Storing decrypted body of message and key used to encrypt and decrypt body of message

Patent metadata

Field	Value
Publication number	US-10038675-B2
Application number	US-201514882233-A
Country	US
Kind code	B2
Filing date	Oct 13, 2015
Priority date	Oct 13, 2015
Publication date	Jul 31, 2018
Grant date	Jul 31, 2018

Abstract

A non-transitory computer-readable storage medium comprising instructions stored thereon. When executed by at least one processor, the instructions may be configured to cause a computing system to at least receive a message, the message including a header, an encrypted symmetric key, and an encrypted body, decrypt the encrypted symmetric key using a private key to generate a decrypted symmetric key, decrypt the encrypted body using the decrypted symmetric key to generate a decrypted body, and store the header, the decrypted symmetric key, and the decrypted body in long-term storage.

First claim

What is claimed is:

1. A non-transitory computer-readable storage medium comprising instructions stored thereon that, when executed by at least one hardware processor, are configured to cause a computing system to at least:
receive an email message via an electronic network, the email message including a cryptographic message syntax (CMS) header, an encrypted symmetric key, and an encrypted body;
decrypt the encrypted symmetric key using a private key to generate a decrypted symmetric key;
decrypt the encrypted body using the decrypted symmetric key to generate a decrypted body;
store the CMS header, the decrypted symmetric key, and the decrypted body in long-term storage;
present the stored decrypted body; and
respond to a request to forward the message to a recipient by:
re-encrypting the decrypted body using the decrypted symmetric key;
re-encrypting the decrypted symmetric key using a public key associated with the private key; and
sending the CMS header, the re-encrypted symmetric key, and the re-encrypted body to the recipient.

2. The non-transitory computer-readable storage medium of claim 1 , wherein the instructions are further configured to cause the computing system to re-encrypt the decrypted symmetric key to generate a re-encrypted symmetric key, and the storing of the decrypted symmetric key includes storing the re-encrypted symmetric key.

3. The non-transitory computer-readable storage medium of claim 1 , wherein the instructions are further configured to cause the computing system to respond to a request to read the message by displaying the stored decrypted body.

4. The non-transitory computer-readable storage medium of claim 1 , wherein the instructions are further configured to cause the computing system to respond to a request to read the message by retrieving the CMS header and the decrypted body from the long-term storage and displaying the CMS header and the stored decrypted body.

5. The non-transitory computer-readable storage medium of claim 1 , wherein the instructions are configured to cause the computing system to delete the encrypted body after decrypting the encrypted body.

6. The non-transitory computer-readable storage medium of claim 1 , wherein the long-term storage includes a magnetic disk.

7. The non-transitory computer-readable storage medium of claim 1 , wherein the long-term storage includes a flash drive.

8. The non-transitory computer-readable storage medium of claim 1 , wherein the storing the CMS header and decrypted body in the long-term storage reduces latency in the presenting the stored decrypted body.

9. A non-transitory computer-readable storage medium comprising instructions stored thereon that, when executed by at least one hardware processor, are configured to cause a computing system to at least:
receive an email message, the email message including:
a primary header including a sender of the email message and a recipient of the email message,
a cryptographic message syntax (CMS) header identifying at least one recipient and including at least one encrypted copy of a symmetric key encrypted according to a public key associated with the at least one recipient, and
an encrypted body encrypted according to the symmetric key;

decrypt the at least one encrypted copy of the symmetric key using a private key associated with the at least one recipient to generate a decrypted symmetric key;
decrypt the encrypted body using the decrypted symmetric key to generate a decrypted body;
re-encrypt the decrypted symmetric key to generate a re-encrypted symmetric key;
store the primary header, the identification of the at least one recipient, the re-encrypted symmetric key, and the decrypted body, in long-term storage; and
display the stored decrypted body.

10. The non-transitory computer-readable storage medium of claim 9 , wherein:
the CMS header includes at least:
a first identifier, identifying a first recipient, and a first copy of the symmetric key, the first copy of the symmetric key being encrypted according to a first public key associated with the first recipient; and
a second identifier, identifying a second recipient, and a second copy of the symmetric key, the second copy of the symmetric key being encrypted according to a second public key associated with the second recipient;

the decrypting the at least one encrypted copy of the symmetric key includes decrypting the first copy of the symmetric key using a first private key associated with the first recipient to generate the decrypted symmetric key; and
the storing the identification of the at least one recipient includes storing the first identifier and the second identifier in the long-term storage.

11. The non-transitory computer-readable storage medium of claim 9 , wherein:
the decrypted body includes length indicators indicating lengths of lines of data in the decrypted body; and
the instructions are further configured to cause the computing system to store the length indicators in the long-term storage.

12. The non-transitory computer-readable storage medium of claim 9 , wherein:
the email message further includes at least one Secure/Multipurpose Internet Mail Extensions (S/MIME) header; and
the instructions are further configured to cause the computing system to store the at least one S/MIME header.

13. The non-transitory computer-readable storage medium of claim 9 , wherein the email message further includes a CMS trailer.

14. The non-transitory computer-readable storage medium of claim 9 , wherein the instructions are further configured to cause the computing system to erase the encrypted body after decrypting the encrypted body.

15. The non-transitory computer-readable storage medium of claim 9 , wherein the instructions are further configured to cause the computing system to respond to a request to read the message by displaying the stored decrypted body.

16. The non-transitory computer-readable storage medium of claim 9 , wherein the instructions are further configured to cause the computing system to respond to a request to read the message by retrieving the primary header and the decrypted body from the long-term storage and displaying the primary header and the stored decrypted body.

17. The non-transitory computer-readable storage medium of claim 9 , wherein the instructions are further configured to cause the computing system to respond to a request to forward the email message to the at least one recipient by:
re-encrypting the decrypted body using the decrypted symmetric key;
re-generating the encrypted copy of the symmetric key; and
sending the primary header, the re-generated symmetric key, and the re-encrypted body to the recipient.

18. The non-transitory computer-readable storage medium of claim 17 , wherein the re-generating the encrypted copy of the symmetric key includes:
decrypting the re-encrypted symmetric key according to a key associated with the computing system; and
re-encrypting the symmetric key according to the public key associated with the at least one recipient.

19. A non-transitory computer-readable storage medium comprising instructions stored thereon that, when executed by at least one hardware processor, are configured to cause a computing system to at least:
receive an email message, the email message including:
a primary header including a sender of the email message and a recipient of the email message,
a cryptographic message syntax (CMS) header including at least:
a first identifier, identifying a first recipient, and a first copy of a symmetr

Assignees

• Google Inc
• Google Llc

Inventors

• Baudoin Laetitia
• Goodman Brian

Classifications

• H04L9/0819

  Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062) · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/0822

  using key encryption key · CPC title

• H04L2209/76

  Proxy, i.e. using intermediary entity to perform cryptographic operations · CPC title

• H04L9/0816 Primary

  Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use · CPC title