System and method for secure Internet communications
This invention is directed toward a method for facilitating secure communications on the Internet that allows individual actors to be registered, their identities to be confirmed at an acceptable level of confidence, and their association with, and/or ownership of, certain user identifiers (such as email addresses, phone numbers, domain names, application usernames, and the like), to be verified. The invention also enables Internet actors to communicate securely and to encrypt or sign digital messages and/or documents between each other while maintaining sole possession and control of their private cryptographic keys. To ensure that the integrity of user information has not been compromised, the invention includes embodiments that periodically backup crucial data in a publicly accessible blockchain format that can be independently verified and is difficult to alter.
1. A method for facilitating secure electronic communications, comprising:
(A) registering a plurality of users in a database management system (DBMS) residing on a centrally controlled computing server accessible via the Internet, the registering step comprising for each such user:
receiving a public key component of a public/private key pair, the public key having an assigned security level to facilitate customization of secure communications, the assigned security level having a setting selected from two or more security options,
receiving an electronic address of the user,
receiving a name of the user and a residence address of the user,
obtaining, from a trusted external name-address information source, a trusted user name associated with the user and a trusted residence address associated with the user,
responsive to obtaining the trusted user name and the trusted residence address, validating the electronic address of the user for secure communications, including:
verifying the assigned security level, and
comparing the name of the user and the residence address of the user received from the user with corresponding user name and address information received from the trusted external name-address information source, and when there is a match, accepting the user for subsequent communications at an increased security level, and
storing, in a record in the DBMS, the electronic address of the user, the name of the user, the residence address of the user, the public key, the assigned or increased security level of the public key, and a result of the secure communications validation;
(B) receiving, at the DBMS a request to communicate directly with the electronic address of the user; and
(C) in response to the request:
(1) locating, within the DBMS, a matching record containing the electronic address of the user,
(2) extracting, from the matching record, the public key, and
(3) transmitting the extracted public key to support the request.
2. The method of claim 1 , wherein validating the electronic address of the user for secure communications further comprises:
verifying the electronic address of the user by sending a prepared Universal Resource Locator (URL) to the electronic address of the user and receiving a notification that the prepared URL was accessed within a specified period of time.
3. The method of claim 1 , wherein the electronic address of the user comprises an email address.
4. The method of claim 1 , wherein the electronic address of the user comprises a phone number.
5. The method of claim 1 , further comprising:
exporting one or more portions of the DBMS to a cryptographic chain comprising a plurality of chained records, each chained record comprising data extracted from one of the records in the DBMS;
transmitting a copy of the cryptographic chain to an immutable, append-only storage via a secure connection; and
providing public access to the transmitted cryptographic chain in the storage.
6. A system to facilitate secure electronic communications, comprising:
a registration module to register one or more users in a database management system (DBMS), the DBMS residing on a centrally controlled computing server accessible via the Internet, for each such user the registration module configured to:
receive a public key component of public/private key pair, the public key having an assigned security level to facilitate customization of secure communications, the assigned security level having a setting selected from one of two or more security options,
receive an electronic address of the user, and
receive a name of the user and a residence address of the user,
obtain, from a trusted external name-address information source, a trusted user name associated with the user and a trusted residence address associated with the user,
a verification module configured to:
verify the electronic address of the user for secure communications, including verification of the assigned security level, and
compare the name of the user and the residence address of the user received from the user with corresponding user name and address information received from the trusted external name-address information source, and when there is a match, accept the user for subsequent communications at an increased security level,
the registration module configured to create and store a registered user record, the record including the electronic address of the user, the name of the user, the residence address of the user, the public key, the assigned security level of the public key, and a result of secure communication verification,
a public key services module configured to process a request to communicate directly with the electronic address of the user; and
in response to the request:
identify, within the DBMS, a matching record containing the electronic address of the user,
extract, from the matching record, the public key, and
transmit the extracted public key to support the request.
7. The system of claim 6 , wherein the electronic address of the user comprises an email address.
8. The system of claim 6 , wherein the electronic address of the user comprises a phone number.
9. The system of claim 6 , further comprising a cryptographic chain services module configured to:
export one or more portions of the DBMS to a cryptographic chain comprising a plurality of chained records, each chained record comprising data extracted from one of the records in the DBMS;
transmit a copy of the cryptographic chain to an immutable, append-only storage via a secure connection; and
provide public access to the transmitted cryptographic chain in the storage.
10. The system of claim 6 , wherein the trusted external name-address information source is used to verifiably link the name of the user and the residence address of the user with the electronic address of the user.
11. The system of claim 6 , wherein the trusted external name-address information source is a government database.
12. The system of claim 6 , wherein the verification module is further configured to access two or more trusted external name-address information sources to obtain the trusted user name associated with the user and the trusted residence address associated with the user.
13. The system of claim 12 , wherein the verification module is further configured to access the two or more trusted external name-address information sources in a sequential fashion based on results obtained and a specific security level being sought by the user.
14. The system of claim 6 , wherein the trusted external name-address information source is a trusted third-party source different from the DBMS and the user.
15. The method of claim 1 , wherein the trusted external name-address information source is used to verifiably link the name of the user and the residence address of the user with the electronic address of the user.
16. The method of claim 1 , wherein the trusted external name-address information source is a government database.
17. The method of claim 1 , wherein obtaining the trusted user name associated with the user and the trusted residence address associated with the user includes accessing two or more trusted external name-address information sources.
18. The method of claim 17 , wherein accessing the two or more trusted external name-address information sources includes accessing each of the trusted name-address sources in a sequential fashion based on results obtained and a specific security level being sought by the user.
19. The method of claim 1 , wherein the trusted external name-address information source is a trusted third-party source different from the DBMS and the user.