Document management cryptography

Patent metadata

Field	Value
Publication number	US-11290253-B2
Application number	US-202117163553-A
Country	US
Kind code	B2
Filing date	Jan 31, 2021
Priority date	Feb 14, 2020
Publication date	Mar 29, 2022
Grant date	Mar 29, 2022

Abstract

Using composite cipher technology a single ciphertext C will decrypt to plaintext Pi using key Ki, and to plaintext Pj≠Pi using key Kj≠Ki, thereby a single file C will carry any number of distinct messages so that each key holder will see in C the message intended for them. Applicable for complex project management where frequent changes and large number of people are involved. Also in email systems where a single email will deliver a shared message plus individual messages to selected readers.

First claim

What is claimed is:

1. A document management cryptography method called DMC acting in a novel process that achieves operational efficiency, and behavioral convenience,
supporting the conduct of a project involving a plurality of human participants (parties)
where each party project data exposure is to be limited to designated sections of the full project data;
by consolidating project documentation D to a single master file, P,
wherein P is encrypted to a corresponding composite ciphertext C, then C is distributed to the parties for each party to extract from C only the parts containing the information it is designated to see, and no more;
thereby eliminating the need to divide the project data, D, to a plurality of files, passing to each party the file that carries the information designated for that party;
the method further comprising:
(a) functional setup:
(i) identifying n parties (people) authorized to be exposed to at least part of the project data, D;
(ii) organizing the n parties in v vertical groups V 0 V 1 , . . . V v , wherein members in group V i have more visibility than members of group V i for all i<j where i,j, =1,2, . . . v;
(iii) organizing the n parties in h horizontal groups H 0 , H 1 , H 2 , . . . H h wherein the visibility of any group H i is not the same as the visibility of any other group H j for i≠j,

(b) cryptographic setup:
(i) identifying v keys K 1 , K 2 , . . . K v so that: D i =Decrypt(C, K i ) for i=1,2, . . . v,
(ii) passing to the each of the p parties one or more of the v keys;
(iii) identifying h keys K 1 , K 2 , . . . K h so that: D i =Decrypt(C, K i ) for i=1,2, . . . h,
(iv) passing to the each of the p parties one or more of the h keys

(c) encrypting P to C using a composite cipher CC;
(d) communicating C to the p parties;
(e) each party using the keys in its possession to decrypt C to the parts of P designated for that party exposure.

2. A method as in claim 1 where parties are configured into a hierarchy of q echelons: U 0 , U 1 , . . . U g wherein the parties associated with each echelon share an echelon key, parties in echelon U i share a decryption key K i , and where parties in echelon U i have possession of the following keys: K i , K i+1 , . . . K q corresponding to echelons U i , U i+1 , . . . U q .

3. A method as in claim 1 using n alphabets A 1 , A 2 , . . . A n , each alphabet A i has l letters a i1 , a i2 , . . . a il , for i=1,2, . . . n,
and where the project data, (message) P i is written in A i and is comprised of r i letters from A i for i=1,2 . . . n,
and where a collection of n messages, P, is a collection of the letters from various alphabets, these letters may be mixed in their combined order but without changing the order of letters of a given message, thereby creating a composite plaintext of n messages, P then encrypting P to the corresponding composite ciphertext C, using for each message P i the key K i associated with alphabet A i , and where a reader of C decrypting C with key K i corresponding to A i will disregard all parts of C which are not an encryption of letters in A i .

4. A method as in claim 1 using a key K i to decrypt the composite ciphertext C, by separating C to contents-carrying subsections, c 1 , c 2 , . . . and contents-free subsections f 1 , f 2 , . . . namely bit sequences that have no message content as interpreted by key K i ;
wherein decryption of C using a different key, K j will share some or none of the contents-carrying sections with the party using K i , but will also extract content from other sections regarded as content-carrying sections by the party using K j , and in addition, the party using key K j will decrypt contents in sections of C seen as contents-free by the party using key K i .

5. The method in claim 1 where the communication to the parties takes place in an email environment, allowing a writer to write and send a message M to r readers (parties), where M is annotated with t notes N 1 , N 2 , . . . N t , directed to some, but not all, of the r readers, and where these notes will not be visible by readers for whom a note is not targeted,
by encrypting M+N 1 +N 2 + . . . N t so that the corresponding ciphertext C will be decrypted to M by a key K 0 known to all the r readers, M=Decrypt(C, K o ), and C will also be decrypted to N using key K i which is known only to the readers for whom note N i is intended, N i =Decrypt(C, K i ).

6. The method in claim 1 where a primary message Mp is accompanied by a secondary message Ms, containing cryptographic parameters through which a reader with a proper key for reading the secondary message, can authenticate the primary message, proceeding as follows:
a writer composing Mp will provide authentication data for Mp in the form of Ms, then use a composite cipher to encrypt Mp+Ms to C, where the intended readers of the primary message will use a key Kp to decrypt C to Mp, while only a reader who in addition to Kp holds a key Ks will be able to decrypt C to both Mp and Ms, and then use the information in Ms to authenticate Mp.

7. The method in claim 6 where Ms is comprised of a digital signature of Mp signed by the writer using their private key, and where a reader using Ks to decrypt C to Ms will validate Mp based on the corresponding public key of the writer.

8. The method in claim 1 where a document management cryptography module DMC is connected to a word processor program (WPP), and where a human writer uses the WPP, to write a text message M and designate sections of M to be read by designated readers;
the WPP will then communicate M to the DMC module;
the DMC module will be in possession of bilateral cryptographic keys between a writer and each of the designated readers, and will be in possession of a composite cipher, CC, used by the DMC module to prepare a composite ciphertext C of M: C=CC(M),
the ciphertext C will be communicated to all the designated readers;
each designated reader will use its key in its copy of the DMC, to decrypt C to the section of M which the writer intended for this reader to read.

9. The method in claim 8 , respectively applied to graphics, audio and video, where instead of the WPP one applies a graphic processor, an audio processor, and a video processor.

Assignees

• Samid Gideon

Inventors

• Samid Gideon

Classifications

• H04L9/0833

  involving conference or group key (network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065) · CPC title

• H04L9/0618 Primary

  Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation · CPC title

• G09C1/02 Primary

  by using a ciphering code in chart form · CPC title

• H04L9/0891

  Revocation or update of secret information, e.g. encryption key update or rekeying · CPC title

• H04L9/3247

  involving digital signatures · CPC title