Patent Application
20050273443
1. Field of the Invention
The present invention relates generally to encoding methods and more particularly to methods for achieving secure communications in electronic commerce transactions.
2. Description of the Related Art
Secure communication is vital for the commercial success of electronic commerce transactions. Modern Internet commerce is predicated on the assumption that sensitive financial and personal information can be encrypted to prevent unauthorized disclosure over the common network. Typically, this is done using a standard of encryption known as “HTTPS” or Hyper Text Transfer Protocol Secure. The HTTPS protocol is selected to run on the company web server as a measure to insure that communication with a user or web browser is secured through encryption of information sent over the channel. This standard communicates information that is encrypted and decrypted at both a sender and receiver using assigned keys between both the sender and receiver. The administration of these keys is typically done through a central depository company such as that provided by RSA Security to manage the distribution of security channel keys.
It is well known that prime numbers are used as keys in electronic communications in various encryption standards. Two prime numbers multiplied together create a composite number of which only two factors are the two prime numbers. Both prime numbers can then become keys of an encrypted message in methods such as the RSA algorithm. Encryption length key standards today are 1024 bits, but it is expected that this encryption size will increase as memory and processor speeds increase to produce larger length keys. Security of the transaction, however, is predicated on the assumption that the channel of communication is secure.
In the event of a compromise of the secure HTTPS channel, little protection is available to the end user, as in a web transaction with a company, to securely exchange information with the company. Without the security of the communications channel, sending financial information such as credit card information can result in the unintended disclosure of the information to others.
Previous solutions used rely on the use of a single standards based communications method. In such solutions, when a solution to the encoding algorithm becomes publicly known, the electronic communications session can become vulnerable to attack or fraud. Another popular solution technique is to increase key size whenever the algorithm for a key code is uncovered.
Some U.S. Patents disclosing prior cryptography techniques are:
In one embodiment of the present invention, a method is provided for establishing a secure channel or level of security during an Internet transaction when it is discovered that the security of the channel has been breached (i.e. is no longer secure). In this way, a user/browser can continue to communicate with a server, e.g., a bank; with a level of security namely customer encoding security is invoked.
In another embodiment of the present invention there is provided a method for creating customer communication encryption keys for use over a communications channel comprising the steps of: selecting a code number; selecting the two highest prime numbers, excluding 1 and the code number itself, in the code number; determining if each of these prime numbers is greater than the square root of the code number; and, if so, establishing with a web server the two communication encryption keys.
In yet another embodiment of the present invention there is provided a method for adding customer encoding on a communication channel between a user and a web server when the security of the communications channel is determined to be breached or compromised comprising the steps of: establishing a customer encoding system using an encryption method between a user or web browser/user and a web server; the customer encoding further including establishing a user name and using the customer code for establishing two (2) communication keys for the encryption method, the communication encryption keys being defined by the largest two (2) prime numbers of the customer account code; determining if the security on the communications channel has been compromised or breached; determining if the user wishes to continue; communicating between the user/browser and web server that additional customer encoding is to be used in further communications on the communication channel; prompting the user or web browser to present the user name; prompting the user for the customer account code; storing the customer account code on the user's machine and on the web server; creating communication keys; and, continuing transfer of customer encoded messages on the communications channel until communication is completed.
The invention, together with the advantages thereof, may be understood by reference to the following description in conjunction with the accompanying figures, which illustrate some embodiments of the invention.
While the present invention is susceptible of embodiments in various forms, there is shown in the drawings and will hereinafter be described some exemplary and non-limiting embodiments, with the understanding that the present disclosure is to be considered an exemplification of the invention and is not intended to limit the invention to the specific embodiments illustrated. In this disclosure, the use of the disjunctive is intended to include the conjunctive. The use of the definite article or indefinite article is not intended to indicate cardinality. In particular, a reference to “the” object or “a” object is intended to denote also one of a possible plurality of such objects.
RSA is an Internet encryption and authentication system that uses an algorithm developed in 1977 by Ron Rivest, Adi Shamir, and Leonard Adleman. The RSA algorithm is a commonly used encryption and authentication algorithm and is included as part of the Web browsers from Microsoft and Netscape. It's also part of Lotus Notes, Intuit's Quicken, and many other products. RSA Security owns rights to this particular encryption system. The company licenses the algorithm technologies and also sells development kits. The technologies are part of existing or proposed Web, Internet, and computing standards.
The mathematical details of the algorithm used in obtaining the public and private keys are available at the RSA Web site. Briefly, the algorithm involves multiplying two large prime numbers (a prime number is a number divisible only by that number and 1) and through additional operations deriving a set of two numbers that constitutes the public key and another set that is the private key. Once the keys have been developed, the original prime numbers are no longer important and can be discarded. Both the public and the private keys are needed for encryption/decryption but only the owner of a private key ever needs to know it. Using the RSA system, the private key never needs to be sent across the Internet.
The private key is used to decrypt text that has been encrypted with the public key. Thus, if a party wishes to send a message, he can find out the public key of the receiving party (but not the private key) from a central administrator and encrypt a message to the receiving party using his public key. When the encrypted message is received, it is decrypted with the private key of the receiving party. In addition to encrypting messages (which ensures privacy), one can authenticate themselves to the receiving party (so the receiving party can know who really sent the message) by using their private key to encrypt a digital certificate. When the digital certificate is received by the receiving party, they can use the senders public key to decrypt it.
One example of the prior art encapsulation or super imposition of customer encoding of data inside of an HTTPS message is shown in
In the absence of the secure channel, a customer encoding may be implemented with a customer encoding 14 as shown in the illustrated embodiment of
Upon identification of the consumer to the web server with a public identity, the web user is then prompted to enter a specific identifying code over a secure channel like HTTPS. In the event that the secure channel is detected as being unavailable, the user is given the option to send the information as an encrypted session using the user account key as the challenge response. As the account code is known both by the web site (server) and the user, consumer or web browser, this is a common key method and the recovering web server decodes the information from the user using the account code for the user as the handle of the encryption. Consequently, an additional encapsulation specific to customer data can be deployed for each and every different customer, making decoding more difficult in a hostile environment.
The user name may be the customer's user name and the customer account code can be the customer's telephone number. To create the encryption keys in one embodiment, the system determines the two largest prime numbers of the customer account code, namely, the customer's telephone number and the large prime numbers are selected to be greater than the square root of the telephone number. These two prime numbers are then used with an encryption method such as RSA (the Rivest, Shamir and Adleman crypto system), PGP (Pretty Good Privacy) encryption system or DES (Data Encryption Standard Algorithm)).
Another benefit in this environment is that the key does not need to be exchanged between the parties over the public network as both can use the key to code the message to be sent. Although a common identifying key, such as a telephone number, is used, this code need not be used directly as the code for the encryption system. Through using the telephone number as an account example, an additional 22 bits of encryption strength can be applied to the encoding of messages in the communication path by doing an additional encoding based on the customer specific information.
In selecting the common key, although the account information like a telephone number is directly known to the user and the company, it is preferable to have a method for generating the most appropriate key from this data to be communicated, rather than require that the data is the key itself. The key is agreed upon prior to the HTTPS fault or during the public information session, although it is worthy to have the key choice secret to prevent possible interpretation. As such in a preferred embodiment, the largest prime factors in the factor list are used as the keys for the communication. Furthermore, only the prime factors that are larger than the square root (sqrt column shown) of the common information are used as candidates for the key selection to further increase the robustness of encryption. Also, when the customer information is prime (2 factors) or a composite number (more than 2 factors), it is desirable to select an agreed variation of the customer information such as the next higher number not meeting this condition as the agreed upon common information between the user and the web server. Alternatively, an agreed upon algorithm can be applied to the account number.
A flow chart illustrating one embodiment of a method for carrying out the encoding is shown in
Subsequently, a determination is made as to whether the HTTPS that has been breached is the HTTPS in your web browser illustrated at block 34. If the answer is yes, the user is queried as to whether additional security is desired as shown at block 35. Here the user can elect to terminate the session or determine if HTTPS is at risk and if so, send a request to the web server/bank for additional security as illustrated by blocks 36, 37 and 38. At this stage in the process the type of security e.g., RSA, PGP, DES, etc. has already been pre-established using the two highest prime numbers of the customer account code/telephone number and numbers that are greater than the square root of the telephone number.
As illustrated at block 39, from the sub routine (see blocks 35, 37 and 38) and from the main routine (see block 34) the web server of the user is notified that the communications channel is no longer secure, i.e., HTTPS has been breached or compromised. The web server then prompts the user for the user name or public ID and the user sends the user name as illustrated by block 40. The web server then sends the encryption method, previously agreed upon, to the user or web browser for the user to execute and the user is prompted for the agreed upon account code e.g. telephone number as shown at blocks 41, 42. The account code or telephone number is stored on the user machine and the server and communication keys are created as illustrated at blocks 43, 44.
Messages are communicated back and forth between the user and the web server using the communication keys until the user changes the address of the URL being accessed by the user and the communication is determined to be completed (see blocks 45, 46).
Specific embodiments of novel methods for secure communication have been described for exemplification of the invention and are not intended to limit the invention to the specific embodiments illustrated. Numerous modifications and variations can be effectuated without deporting from the scope of the novel concepts of the invention. It is to be understood that no limitation with respect to the specific embodiment illustrated is intended or should be inferred. Accordingly, it is contemplated to cover by the applied claims any and all embodiments, modification, variations or equivalents that fall within the scope of the invention disclosed and claimed herein.
