IP Library Granted Patent US 7,260,215
Granted Patent B2
US 7,260,215 · App. 10/233,408 · Granted Aug 21, 2007

Method for encryption in an un-trusted environment

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,260,215
App. No.
10/233,408
Granted
Aug 21, 2007
Kind
B2
Abstract

A method and apparatus for secure distribution of information over a network, comprising: encrypting payload information using a first encryption key in a first data processor; sending the payload information encrypted using the first encryption key to a second data processor; encrypting the payload information encrypted using the first encryption key using a second encryption key in the second data processor; and sending the payload information encrypted using the first encryption key and the second encryption key to a third data processor, and generating a decryption key based on the first encryption key and on the second encryption key, such that the decryption key is operable to compute the payload information by decrypting the payload information encrypted using the first encryption key and the second encryption key.

Claims (43)

1. A method for secure real-time distribution of digital media content over a network comprising:

encrypting payload digital media content using a first encryption key in a first data processor;

sending said payload digital media content encrypted using said first encryption key to a second data processor;

encrypting said payload digital media content encrypted using said first encryption key using a second encryption key in said second data processor; and

sending said payload digital media content encrypted using said first encryption key and said second encryption key to a third data processor;

providing said first and said second keys to generate a decryption key having the following properties:

a) the decryption key is usable to obtain said payload digital media content from said digital media content encrypted using said first and said second encryption keys, and

b) the decryption key is unusable to retrieve either of said first or said second encryption keys, said decryption key being for sending for decryption at said third data processor;

wherein said payload digital media content consists of one of:

i. video content

ii. audio content, and

iii. executable code

wherein said encryption comprises: encoding said payload digital media content into an array having indices; and performing a permutation on at least one of the indices of said array and wherein said encryption keys comprise information about said permutation of said indices;

wherein said performing a permutation on at least one of the indices comprises performing said permutation separately on each one of the dimensions of said indices.

2. The method of claim 1 , comprising generating said decryption key, for obtaining said payload digital media content at said third processing device.

3. The method of claim 1 , further comprising generation of secret digital media content and wherein said payload digital media content is generated from said secret digital media content.

4. The method of claim 3 , wherein said payload digital media content is generated from said secret digital media content using encryption.

5. The method of claim 3 , wherein said payload digital media content is generated from said secret digital media content using a cryptographic encoding method.

6. The method of claim 3 , wherein said payload digital media content is a key used for encoding said secret digital media content.

7. The method of claim 3 , wherein said secret digital media content comprises at least one of the following: software; binary software data; software source code; video; audio; document; text; and multimedia.

8. The method of claim 1 , wherein said encoding comprises at least one of the following: encryption; signing; padding; and error correction code.

9. The method of claim 1 , wherein said array is one of the following: a two dimensional matrix; a multi dimensional array of more than two dimensions; and a multi dimensional array where each dimension is of size two.

10. The method of claim 1 , wherein said array is one of the following:

a binary array; a hexadecimal array; a block array; a sparse array; an octal array; and a decimal array.

11. The method of claim 1 , wherein said method further comprise at least one additional step of: encrypting said encrypted payload digital media content with an additional encryption key; and sending said encrypted payload digital media content encrypted with said additional encryption key to an additional data processor.

12. The method of claim 11 , comprising generating a decryption key based on said first encryption key and on said second encryption key, and on said additional encryption keys, wherein said decryption key is operable to compute said payload digital media content by decrypting said payload digital media content encrypted with said additional encryption keys.

13. A method for encryption and distributing payload digital media content, executed using at least one data processor, the method comprising:

encoding, at a first network location, said payload digital media content into an array;

performing a first permutation, at said first network location, on at least one of the indices of said array, said first permutation being performed using at a first encryption key comprising information about said first permutation of said indices;

sending said payload digital media content encrypted using said first encryption key to a second network location;

performing a second permutation, at said second network location, on at least one of the indices of said array, said second permutation being performed using a second encryption keys comprising information about said second permutation of said indices;

generating a decryption key for restoring said payload digital media content from said first and second permutations; and

 sending said decryption key to a third network location;

wherein said payload digital media content consists of one of:

i. video content

ii. audio content, and

iii. executable code;

 wherein said performing a permutation on at least one of the indices comprises performing said permutation separately on each one of the dimensions of said indices.

14. The method of claim 13 , wherein said encoding comprises at least one of the following: encryption; signing; padding; and error correction encoding.

15. The method of claim 13 , wherein said array is one of the following: a two dimensional matrix; a multi dimensional array of more than two dimensions; and a multi dimensional array where each dimension is of size two.

16. The method of claim 13 , wherein said array is one of the following: a binary array; a hexadecimal array; a block array; a sparse array; an octal array; and a decimalarray.

17. The method of claim 13 , wherein said permutation is selected such as to require a unique decryption key for each payload.

18. The method of claim 13 , wherein said encoding comprises a stage of pre-encoding data manipulation to produce a randomized plaintext.

Assignments (26)
RELEASE OF SECURITY INTEREST Recorded Apr 2, 2025
From: UBS AG, STAMFORD BRANCH
To: FORCEPOINT, LLC; BITGLASS, LLC
Reel/Frame 070706/0263 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 18, 2021
From: FORCEPOINT FEDERAL HOLDINGS LLC
To: FORCEPOINT LLC
Reel/Frame 056272/0475 →
CHANGE OF NAME Recorded May 10, 2021
From: FORCEPOINT LLC
To: FORCEPOINT FEDERAL HOLDINGS LLC
Reel/Frame 056183/0265 →
PATENT SECURITY AGREEMENT Recorded Jan 20, 2021
From: REDOWL ANALYTICS, INC.; FORCEPOINT LLC
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 055052/0302 →
RELEASE OF SECURITY INTEREST IN PATENTS Recorded Jan 8, 2021
From: RAYTHEON COMPANY
To: FORCEPOINT LLC
Reel/Frame 055452/0207 →
RELEASE OF SECURITY INTEREST IN PATENTS Recorded Jan 8, 2021
From: RAYTHEON COMPANY
To: WEBSENSE, INC.; PORTAUTHORITY TECHNOLOGIES, LLC (FKA PORTAUTHORITY TECHNOLOGIES, INC.); RAYTHEON OAKLEY SYSTEMS, LLC; FORCEPOINT FEDERAL LLC (FKA RAYTHEON CYBER PRODUCTS, LLC, FKA RAYTHEON CYBER PRODUCTS, INC.)
Reel/Frame 055492/0146 →
PATENT SECURITY AGREEMENT SUPPLEMENT Recorded Feb 27, 2020
From: FORCEPOINT LLC
To: RAYTHEON COMPANY
Reel/Frame 052045/0482 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 1, 2017
From: PORTAUTHORITY TECHNOLOGIES, LLC
To: FORCEPOINT LLC
Reel/Frame 043156/0759 →
CHANGE OF NAME Recorded Aug 8, 2016
From: PORTAUTHORITY TECHNOLOGIES, INC.
To: PORTAUTHORITY TECHNOLOGIES, LLC
Reel/Frame 039609/0877 →
PATENT SECURITY AGREEMENT Recorded Jun 9, 2015
From: WEBSENSE, INC.; RAYTHEON OAKLEY SYSTEMS, LLC; RAYTHEON CYBER PRODUCTS, LLC (FORMERLY KNOWN AS RAYTHEON CYBER PRODUCTS, INC.); PORT AUTHORITY TECHNOLOGIES, INC.
To: RAYTHEON COMPANY
Reel/Frame 035859/0282 →
RELEASE OF SECOND LIEN SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME: 30704/0374 Recorded May 29, 2015
From: ROYAL BANK OF CANADA, AS COLLATERAL AGENT
To: WEBSENSE, INC.; PORT AUTHORITY TECHNOLOGIES, INC.
Reel/Frame 035801/0689 →
RELEASE OF FIRST LIEN SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME: 030694/0615 Recorded May 29, 2015
From: ROYAL BANK OF CANADA, AS COLLATERAL AGENT
To: WEBSENSE, INC.; PORT AUTHORITY TECHNOLOGIES, INC.
Reel/Frame 035858/0680 →
ASSIGNMENT OF SECURITY INTEREST Recorded Apr 10, 2014
From: JPMORGAN CHASE BANK, N.A., AS EXISTING COLLATERAL AGENT
To: ROYAL BANK OF CANADA, AS SUCCESSOR COLLATERAL AGENT
Reel/Frame 032716/0916 →
SECOND LIEN SECURITY AGREEMENT Recorded Jun 27, 2013
From: WEBSENSE, INC.; PORTAUTHORITY TECHNOLOGIES, INC.
To: ROYAL BANK OF CANADA
Reel/Frame 030704/0374 →
FIRST LIEN SECURITY AGREEMENT Recorded Jun 26, 2013
From: WEBSENSE, INC.; PORTAUTHORITY TECHNOLOGIES, INC.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 030694/0615 →
RELEASE OF SECURITY INTEREST Recorded Jun 26, 2013
From: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
To: PORTAUTHORITY TECHNOLOGIES, INC.
Reel/Frame 030692/0510 →
CORRECTIVE ASSIGNMENT TO CORRECT THE INCOMPLETE NAME CHANGE OF PORTAUTHORITY TECHNOLOGIES INC. PREVIOUSLY RECORDED ON REEL 019569 FRAME 0647. ASSIGNOR(S) HEREBY CONFIRMS THE NAME CHANGE INDICATING THE COMPLETE NAME OF PORTAUTHORITY TECHNOLOGIES, INC.. Recorded Jun 23, 2013
From: VIDIUS INC.
To: PORTAUTHORITY TECHNOLOGIES, INC.
Reel/Frame 030667/0914 →
NOTICE OF GRANT OF SECURITY INTEREST IN PATENTS Recorded Dec 16, 2010
From: PORTAUTHORITY TECHNOLOGIES, INC.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 025503/0919 →
TERMINATION OF SECURITY INTEREST IN PATENTS Recorded Nov 19, 2010
From: BANK OF AMERICA, N.A., AS SENIOR COLLATERAL AGENT
To: PORTAUTHORITY TECHNOLOGIES, INC.; WEBSENSE, INC.
Reel/Frame 025408/0520 →
ASSIGNMENT OF SECURITY INTEREST Recorded Jul 3, 2008
From: MORGAN STANLEY & CO. INCORPORATED, IN ITS CAPACITY AS RESIGNING SENIOR COLLATERAL AGENT
To: BANK OF AMERICA, N.A., IN ITS CAPACITY AS SUCCESSOR SENIOR COLLATERAL AGENT
Reel/Frame 021185/0802 →
SENIOR PATENT SECURITY AGREEMENT Recorded Oct 19, 2007
From: WEBSENSE, INC.; PORTAUTHORITY TECHNOLOGIES, INC.
To: MORGAN STANLEY & CO. INCORPORATED, AS SENIOR COLLATERAL AGENT
Reel/Frame 019984/0416 →
RELEASE OF SECURITY INTEREST Recorded Jul 18, 2007
From: LEXINGTON VENTURES, LLC
To: PORTAUTHORITY TECHNOLOGIES INC.
Reel/Frame 019572/0347 →
CHANGE OF NAME Recorded Jul 18, 2007
From: VIDIUS INC.
To: PORTAUTHORITY TECHNOLOGIES INC.
Reel/Frame 019569/0647 →
CHANGE OF NAME Recorded Jul 2, 2007
From: VIDIUS INC.
To: PORTAUTHORITY TECHNOLOGIES INC.
Reel/Frame 019502/0863 →
GRANT OF PATENT SECURITY INTEREST Recorded Nov 4, 2004
From: VIDIUS, INC.
To: LEXINGTON VENTURES, LLC; STI VENTURES INVESTMENTS B.V.
Reel/Frame 015332/0112 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 4, 2002
From: TROYANSKY, LIDROR; CARNY, OFIR
To: VIDIUS INC.
Reel/Frame 013263/0680 →