Cryptographic messaging device

Patent metadata

Field	Value
Publication number	US-2025007894-A1
Application number	US-202318344349-A
Country	US
Kind code	A1
Filing date	Jun 29, 2023
Priority date	Jun 29, 2023
Publication date	Jan 2, 2025
Grant date	—

Abstract

Techniques for cryptographic messaging are described. In some examples, cryptographic messaging is enabled on a device that at least includes an input/output port configured to receive an encrypted message from a coupled external device; a hardware security module (HSM) configured to decrypt the encrypted message, wherein the HSM is to include storage to store at least one private key to be used to decrypt the encrypted message; and a screen to display contents of the decrypted message.

First claim

What is claimed is:

1 . A computer-implemented method comprising:
receiving, from a messaging service of a provider network, an encrypted message from a first cryptographic messaging device at a second cryptographic messaging device via an attached network-enabled device, wherein the second cryptographic messaging device does not include networking capabilities; calculating a shared key from a public key of the first cryptographic messaging device and a private key of the second cryptographic messaging device using a hardware security module of the second cryptographic messaging device; decrypting the encrypted message using the shared key; verifying a signature of the decrypted message; and displaying contents of the decrypted message.

2 . The computer-implemented method of claim 1 , wherein the private key of the second cryptographic messaging device is stored in a hardware security module of the second cryptographic messaging device.

3 . The computer-implemented method of claim 1 , wherein the public key is managed by the messaging service of a provider network.

4 . An apparatus comprising:
an input/output port configured to receive an encrypted message from a coupled external device; a hardware security module (HSM) configured to decrypt the encrypted message, wherein the HSM is to include storage to store at least one private key to be used to decrypt the encrypted message; and a screen to display contents of the decrypted message.

5 . The apparatus of claim 4 , wherein power for the apparatus is to be provided from the external device.

6 . The apparatus of claim 4 , wherein the encrypted message is to be deleted from a message delivery service of a provider network upon the apparatus receiving the encrypted message.

7 . The apparatus of claim 4 , wherein the apparatus is to use an Elliptic Curve Diffie-Hellman key exchange with a sending device.

8 . The apparatus of claim 4 , wherein the encrypted message is to be received directly from a sending device.

9 . The apparatus of claim 4 , wherein the encrypted message is to be received from a message delivery service of a provider network.

10 . The apparatus of claim 4 , wherein the HSM is to include at least one cryptographic engine and the storage is secure storage.

11 . The apparatus of claim 4 , further comprising:
a physical intrusion detection system to monitor for symptoms of physical tampering of the apparatus.

12 . The apparatus of claim 4 , further comprising:
a processor; and
memory coupled to the processor, the memory to store at least an operating system and a messaging application.

13 . The apparatus of claim 4 , wherein the encrypted message is to include one or more of text, a document, an image, a video file, or an audio file.

14 . The apparatus of claim 4 , further comprising:
a physical keyboard to input a message.

15 . The apparatus of claim 4 , wherein the encrypted message is to be deleted from the apparatus after a period of time has expired.

16 . The apparatus of claim 4 , further comprising:
a user authentication mechanism.

17 . A system comprising:
a first one or more electronic devices to implement a network-enabled device; and a second one or more electronic devices to implement a cryptographic messaging device, the cryptographic messaging device comprising:
an input/output port to receive an encrypted message using the network-enabled device, wherein the network-enabled device is to provide network capabilities for the cryptographic messaging device,
a hardware security module (HSM) to decrypt the encrypted message, wherein the HSM is to include storage to store at least one private key to be used to decrypt the encrypted message, and
a screen to display contents of the decrypted message.

18 . The system of claim 17 , wherein the network-enabled device is a cellular device having an operating system and networking hardware to couple to a telecommunications network.

19 . The system of claim 17 , further comprising:
a third one or more electronic devices to implement a messaging service of a provider network, the messaging service to provide the encrypted message to the cryptographic messaging device via the network-enabled device.

20 . The system of claim 17 , wherein the cryptographic messaging device is to use an Elliptic Curve Diffie-Hellman key exchange with a sending device.

Assignees

• Amazon Tech Inc

Inventors

• Nolton David M
• Troche Jose
• Weatherly Richard M
• Bolling Robert Hill

Classifications

• H04L9/0825

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• G06F21/606

  by securing the transmission between two devices or processes · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title

• H04L63/0442 Primary

  wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30) · CPC title