Method of providing end to end encryption with auditability

Abstract

A method of performing secure end to end communication between users, the method includes registering a plurality of devices corresponding to a first user having a first user profile stored within a repository, each device having a unique asymmetric public-private key pair, publishing the public key of each device of the first user on the first user profile, storing the private key of each device on corresponding device of the first user, using the published public keys, a second user encrypting and sending a secure message to the first user, and receiving and decrypting the encrypted secure message from the second user on all registered devices corresponding to the first user stored within the repository using the stored private key on each device.

What is claimed is: 
     
         1 . A method of performing secure end to end communication between users, the method comprising:
 registering a plurality of devices corresponding to a first user having a first user profile stored within a repository, each device having a unique asymmetric public-private key pair;   publishing the public key of each device of the first user on the first user profile;   storing the private key of each device on corresponding device of the first user;   using the published public keys, a second user encrypting and sending a secure message to the first user; and   receiving and decrypting the encrypted secure message from the second user on all registered devices corresponding to the first user stored within the repository using the stored private key on each device.   
     
     
         2 . The method of  claim 1 , wherein the second user has a second user profile stored within the repository. 
     
     
         3 . The method of  claim 2 , wherein the second user profile includes public keys of each device corresponding to the second user. 
     
     
         4 . The method of  claim 2 , wherein the private key of each device is stored on the corresponding device of the second user. 
     
     
         5 . The method of  claim 2 , wherein the second users encrypts and sends a secure message to the first user from one device of the second user and to the remaining devices on the second user profile using the published public keys on the first user profile and the published public keys on the second user profile, the method further comprising:
 receiving and decrypting the encrypted secure message from the second user on all registered devices corresponding to the first user using the unique asymmetric private key stored on each device of the first user;   and receiving and decrypting the encrypted secure message from the second user on all remaining devices corresponding to the second user using the unique asymmetric private key stored on each device of the second user.   
     
     
         6 . A method of  claim 1 , wherein the receiving and decrypting the encrypted secure message from the second user occurs on each device with a public key published to the first user profile when the second user encrypted and sent the secure message. 
     
     
         7 . A method of  claim 1 , wherein a second user encrypting and sending a secure message to the first user with a symmetric key, comprising:
 encrypting the symmetric key with each of the published public keys on the first user profile;   sending the encrypted message and the encrypted symmetric keys to the first user;   receiving and decrypting the encrypted symmetric key stored private key of each device corresponding to the first user; and   receiving and decrypting the encrypted secure message using the decrypted symmetric key decrypted on all registered devices corresponding to the first user stored within the repository.   
     
     
         8 . A method of  claim 7 , wherein an auditor device is registered corresponding to a second auditor having a second auditor profile stored within the repository, the auditor device having a unique auditor asymmetric public-private key pair, the method further comprising:
 publishing the public key of the auditor device corresponding to the second auditor on the second auditor profile;   linking the second auditor profile to the second user profile,   wherein using the published public keys on the second auditor profile linked to the second user profile, the published public keys on the first user profile and the published public key on the first auditor profile linked to the first user profile and the published public keys on the second user profile, a second user encrypts and sends a secure message to the first user, the first auditor whose profile is linked to the first user profile, the second auditor whose profile is linked to the second user profile, and the remaining devices of the second user;   receiving and decrypting the encrypted secure message from the second user on all registered devices corresponding to the first user stored within the repository;   receiving and decrypting the encrypted secure message from the second user on the auditor device corresponding to the first auditor linked to the first user profile;   receiving and decrypting the encrypted secure message from the second user on the auditor device corresponding to the second auditor linked to the second user profile; and   receiving and decrypting the encrypted secure message from the second user on all remaining registered devices corresponding to the second user stored within the repository.   
     
     
         9 . A method of  claim 8 , wherein a second user encrypts a message to the first user with a symmetric key, the method further comprising:
 encrypting the symmetric key with each of the published public keys on the first user profile;   encrypting the symmetric key with the published public key on the auditor profile linked to the first user profile;   encrypting the symmetric key with each of the published public keys on the second user profile;   sending the encrypted message and the encrypted symmetric keys to the first user, the auditor, and the remaining devices on the second user profile;   receiving and decrypting the encrypted symmetric key using the stored private key on each device of the first users;   receiving and decrypting the encrypted secure message using the decrypted symmetric key decrypted on all registered devices corresponding to the first user stored within the repository;   receiving and decrypting the encrypted symmetric key using the stored auditor private key on the auditor device;   receiving and decrypting the encrypted secure message using the decrypted symmetric key decrypted on the auditor device;   receiving and decrypting the encrypted symmetric key using the stored private key on each of the remaining devices of the second user; and   receiving and decrypting the encrypted secure message using the decrypted symmetric key decrypted on all of the remaining registered devices corresponding to the second user stored within the repository.