the common portion becomes the doubly encrypted portion of each said repetition.

9. A non-transitory computer readable medium having processor-executable instructions embodied therein, wherein execution of the instructions by a processor causes the processor to encrypt a set of data by:

a) generating a symmetric key with a key generation algorithm;

b) encrypting the set of data first, with the symmetric key, thereby converting the set of data into a set of symmetrically encrypted data;

c) receiving an asymmetric key pair, generated by a second computing device, from the second computing device over a network; and

d) encrypting the symmetric key with a public key of an asymmetric key pair and performing a second encryption on a portion of the symmetrically encrypted data with the public key of the asymmetric key pair, thereby converting the symmetric key into an asymmetrically encrypted symmetric key, thereby converting the portion of the symmetrically encrypted data into a portion of doubly encrypted data, and thereby generating a total set of encrypted data, the total set of encrypted data comprising the asymmetrically encrypted symmetric key, the portion of doubly encrypted data, and a remainder of symmetrically encrypted data, wherein the remainder of the symmetrically encrypted data is a subset of the symmetrically encrypted data that is not the empty set, wherein a size of the asymmetric key is larger than a size of the symmetric key, wherein said encrypting the symmetric key and the portion of the symmetrically encrypted data with the public key of an asymmetric key pair significantly increases a randomness of the total set of encrypted, wherein the total set of encrypted data is sent over a network using an insecure channel.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 4, 2017
From: CARLSON, JAY ALAN
To: SONY COMPUTER ENTERTAINMENT INC.
Reel/Frame 043783/0223 →
CHANGE OF NAME Recorded Oct 4, 2017
From: SONY COMPUTER ENTERTAINMENT INC.
To: SONY INTERACTIVE ENTERTAINMENT INC.
Reel/Frame 044127/0234 →
Continuity (2)
Continuation 14274502 · May 9, 2014
Related Publication 20180013728A1 · Jan 11, 2018
Cited By (1)
US 12,452,032