5 results about "Email encryption" patented technology

Described is a framework for associating and distributing public keys linked to email identifiers. In this system, an Internet domain specifies a Domain Key Authority (DKA) via a DNS record. The DKA collects, stores, and serves public keys for email IDs under that domain, verifying the binding between each email ID and its public key without relying on certificates or webs of trust. Multiple DKAs collectively form a logical infrastructure for distributing and retrieving public keys across the email namespace. Because email IDs are widely used to sign into various applications, this framework enables authentication without shared secrets or third-party authenticators. Other applications include email encryption, crypto wallets, and cryptographically secure services.

Described herein is a public and distributed framework for the distribution and lookup of public keys of email IDs. In this framework, an Internet domain, via a DNS record, specifies its Domain Key Authority (DKA) which collects, stores, and serves the public keys of email IDs belonging to that domain. Through techniques described herein, the DKA verifies and guarantees the binding between an email ID and its public key without certificates or webs of trust. The DKAs provide, collectively, a logical framework for the distribution and lookup of public keys for the email namespace. Since users use email IDs routinely for signing into a range of applications, a public key framework for email IDs provides an authentication infrastructure without third-party authenticators. The framework has extensive uses in applications from email encryption to crypto wallets.

One variation of a method for end-to-end encryption of electronic mail includes: receiving an email encrypted according to a first encryption protocol and designating a recipient within an external domain; verifying encryption protocol supported by the recipient's mail client; in response to a recipient exclusion database identifying the recipient, encrypting the email to a less-robust encryption protocol supported by the recipient mail client and transmitting the email to the recipient; in response to the recipient exclusion database excluding the recipient and the recipient mail client supporting the first encryption protocol, transmitting the email encrypted according to the first encryption protocol to the recipient; and, in response to the recipient exclusion database excluding the recipient and the recipient mail client not supporting the first encryption protocol, generating a notification email including a hyperlink to a secure webpage containing content of the email and transmitting the notification email to the recipient.

One variation of a method for end-to-end encryption of electronic mail includes: receiving an email encrypted according to a first encryption protocol and designating a recipient within an external domain; verifying encryption protocol supported by the recipient's mail client; in response to a recipient exclusion database identifying the recipient, encrypting the email to a less-robust encryption protocol supported by the recipient mail client and transmitting the email to the !recipient; in response to the recipient exclusion database excluding the recipient and the recipient mail client supporting the first encryption protocol, transmitting the email encrypted according to the first encryption protocol to the recipient; and, in response to the recipient exclusion database excluding the recipient and the recipient mail client not supporting the first encryption protocol, generating a notification email including a hyperlink to a secure webpage containing content of the email and transmitting the notification email to the recipient.

This invention belongs to the field of information and communication technology, and discloses an email encryption method, decryption method, and device. The email encryption method includes: in response to an email sending request, encrypting plaintext to obtain ciphertext; converting at least a portion of the ciphertext into a different modality than the current modality; simultaneously generating additional information, including the encryption algorithm used, the position information of the at least a portion before and after the modality conversion, and the modality conversion rules; and sending the encrypted and modality-converted ciphertext, along with the additional information. This invention introduces modality conversion into the email encryption process, increasing encryption complexity and improving the confidentiality and security of email information.