Method to request sensitive data from a recipient and to establish a secure communication with the recipient
The present system and method allow the exchange of messages, such as email, between a sender and a recipient while maintaining the data secure and the integrity of the content of the messages. The method and system do not require a user having an account to open a received message. The method comprises the server creating a new communication key upon reception of a request. The communication key is typically valid for a single request to ensure that each request is encrypted using different communication keys. The method typically comprises a client [A] establishing communication on [HANDSHAKE] with one or more servers [B]. The HANDSHAKE generally aims at initializing the encryption key that will be used to exchange information between A and B.
1. A method to request sensitive data from a recipient and to establish a secure communication with the recipient, the method comprising:
a client device sending a request for an envelope to a server;
the server creating the envelope;
sending to the recipient device an access to the envelope;
the recipient device filling the envelope with sensitive data;
storing and encrypting the sensitive data on the server using a first key known only by the server;
sending to the client device a secured access to the sensitive data, the communication to the secured access being encrypted with a second key known to the server and to the client device.
2. The method of claim 1 , the method further comprising:
generating a first link to the envelope to provide the access to the envelope;
sending the generated first link to the recipient device.
3. The method of claim 1 further comprising:
generating a second link to the sensitive data to provide the secured access to the sensitive data;
encrypting the second link with the second key;
the client device gaining the secure access to the sensitive data through the second link.
4. The method of claim 3 , sending the first link to the recipient device further comprising:
sending the first link to the client device;
the client device sending the received first link to a device of a recipient.
5. The method of claim 3 , the encryption of the second link using a method for securing an electronic message.
6. The method of claim 5 wherein the method for securing the electronic message comprises:
the client device creating a first key unknown to the server, the first key having at least two portions;
encrypting sensitive data using the first key;
communicating a communication message comprising a first of the at least two portions of the first key and the encrypted sensitive data to the server;
storing the encrypted sensitive data on the server;
generating parameters associated with the stored encrypted sensitive data, the parameters comprising a unique identification associated with the stored encrypted sensitive data;
communicating the parameters to the client device;
the client device further adding a second of the at least two portions of the first key to the received parameters;
the client device creating an electronic message comprising the received parameters;
the client device sending the created electronic message to a recipient.
7. The method of claim 3 , the decryption of the second link using a method for the recipient device to retrieve a secure electronic message.
8. The method of claim 7 , the method for the recipient device to retrieve the secure electronic message comprising:
the recipient device receiving a secured access to the secured message;
retrieving parameters associated with the secured access, the retrieved parameters comprising identification of the secure electronic message and a first portion of an end-to-end key;
the recipient device requesting the secured message associated with the identification of the secure message to the server;
sending content of the secured message encrypted with the end-to-end key and a second portion of the end-to-end key to the recipient device;
the recipient device combining the first portion of the end-to-end key and the received second portion of the end-to-end key to forge the end-to-end key;
using the end-to-end key to decrypt the content of the secure electronic message.
9. The method of claim 1 further comprising adding callback parameters to the requested envelope.
10. The method of claim 9 , wherein the callback parameters provided as one or more objects.
11. The method of 5 , the server encrypting the callback parameters in the created envelope.
12. The method of claim 9 , the client device providing the callback parameters in the request for the envelope.
13. The method of claim 9 , the server executing one or more actions associated with the callback parameters.
14. The method of claim 13 , the server communicating the callback parameters to a service provider server configured to execute predetermined rules associated with the received callback parameters.