公开(公告)号：US08793491B2

公开(公告)日：2014-07-29

申请号：US12294819

申请日：2007-03-22

申请人： Andrew Dancer ,  Mark Chimley ,  Adam Tuaima ,  Matthew Baldwin

发明人： Andrew Dancer ,  Mark Chimley ,  Adam Tuaima ,  Matthew Baldwin

IPC分类号： H04L29/06 ,  H04L9/08

CPC分类号： H04L63/065 ,  H04L9/0833 ,  H04L51/00 ,  H04L63/0442 ,  H04L63/045 ,  H04L63/062

摘要： There is described a key server which is connected to a local area network, and an encryption authority transfers private keys for clients of the local area network to the key server. In an embodiment, the key server encrypts outgoing emails using public keys for the recipients and decrypts internal emails using private keys for the recipients. In another embodiment, the clients of the local area network download their respective private keys from the key server so that encryption operations may be performed by client software.

摘要翻译： 描述了连接到局域网的密钥服务器，并且加密机构向局域网的客户端传送私钥给密钥服务器。 在一个实施例中，密钥服务器使用用于收件人的公钥加密输出的电子邮件，并使用私钥对接收者解密内部电子邮件。 在另一个实施例中，局域网的客户端从密钥服务器下载其各自的私钥，使得加密操作可以由客户端软件执行。

公开(公告)号：US20100046757A1

公开(公告)日：2010-02-25

申请号：US12295982

申请日：2007-04-03

申请人： Andrew Dancer ,  Mark Chimley

发明人： Andrew Dancer ,  Mark Chimley

IPC分类号： H04L9/32 ,  G06F15/16 ,  H04L9/00

CPC分类号： H04L63/045 ,  H04L51/30 ,  H04L63/0823 ,  H04L63/126

摘要： There is described an electronic mail messaging system in which a plurality of user computers are connected to a mail registration server via the Internet. The mail registration server stores plural sets of decryption data, each set being required to decrypt a corresponding encrypted electronic mail message. Following receipt of an encrypted electronic mail message, a user computer communicates with the mailed registration server to effect decryption of the encrypted electronic mail message using the corresponding decryption data stored by the mail registration server. In this way, the accessing of the electronic mail message can be monitored by the mail registration server.

摘要翻译： 描述了一种电子邮件消息系统，其中多个用户计算机经由因特网连接到邮件注册服务器。 邮件注册服务器存储多组解密数据，每组需要解密对应的加密电子邮件消息。 在接收到加密的电子邮件消息之后，用户计算机与邮寄的注册服务器进行通信，以使用由邮件注册服务器存储的对应的解密数据对加密的电子邮件消息进行解密。 以这种方式，电子邮件消息的访问可以由邮件注册服务器监视。

公开(公告)号：US20100228973A1

公开(公告)日：2010-09-09

申请号：US12294819

申请日：2007-03-22

申请人： Andrew Dancer ,  Mark Chimley ,  Adam Tuaima ,  Matthew Baldwin

发明人： Andrew Dancer ,  Mark Chimley ,  Adam Tuaima ,  Matthew Baldwin

IPC分类号： H04L9/32

CPC分类号： H04L63/065 ,  H04L9/0833 ,  H04L51/00 ,  H04L63/0442 ,  H04L63/045 ,  H04L63/062

摘要： There is described a key server which is connected to a local area network, and an encryption authority transfers private keys for clients of the local area network to the key server. In an embodiment, the key server encrypts outgoing emails using public keys for the recipients and decrypts internal emails using private keys for the recipients. In another embodiment, the clients of the local area network download their respective private keys from the key server so that encryption operations may be performed by client software.

摘要翻译： 描述了连接到局域网的密钥服务器，并且加密机构向局域网的客户端传送私钥给密钥服务器。 在一个实施例中，密钥服务器使用用于收件人的公钥加密输出的电子邮件，并使用私钥对接收者解密内部电子邮件。 在另一个实施例中，局域网的客户端从密钥服务器下载其各自的私钥，使得加密操作可以由客户端软件执行。

公开(公告)号：US08321669B2

公开(公告)日：2012-11-27

申请号：US12162868

申请日：2007-01-30

申请人： Andrew Dancer

发明人： Andrew Dancer

IPC分类号： H04L9/32

CPC分类号： H04L9/0825 ,  H04L51/00 ,  H04L63/045 ,  H04L63/0471 ,  H04L63/126 ,  H04L2209/76

摘要： There is described an electronic data communication system in which encrypted mail messages for a recipient are sent in two parts: message data encrypted by a symmetric encryption algorithm using a session key and session key data encrypted by an asymmetric encryption algorithm using a public key associated with the recipient. If the recipient uses a webmail service to access the encrypted electronic mail message, the encrypted session key data is sent to a trusted third party server which has access to the private key of the user. The trusted third party server decrypts the encrypted session key using the private key of the user, and then sends the decrypted session key to a remote network device for decryption of the encrypted message. In this way, although the trusted third party has access to the private key of the user, the trusted third party does not have access to any decrypted message. In another aspect, in order to digitally sign a message, the sender applies a hash function to the message to generate a hash value, and then sends the hash value to the trusted third party server where it is encrypted using the private key associated with the sender in order to generate the digital signature, which is then returned to the sender.

摘要翻译： 描述了一种电子数据通信系统，其中用于接收者的加密邮件消息分两部分发送：使用会话密钥的对称加密算法加密的消息数据和通过非对称加密算法加密的会话密钥数据，使用与 收件人。 如果收件人使用网络邮件服务来访问加密的电子邮件消息，则加密的会话密钥数据被发送到可访问用户私钥的受信任的第三方服务器。 受信任的第三方服务器使用用户的私钥对加密的会话密钥进行解密，然后将解密的会话密钥发送到远程网络设备，以解密加密的消息。 以这种方式，虽然可信赖的第三方可以访问用户的私钥，但可信第三方不能访问任何解密的消息。 在另一方面，为了对消息进行数字签名，发送方向该消息应用散列函数以生成散列值，然后将散列值发送到可信第三方服务器，在该可信第三方服务器中使用与 发送方以生成数字签名，然后将其发送给发送方。

公开(公告)号：US20090307490A1

公开(公告)日：2009-12-10

申请号：US12162868

申请日：2007-01-30

申请人： Andrew Dancer

发明人： Andrew Dancer

IPC分类号： H04L9/32 ,  H04L9/08 ,  G06F15/16

CPC分类号： H04L9/0825 ,  H04L51/00 ,  H04L63/045 ,  H04L63/0471 ,  H04L63/126 ,  H04L2209/76

摘要： There is described an electronic data communication system in which encrypted mail messages for a recipient are sent in two parts: message data encrypted by a symmetric encryption algorithm using a session key and session key data encrypted by an asymmetric encryption algorithm using a public key associated with the recipient. If the recipient uses a webmail service to access the encrypted electronic mail message, the encrypted session key data is sent to a trusted third party server which has access to the private key of the user. The trusted third party server decrypts the encrypted session key using the private key of the user, and then sends the decrypted session key to a remote network device for decryption of the encrypted message. In this way, although the trusted third party has access to the private key of the user, the trusted third party does not have access to any decrypted message. In another aspect, in order to digitally sign a message, the sender applies a hash function to the message to generate a hash value, and then sends the hash value to the trusted third party server where it is encrypted using the private key associated with the sender in order to generate the digital signature, which is then returned to the sender.

摘要翻译： 描述了一种电子数据通信系统，其中用于接收者的加密邮件消息分两部分发送：使用会话密钥的对称加密算法加密的消息数据和通过非对称加密算法加密的会话密钥数据，使用与 收件人。 如果收件人使用网络邮件服务来访问加密的电子邮件消息，则加密的会话密钥数据被发送到可访问用户私钥的受信任的第三方服务器。 受信任的第三方服务器使用用户的私钥对加密的会话密钥进行解密，然后将解密的会话密钥发送到远程网络设备，以解密加密的消息。 以这种方式，虽然可信赖的第三方可以访问用户的私钥，但可信第三方不能访问任何解密的消息。 在另一方面，为了对消息进行数字签名，发送者向该消息应用散列函数以生成散列值，然后将散列值发送到可信第三方服务器，其中使用与 发送方以生成数字签名，然后将其发送给发送方。