Digital signature security system for messages

Patent metadata

Field	Value
Publication number	US-12476825-B2
Application number	US-202118033611-A
Country	US
Kind code	B2
Filing date	Nov 3, 2021
Priority date	Nov 6, 2020
Publication date	Nov 18, 2025
Grant date	Nov 18, 2025

Abstract

Systems and techniques are described herein for validating one or more requests. For example, the systems and techniques can include receiving message data from a first device accessible to a user. The message data can be associated with a message to be sent using the first device. The systems and techniques can also include sending, to a second device accessible to the user, a request for confirmation that the user requested a digital signature for the message, the first device and second device being different devices. The systems and techniques can further include receiving a confirmation from the second device, the confirmation confirming that the user requested the digital signature for the message. The systems and techniques can further include generating the digital signature for the message using the message data and a private key and sending the digital signature to the first device.

First claim

What is claimed is:

1 . A method of validating one or more requests, the method comprising:
receiving message data from a first device accessible to a user, wherein the message data is associated with a message to be sent using the first device; sending, to a second device accessible to the user, a request for confirmation that the user requested a digital signature for the message, the first device and second device being different devices; receiving a confirmation from the second device, the confirmation confirming that the user requested the digital signature for the message; generating the digital signature for the message using the message data and a private key; sending the digital signature to the first device for transmission of the message with the digital signature for verification of the message to a recipient device; signing the message data using the private key, wherein the signed message data includes coded information for authenticating the signed message data; and sending the signed message data to the first device.

2 . The method of claim 1 , wherein the request for confirmation includes information associated with the message.

3 . The method of claim 2 , wherein the information associated with the message includes at least one of a timestamp corresponding to a time associated with sending of the message, a portion of text included in the message, and an intended recipient of the message.

4 . The method of claim 1 , wherein the private key is an asymmetric private key.

5 . The method of claim 1 , wherein generating the digital signature is performed using a Rivest-Shamir-Adleman (RSA) algorithm.

6 . The method of claim 1 , wherein the message data includes a hash of the message.

7 . The method of claim 1 , wherein the message is an email.

8 . The method of claim 7 , wherein the first device is communicatively coupled to an email messaging system.

9 . The method of claim 1 , further comprising:
receiving additional message data from the first device, wherein the additional message data is associated with an additional message to be sent using the first device; sending, to the second device accessible to the user, an additional request for confirmation that the user requested an additional digital signature for the additional message; receiving, from the second device, an indication that the user did not authorize the additional message; and in response to receiving the indication that the user did not authorize the additional message, not generating an additional digital signature for the additional message.

10 . The method of claim 1 , wherein the coded information includes a quick response (QR) code.

11 . An apparatus for validating one or more requests, the apparatus comprising:
one or more processors; and one or more non-transitory machine-readable storage media containing instructions which when executed on the one or more processors, cause the one or more processors to perform operations including:
receiving message data from a first device accessible to a user, wherein the message data is associated with a message to be sent using the first device;
sending, to a second device accessible to the user, a request for confirmation that the user requested a digital signature for the message, the first device and second device being different devices;
receiving a confirmation from the second device, the confirmation confirming that the user requested the digital signature for the message;
generating the digital signature for the message using the message data and a private key;
sending the digital signature to the first device for transmission of the message with the digital signature for verification of the message to a recipient device;
signing the message data using the private key, wherein the signed message data includes coded information for authenticating the signed message data; and
sending the signed message data to the first device.

12 . The apparatus of claim 11 , wherein the request for confirmation includes information associated with the message, the information associated with the message including at least one of a timestamp corresponding to a time associated with sending of the message, a portion of text included in the message, and an intended recipient of the message.

13 . The apparatus of claim 11 , wherein the message data includes a hash of the message.

14 . The apparatus of claim 11 , wherein the message is an email, and wherein the first device is communicatively coupled to an email messaging system.

15 . The apparatus of claim 11 , wherein the operations further comprise:
receiving additional message data from the first device, wherein the additional message data is associated with an additional message to be sent using the first device; sending, to the second device accessible to the user, an additional request for confirmation that the user requested an additional digital signature for the additional message; receiving, from the second device, an indication that the user did not authorize the additional message; and in response to receiving the indication that the user did not authorize the additional message, not generating an additional digital signature for the additional message.

16 . The apparatus of claim 11 , wherein the signed message data includes coded information for authenticating the signed message data.

17 . A non-transitory computer-readable storage medium storing instructions that, when executed, cause one or more processors to:
receive message data from a first device accessible to a user, wherein the message data is associated with a message to be sent using the first device; send, to a second device accessible to the user, a request for confirmation that the user requested a digital signature for the message, the first device and second device being different devices; receive a confirmation from the second device, the confirmation confirming that the user requested the digital signature for the message; generate the digital signature for the message using the message data and a private key; send the digital signature to the first device for transmission of the message with the digital signature for verification of the message to a recipient device; sign the message data using the private key, wherein the signed message data includes coded information for authenticating the signed message data; and send the signed message data to the first device.

Assignees

• Nagravision Sarl

Inventors

• Spanier Ryan
• Hamiel Nathan
• Amiet Nils
• Roys Joshua

Classifications

• H04L9/3297

  involving time stamps, e.g. generation of time stamps · CPC title

• H04L9/0825

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• H04L9/3215

  using a plurality of channels (network architectures or network communication protocols using different networks H04L63/18) · CPC title