Secure Messaging with Automatic Recipient Enrollment

Abstract

A public-key based secure messaging system with automatic receiver enrollment is disclosed. A sender in the system first determines whether a receiver has a public key. If the receiver has a public key, the messages will be sent to the receiver using a standard public-key based encryption. If the receiver does not have a public key, the first message will be sent to the receiver using a delivery method that does not require the receiver to have a pair of public and private keys prior to sending the message. However, when the receiver accesses the first message, a pair of public and private keys will be automatically generated at the receiver and the public key will be made available for encrypting subsequent messages sent to the receiver.

1 . A method for sending a message to a recipient comprising:
 determining whether the recipient is enrolled;   if the recipient is not enrolled, sending the message to the recipient using authentication information that can only be used for accessing the message for the first time, and when the recipient accesses the message for the first time, making the recipient enrolled.   
     
     
         2 . The method of  claim 1 , wherein the authentication information includes a password that can only be used for accessing the message for the first time. 
     
     
         3 . The method of  claim 1 , wherein the authentication information is sent to a recipient's email address. 
     
     
         4 . The method of  claim 1 , wherein the authentication information includes at least two pieces of information sent to a recipient's email address from at least two different sources. 
     
     
         5 . The method of  claim 1  wherein sending the message to the recipient includes using an identity based encryption. 
     
     
         6 . The method of  claim 1  wherein sending the message to the recipient includes using a web based delivery method. 
     
     
         7 . The method of  claim 1  further comprising:
 if the recipient is enrolled, sending the message to the recipient using a secure messaging method for enrolled members. 
 
     
     
         8 . The method of  claim 7 , wherein:
 the secure messaging method for enrolled members includes using public key encryption;   determining whether the recipient is enrolled includes determining whether the recipient has a public key; and   making the recipient enrolled includes establishing a pair of public key and private key for the recipient.   
     
     
         9 . The method of  claim 8 , wherein:
 a recipient specific key for accessing the message after the first time or other messages sent to the recipient before the recipient is enrolled is protected in the same way as the private key is protected.   
     
     
         10 . The method of  claim 9  wherein:
 the private key and the recipient specific key are protected using a recipient chosen password. 
 
     
     
         11 . A system for sending a message to a recipient comprising:
 means for determining whether the recipient is enrolled;   a non-member delivery apparatus operable when it is determined that the recipient is not enrolled; wherein the non-member delivery apparatus sends the message to the recipient using authentication information that can only be used for accessing the message for the first time, and when the recipient accesses the message for the first time, makes the recipient enrolled.   
     
     
         12 . The system of  claim 11 , wherein the authentication information includes a password that can only be used for accessing the message for the first time. 
     
     
         13 . The system of  claim 11 , wherein the authentication information is sent to a recipient's email address. 
     
     
         14 . The system of  claim 11 , wherein the authentication information includes at least two pieces of information sent to a recipient's email address from at least two different sources. 
     
     
         15 . The system of  claim 11  wherein sending the message to the recipient includes using an identity based encryption. 
     
     
         16 . The method of  claim 11  wherein sending the message to the recipient includes using a web based delivery method. 
     
     
         17 . The system of  claim 11  further comprising:
 a member delivery apparatus operable when it is determined that the recipient is enrolled; wherein the member delivery apparatus sends the message to the recipient using a secure messaging method for enrolled members. 
 
     
     
         18 . The method of  claim 17 , wherein:
 the secure messaging method for enrolled members includes using public key encryption;   determining whether the recipient is enrolled includes determining whether the recipient has a public key; and   making the recipient enrolled includes establishing a pair of public key and private key for the recipient.   
     
     
         19 . The method of  claim 18 , wherein:
 a recipient specific key for accessing the message after the first time or other messages sent to the recipient before the recipient is enrolled is protected in the same way as the private key is protected.   
     
     
         20 . The method of  claim 19  wherein:
 the private key and the recipient specific key are protected using a recipient chosen password.