Secure content routing using one-time pads

Abstract

A method comprising receiving, by a one-time pad (OTP) hub, from a first user of a computer network, a communication encrypted with an OTP associated with said first user, wherein said communication is intended for a second user; encrypting, by said hub, said communication with an OTP associated with said second user; decrypting, by said hub, said communication with an OTP associated with said first user; and delivering said communication to said second user.

What is claimed is: 
     
         1 . A method comprising:
 receiving, by a first one-time pad (OTP) hub in a series of hubs, from a first user of a computer network, a communication encrypted with an OTP associated with said first user, wherein said communication is intended for a second user;   encrypting, by said first hub, said communication with a first inter-hub OTP,   decrypting, by said first hub, said communication with an OTP associated with said first user;   forwarding said communication through one or more said hubs in said series, wherein each said forwarding between a pair of said hubs comprises:   (i) encrypting said communication with an inter-hub OTP associated with said pair, and   (ii) decrypting said communication with an inter-hub OTP associated with a previous said pair;   encrypting, by a last of said series of hubs, said communication with an OTP associated with said second user;   decrypting, by said last of said series of hubs, said communication with said inter-hub OTP associated with said previous pair; and   transmitting said communication to said second user.   
     
     
         2 . The method of  claim 1 , wherein said second user further decrypts said communication with an OTP associated with said second user. 
     
     
         3 . The method of  claim 1 , herein said network comprises a plurality of users, wherein each of said users stores only an OTP associated with said user, and wherein said hub stores OTPs associated with each of said plurality of users. 
     
     
         4 . The method of  claim 1 , wherein said second user further decrypts said communication with an OTP associated with said second user. 
     
     
         5 . The method of  claim 1 , wherein said network comprises N said users and a plurality of said hubs, wherein each of said users stores only an OTP associated with said user, and wherein each of said hubs stores OTPs associated with between 1 and all of said users. 
     
     
         6 . The method of  claim 5 , wherein at least some of said users and said hubs store a routing table identifying said associations between said OTPs stored by each of said hubs and their associated users, and wherein at least some of said receiving, said forwarding, and said transmitting are based, at least in part, on said routing table. 
     
     
         7 . The method of  claim 6 , wherein said routing table takes into account an OTP usage metric. 
     
     
         8 . The method of  claim 1 , wherein said second user further decrypts said communication with an OTP associated with said second user. 
     
     
         9 . The method of  claim 1 , wherein said network comprises N said users and a plurality of said hubs, and wherein each of said hubs stores OTPs associated with between 1 and all of said users. 
     
     
         10 . The method of  claim 1 , wherein each of said hubs stores OTPs associated with between 1 and all of said users. 
     
     
         11 . The method of  claim 9 , wherein at least some of said users and said hubs store a routing table identifying said associations between said OTPs stored by each of said hubs and their associated said users, and wherein at least some of said receiving and said transmitting are based, at least in part, on said routing table. 
     
     
         12 . The method of  claim 1 , wherein each of said users stores a second OTP associated with said user, and wherein said second OTP is configured for use in connection with a two-step user authentication of said user. 
     
     
         13 . The method of  claim 12 , wherein said second OTP is configured for use in connection with a two-step user authentication of said user. 
     
     
         14 . The method of  claim 1 , wherein at least some of said OTPs are disposed of by overwriting at least a portion thereof using false data. 
     
     
         15 . The method of  claim 1 , wherein at least some of said OTP hubs further comprise at least one of a random numbers generator (RNG), and an automated teller machine configured for dispensing OTPs to said users. 
     
     
         16 . The method of  claim 15 , wherein said OTPs are distributed to the automated teller machine using at least one of Quantum Key distribution (QKD) communication, and physically secured distribution means.