System and method for exchanging key generation parameters for secure communications

1. A communications system that exchanges key generation parameters for secure communications, comprising:

an internet service and communications device in communication with each other;

the internet service comprising a user account authentication mechanism, and including a database having stored private keys;

the communications device is configured to transmit user credentials and a request to the internet service to validate the user wherein a secure communications channel is established between the internet service and communications device; and

the internet service transmits a password signed using one of the private keys and used to establish an encryption key between the internet service and the communications device.

2. The communications system according to claim 1 , and further comprising a user interface on the wireless communications device into which a user enters credentials that are transmitted to the internet service for validating the user, wherein the internet service in response, looks up key generation parameters based on username and transmits key generation parameters back to the communications device.

3. The communication system according to claim 2 , wherein said key generation parameters comprise a password and a server address to contact to initiate a key generation exchange.

4. The communications system according to claim 2 , wherein said username and password comprise an email address and password of the electronic mail account of the user.

5. The communications system according to claim 2 , and further comprising an HTTPS connection between the internet service and a device client over which the username and password are transmitted for validating the user at the internet service.

6. The communications system according to claim 2 , wherein the user enters multiple credentials corresponding to multiple user accounts and receives key generation parameters for each set of credentials.

7. The communications system according to claim 1 , wherein the communications device is in communication with the internet service over a wireless communications connection.

8. The communications system according to claim 1 , and further comprising a browser plug-in into which a user enters credentials comprising a username and password on a web page that are transmitted to the internet service for validating the user, and the internet service in response, returns an attachment containing key generation parameters that trigger the plug-in to execute and initiate a key generation exchange.

9. The communications system according to claim 8 , wherein the attachment is signed using a private key maintained by the internet service and verified by a corresponding public key maintained on the communications device.

10. A method for exchanging key generation parameters for secure communications, comprising:

establishing a communications channel between an internet service and a communications device of a user, wherein the internet service comprises a user account authentication mechanism and a database having stored private keys;

transmitting user credentials and initiating a request to the internet service operating on the communications device for validating the user and establishing a secure communications channel between the internet service and communications device; and

transmitting a password signed using one of the private keys and to establish an encryption key between the internet service and the communications device.

11. The method according to claim 10 , which further comprises entering on a user interface at the communications device credentials comprising a username and password and transmitting the credentials to the internet service for authenticating the user, and in response, at the internet service, looking up key generation parameters based on the username and transmitting key generation parameters back to the communications device.

12. The method according to claim 11 , wherein the key generation parameters comprise a password and a server address to contact to initiate a key generation exchange.

13. The method according to claim 11 , wherein the username and password comprise an email address and password of the electronic mail account of the user.

14. The method according to claim 11 , which further comprises forming an HTTPS connection between the internet service and a device client over which the username and password are transmitted for validating the user at the internet service.

15. The method according to claim 11 , which further comprises entering multiple credentials corresponding to multiple user accounts and receiving key generation parameters for each set of credentials.

16. The method according to claim 10 , which further comprises entering at a browser credentials comprising a username and password on a web page that are transmitted to the internet service for validating the user, and the internet service in response, returning an attachment containing key generation parameters that trigger the browser plug-in to execute and initiate a key generation exchange.

17. The method according to claim 16 , which further comprises signing the attachment using a private key maintained by the internet service and verified by a corresponding public key maintained on the communication device.

18. A mobile wireless communications device, comprising:

a transceiver;

a processor connected to the transceiver;

a memory connected to the processor and storing private keys; and

wherein the processor and the transceiver is configured to transmit user credentials and a request to an internet service by transmitting a communications signal from the transceiver that authenticates the user and establishes a secure communications channel between the internet service and communications device, wherein the internet service transmits a password signed using one of the private keys and used to establish an encryption key between the internet service and the communications device.

19. The mobile wireless communications device according to claim 18 , and further comprising a user interface into which a user enters credentials comprising a username and password that are transmitted to the internet service for validating the user wherein key generation parameters are received back from the internet service in response.

20. The mobile wireless communications device according to claim 18 , wherein the communications device is in communication with the internet service over a wireless communications connection.

21. The mobile wireless communications device according to claim 18 , and further comprising a browser into which a user enters credentials comprising a username and password on a web page that are transmitted to the internet service for validating the user and wherein an attachment containing key generation parameters is received and processed by said processor that triggers the browser plug-in to execute and initiate a key generation exchange.

22. The mobile wireless communications device according to claim 21 , wherein said memory further comprises a public key maintained on the communication device for verifying the attachment that had been signed using a private key maintained by the internet service.