System and method for securing digital messages

Abstract

A system and method for providing an improved way to secure messages being transmitted between communicating devices. Security mechanisms, operating below the session establishment level, provide encryption that becomes stronger over time as devices continue to communicate. After random characters are used to encrypt an initial message, each new message communicated between two devices is encrypted with the most recent message communicated there-between. Moreover, messages to be transmitted are parsed into smaller records having a fixed page length, encrypted and combined with additional encrypted records a predetermined number of times. The disclosed system and method also provide a multi-threading capability, thereby reducing the likelihood of a denial of service of attack.

What is claimed:  
     
         1 . A method for securing a message communicated between a first device and a second device, said method comprising: 
 receiving encoding information from said first device, said encoding information transmitted to said second device in response to a request from said second device to communicate a first message to said first device;    encrypting said first message with said encoding information and storing said encrypted first message in a first memory;    transmitting said encrypted first message to said first device by said second device;    receiving said encrypted first message from said second device by said first device, decrypting said encrypted first message with said encoding information, and storing said encrypted first message in a second memory;    generating a second message by said second device, and encrypting said second message with said encrypted first message stored in said first memory;    transmitting said encrypted second message to said first device by said second device; and    decrypting said encrypted second message by said first device with said first encrypted message stored in said second memory.    
     
     
         2 . The method of  claim 1 , further comprising receiving parameters from said first device directed to encrypting said first message and said second message.  
     
     
         3 . The method of  claim 2 , wherein said parameters include a small page length value, a large page length value and a combined records value.  
     
     
         4 . The method of  claim 3 , further comprising determining a record page length value by said second device based on one of said small page length value and said large page length value after evaluating the size of a message to be transmitted by said second device to said first device.  
     
     
         5 . The method of  claim 4 , further comprising splitting at least part of a message by said second device into at least one record having a size equal to said record page length value, and encrypting said at least one record with at least one of said encoding information and said encrypted first message.  
     
     
         6 . The method of  claim 5 , further comprising padding said at least one record with random bytes when said record is not as large as said record page length value.  
     
     
         7 . The method of  claim 5 , further comprising repeating said step of splitting said message into at least one record and said step of encrypting said at least one record, a number of times equal to said combined records value, and combining said encrypted records by said second device prior to transmitting said combined records to said first device.  
     
     
         8 . The method of  claim 7 , further comprising repeating said steps of splitting a message into records, encrypting said records, combining said records and transmitting said combined records until said message is completely transmitted to said first device.  
     
     
         9 . The method of  claim 7 , further comprising performing a cyclic redundancy check and Base64Coding on said combined records prior to transmitting said combined records to said first device.  
     
     
         10 . The method of  claim 7 , further comprising receiving said combined records by said first device from said second device and decrypting said combined records.  
     
     
         11 . The method of  claim 10 , further comprising repeating said steps of receiving said combined records, decrypting said combined records, and continuing said steps of receiving said combined records and decrypting said combined records until said message from said second device is fully received and decrypted.  
     
     
         12 . The method of  claim 1 , wherein said step of encrypting said first and said second message is performed with binary addition.  
     
     
         13 . The method of  claim 1 , wherein said step of decrypting said first message and said second message is performed with binary subtraction.  
     
     
         14 . The method of  claim 1 , further comprising including a code representing said second device by said second device in said first encrypted message and said second encrypted message.  
     
     
         15 . A method for securing a message, said method comprising: 
 generating a first message;    receiving encoding information, said encoding information transmitted in response to a request to communicate said first message;    encrypting said first message with said encoding information and storing said encrypted first message in a first memory;    transmitting said encrypted first message;    generating a second message, and encrypting said second message with said encrypted first message stored in said first memory; and    transmitting said encrypted second.    
     
     
         16 . A system for securing a message, said system comprising: 
 a first device, said first device receiving encoding information from a second device, said encoding information transmitted to said first device in response to a request from said first device to communicate a first message to said second device;    an encryption module, said encryption module encrypting said first message with said encoding information;    a storage module, said storage module storing said encrypted first message in a first memory;    a transmission module, said transmission module transmitting said encrypted first message from said first device to said second device;    a reception module, said reception module receiving said encrypted first message by said second device from said first device;    a decryption module, said decryption module decrypting said encrypted first message with said encoding information,    said storage module storing said encrypted first message in a second memory;    said first device generating a second message, said encryption module encrypting said second message with said encrypted first message stored in said first memory;    said transmission module transmitting said encrypted second message to said second device; and    said decryption module decrypting said encrypted second message by said second device with said first encrypted message stored in said second memory.    
     
     
         17 . The system of  claim 16 , wherein said second device further transmits parameters directed to encrypting said first message and said second message.  
     
     
         18 . The system of  claim 17 , wherein said parameters include a small page length value, a large page length value and a combined records value.  
     
     
         19 . The system of  claim 17 , said first device further comprising a facility that determines a record page length value based on one of said small page length value and said large page length value after evaluating the size of a message to be transmitted by said transmission module.  
     
     
         20 . The system of  claim 19 , further comprising a parsing module, said parsing module splitting at least part of a message into a record having a size equal to said record page length value.  
     
     
         21 . The system of  claim 20 , wherein said encryption module encrypts said record with at least one of said encoding information and said encrypted first message.  
     
     
         22 . The system of  claim 20 , wherein said parsing module splits said message into at least two records.  
     
     
         23 . The system of  claim 22 , further comprising a combining module, said combining module combines said encrypted records.  
     
     
         24 . The system of  claim 22 , wherein said parsing module, said encryption module, said combining module and said transmission module repeat said steps of splitting a message into records, encrypting said records, combining said records and transmitting said combined records until said message is completely transmitted to said first device.  
     
     
         25 . The system of  claim 24 , wherein said parsing module, said decryption module, said combining module and said transmission module repeat said steps of receiving said combined records, decrypting said combined records, until said message from said second device is fully received and decrypted.