EP1362461A2 - Sicheres berichtverfahren - Google Patents
Sicheres berichtverfahrenInfo
- Publication number
- EP1362461A2 EP1362461A2 EP02706886A EP02706886A EP1362461A2 EP 1362461 A2 EP1362461 A2 EP 1362461A2 EP 02706886 A EP02706886 A EP 02706886A EP 02706886 A EP02706886 A EP 02706886A EP 1362461 A2 EP1362461 A2 EP 1362461A2
- Authority
- EP
- European Patent Office
- Prior art keywords
- user
- server
- key
- message
- channel
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/0442—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/0457—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
Definitions
- the present invention relates to a secure messaging method.
- Secure messaging solutions guarantee confidentiality and optionally the integrity and identity of the message sender.
- such methods make it possible to reduce the risks in terms of security, in particular the interception by an attacker of an electronic message to read the content, the impersonation of a correspondent or even the alteration content by an attacker during the message transport phase.
- US patent US 6154543 The closest state of the art is described in US patent US 6154543.
- This patent relates to a public key cryptosystem allowing a roaming user access to a network to establish secure communications between system users, client machines, and encryption servers.
- the client machine generates and stores an encrypted private key in a server 'encryption.
- a user can then access this encrypted private key from any client machine located on the network and decrypt it using a passphrase, thereby enjoying cross-system access.
- the private key can be used to decrypt and encrypt received messages.
- a user can generate a digital message, encrypt it with the public key of a client's recipient, and transmit it to the encryption server from any client machine on the server.
- the invention relates, in its most general sense, to a secure messaging method, comprising a first step of registering a user, consisting in generating a key pair on the client workstation of said user, using a key generation algorithm [RSA for example], to encrypt the private key by a symmetric algorithm executed on the client computer, the key of this symmetric algorithm being derived by a hash function [SHAl function] of a chain of secret characters [pass phrase] entered by means of a peripheral [keyboard for example], to transmit to the server a file comprising said encrypted value of the private key encrypted with the symmetric key, the public key to a server comprising a database data for recording said information and a unique identifier of said user [for example his email address], and the hash value of the symmetric key [derived from the pass phrase],
- the registration step further comprising an operation of signing said user key pair with the server private key [certification key or key signature], the method comprising an operating step comprising an operation authentication of the user by transmission to the server from any client station of his identifier and said secret character string [his “pass phrase”], and validation of the authenticity of the user by comparison between the value derived from said secret character string transmitted by the user, and the derived value stored in said database, in relation to the identifier of the user considered, and an operation of transmission by the server to the user station of said bi-key, then encrypt and / or sign the message prepared on the client computer with the private keys of the recipients of the message, and / or the public key respectively c of said user, and an operation of transmitting said message between the user's workstation and the server, said operation of transmitting the message being carried out by establishing virtual channels [VPN] for encryption and / or signature, characterized in that the compression and the transmission of the message are carried out "in continuous flow" [streaming] without temporary storage in memory on the client station
- the operation of transmitting that is to say sending-receiving, the message consists in opening a plurality of nested virtual channels, the first channel being a communication channel, encompassed a signature channel, encompassed itself a compression channel, included in an encryption channel, allowing the transmission of messages without size limitation; reception encompassing the channels in reverse (decryption included in decompression, included in verification).
- said virtual channels are in series and include an encryption channel and a signature channel in series.
- the plurality of virtual channels further comprises an input-output (I / O) channel on the peripherals of the client station.
- the message transmission step consists in preparing a
- the method according to the invention comprises an encryption operation distinct from each of the hashes of the message of said stream with the private key of said user, in order to create a digital signature, to allow subsequent verification of the signature of each of said components. separately.
- the invention also relates to an architecture for processing secure messages, comprising a server comprising a memory for the encrypted and signed recording of information relating to the registered users, means of sending and receiving messages and means of connection to a public network, and client workstations comprising a navigation application and means of connection to said network, characterized in that the server comprises means of secure connection with the network and means of verifying files transmitted by a user and signed with a server public key, and for recording, after positive verification, in a memory for recording a table comprising, for each user: the encrypted value ["hash"] of the private key encrypted with the symmetric key, the public key to a server comprising a database for recording said information and a unique identifier of said user [for example his email address], and the hash value of the symmetric key [derived from the pass phrase], the architecture comprising furthermore means for establishing virtual channels [VPN] for encryption and / or signing, compression and transmission of the "streaming" message without temporary storage in memory on the client workstation or on the server, nor on a
- FIG. 1 represents the diagram of a secure messaging architecture according to the invention
- FIG. 2 shows the block diagram of the messaging process.
- the secure messaging system implements a server (1) connected to a telecommunications network, in particular the Internet network.
- the user of the messaging service according to the invention has a workstation (2) also connected to the same telecommunications network.
- the server (1) has a memory space for
- the server also includes an application (4) providing the interface between user requests, sent in the form of HTML forms, and access to the data recorded in the database (3).
- the client station (2) establishes an HTTP link with the server (1).
- the consultation request opens a TCP / IP (HTTP) link which will open a first technical channel (5) encapsulated by two technical channels in series respectively for decryption (6) and for checking the signature (7), these two channels (6, 7) being themselves encapsulated by a technical decompression channel (8), for example in ZIP format.
- HTTP TCP / IP
- the client station (2) opens a series of channels (5 to 8) for the continuous transmission of an encrypted, signed and compressed stream from the file from the client computer to the database (3) of the server (1).
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer And Data Communications (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Information Transfer Between Computers (AREA)
- Storage Device Security (AREA)
Applications Claiming Priority (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
FR0102351 | 2001-02-21 | ||
FR0102351A FR2821220B1 (fr) | 2001-02-21 | 2001-02-21 | Procede de messagerie securisee |
PCT/FR2002/000654 WO2002067535A2 (fr) | 2001-02-21 | 2002-02-21 | Procede de messagerie securisee |
Publications (1)
Publication Number | Publication Date |
---|---|
EP1362461A2 true EP1362461A2 (de) | 2003-11-19 |
Family
ID=8860273
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP02706886A Withdrawn EP1362461A2 (de) | 2001-02-21 | 2002-02-21 | Sicheres berichtverfahren |
Country Status (3)
Country | Link |
---|---|
EP (1) | EP1362461A2 (de) |
FR (1) | FR2821220B1 (de) |
WO (1) | WO2002067535A2 (de) |
Family Cites Families (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6154543A (en) * | 1998-11-25 | 2000-11-28 | Hush Communications Anguilla, Inc. | Public key cryptosystem with roaming user capability |
-
2001
- 2001-02-21 FR FR0102351A patent/FR2821220B1/fr not_active Expired - Fee Related
-
2002
- 2002-02-21 WO PCT/FR2002/000654 patent/WO2002067535A2/fr not_active Application Discontinuation
- 2002-02-21 EP EP02706886A patent/EP1362461A2/de not_active Withdrawn
Non-Patent Citations (1)
Title |
---|
See references of WO02067535A3 * |
Also Published As
Publication number | Publication date |
---|---|
WO2002067535A3 (fr) | 2002-12-12 |
FR2821220B1 (fr) | 2004-10-01 |
FR2821220A1 (fr) | 2002-08-23 |
WO2002067535A2 (fr) | 2002-08-29 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7680281B2 (en) | Method and apparatus for intercepting events in a communication system | |
US10135771B2 (en) | Secure end-to-end transport through intermediary nodes | |
US8447980B2 (en) | System and method for processing encoded messages for exchange with a mobile data communication device | |
US8499156B2 (en) | Method for implementing encryption and transmission of information and system thereof | |
US6904521B1 (en) | Non-repudiation of e-mail messages | |
US9059840B2 (en) | Recipient blind cryptographic access control for publicly hosted message and data streams | |
US6978378B1 (en) | Secure file transfer system | |
CN101667999B (zh) | 点对点直播流传递的方法、***、数据签名装置及客户端 | |
CN112637230B (zh) | 一种即时通信方法及*** | |
CN114244508B (zh) | 数据加密方法、装置、设备及存储介质 | |
JP2005107935A (ja) | 電子メール処理装置用プログラム及び電子メール処理装置 | |
CN115396177A (zh) | 一种基于WASM实现web端高效通信的加密通信方法 | |
EP3568964B1 (de) | Verfahren für end-to-end-übertragung eines teils einer verschlüsselten digitalen information und system zur implementierung dieses verfahrens | |
WO2015104567A1 (en) | Secure communication between a server and a client web browser | |
EP1362461A2 (de) | Sicheres berichtverfahren | |
CN108243198B (zh) | 一种数据分发、转发方法及装置 | |
WO2001075559A2 (en) | Agent-based secure handling of e-mail header information | |
EP1300980A1 (de) | Prozess zur Gewährleistung der Nichtablehnung vom Empfang (NRR) in einer elektronischen Transaktion | |
US20230198958A1 (en) | Secure email transmission via treasury portal | |
US20230198969A1 (en) | On-demand secure email transformation | |
CN115001871A (zh) | 基于区块链技术的文件加密共享的方法和*** | |
CN116886690A (zh) | 一种支持多人同时进行的端到端消息文件安全传输的方法 | |
CN115567226A (zh) | 一种二进制端对端基于会话通信加密方法 | |
CN116980170A (zh) | 一种端对端加密的聊天记录找回机制 | |
AU2004200319A1 (en) | A Method of Enabling Secure Transfer of a Package of Information |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
17P | Request for examination filed |
Effective date: 20030820 |
|
AK | Designated contracting states |
Kind code of ref document: A2 Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE TR |
|
AX | Request for extension of the european patent |
Extension state: AL LT LV MK RO SI |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN |
|
18D | Application deemed to be withdrawn |
Effective date: 20060901 |