Secure information storage and delivery system and method
View Patent ↗A system for secure information storage and delivery includes a vault repository that includes a secure vault associated with a user, wherein the secure vault is configured to receive at least one data entry. A mobile vault server coupled to the vault repository creates a mobile vault on a mobile device based on the secure vault and is capable of authenticating the mobile device based on user authentication information. The mobile vault server includes a mobile device handler that communicates with the mobile device. A synchronization utility determines whether the at least one data entry on the secure vault is transferable to or storable on the mobile vault. and transfers the data entry from the secure vault to a corresponding data entry on the mobile vault if the at least one data entry on the secure vault is determined to be transferable to or storable on the mobile vault.
1. A method for authenticating user access to a first secure vault in a vault repository comprising:
receiving, at the vault repository, user identification information from a user for verifying the identity of the user;
determining whether the user identification information is valid;
responsive to determining that the user identification information is valid, transmitting a soft token to a computing device associated with the user, the soft token configured to generate a first single use password;
receiving, at the vault repository, the first single use password generated by the soft token;
generating a second single use password at the vault repository;
authenticating the user to access the first secure vault based on the first and the second single use passwords;
creating a second secure vault on the user computing device for securely storing at least one data entry associated with the user; and
synchronizing the second secure vault with the first secure vault by transferring at least one data entry from one of the first secure vault or the second secure vault to a corresponding data entry in the other of the first secure vault or the second secure vault.
2. The method of claim 1 , wherein the user identification information comprises a username and a password associated with the user and wherein the identity of the user is verified based on the username and password.
3. The method of claim 1 , wherein the soft token generates the single use password using a mathematical algorithm based on a previously generated single use password.
4. The method of claim 1 , wherein the soft token generates the single use password based on time-synchronization between a single use password server and the soft token.
5. The method of claim 1 , wherein the soft token generates the single use password using a mathematical algorithm based on a challenge and a counter.
6. A secure information storage and delivery method comprising:
creating a first secure vault associated with a user in a vault repository, the first secure vault being adapted to securely store data;
receiving, at the vault repository, at least one data entry associated with the user;
storing the at least one data entry in the first secure vault;
receiving, at the vault repository, user identification information from a user;
determining whether the user identification information is valid;
responsive to determining that the user identification information is valid, transmitting a soft token to a computing device associated with the user, the soft token configured to generate a first single use password;
receiving, at the vault repository, the first single use password generated by the soft token;
generating a second single use password at the vault repository;
authenticating the user to access the first secure vault based on the first and second single use password;
creating a second secure vault on the user computing device for securely storing at least one data entry associated with the user; and
synchronizing the second secure vault with the first secure vault by transferring at least one data entry from one of the first secure vault or the second secure vault to a corresponding data entry in the other of the first secure vault or the second secure vault.
7. The secure information storage and delivery method of claim 6 , further comprising:
receiving, at the vault repository, a request for data, including a destination address;
identifying the data in the first secure vault that corresponds to the request; and
forwarding the identified data to the destination address.
8. The secure information storage and delivery method of claim 7 ,
wherein the request for data further includes a delivery mode, and
wherein the identified data in the first secure vault is formatted, according to the delivery mode, for delivery to the destination address.
9. The secure information storage and delivery method of claim 8 , wherein the identified data is formatted for delivery via facsimile.
10. The secure information storage and delivery method of claim 8 , wherein the identified data is formatted for delivery via email.
11. The secure information storage and delivery method of claim 8 , wherein the identified data is formatted for delivery via a SMS message.
12. A non-transitory computer readable memory for authenticating user access to a first secure vault in a vault repository, the computer readable memory storing program instructions, which when executed by a computer cause the computer to perform the steps of:
receiving, at the vault repository, user identification information from a user for verifying the identity of the user;
determining whether the user identification information is valid;
responsive to determining that the user identification information is valid, transmitting a soft token to a computing device associated with the user, the soft token configured to generate a first single use password;
receiving, at the vault repository, the first single use password generated by the soft token;
generating a second single use password at the vault repository;
authenticating the user to access the first secure vault based on the first and the second single use passwords;
creating a second secure vault on the user computing device for securely storing at least one data entry associated with the user; and
synchronizing the second secure vault with the first secure vault by transferring at least one data entry from one of the first secure vault or the second secure vault to a corresponding data entry in the other of the first secure vault or the second secure vault.
13. A secure information storage system comprising:
a vault repository system including a storage in which a database is stored, the vault repository system being configured to provide a first secure vault associated with a user, the secure vault being adapted to receive and securely store at least one data entry;
a vault server system coupled to the vault repository system, the vault server system comprising an internal memory storing application code that, when executed, manages and processes requests,
wherein the vault server system is configured to:
communicate with a computing device associated with the user through a network;
determine whether user identification information received from the user is valid;
responsive to determining that the user identification information is valid, transmit a soft token to the user computing device, the soft token being configured to generate a first single use password at the user computing device; and
create a second secure vault on the user computing device for receiving and storing at least one data entry associated with the user, the second secure vault on the user computing device being capable of synchronization with the first secure vault in the vault repository system;
wherein the vault repository system is configured to receive the first single use password generated by the soft token; and
wherein the vault repository system is further configured to generate a second single use password and authenticate the user to access the first secure vault based on the first and second single use passwords.
14. The secure information storage system of claim 13 , wherein the vault server system is further configured to synchronize the second secure vault on the user computing device with the first secure vault in the vault repository system by transferring the at least one data entry from one of the first secure vault or the second secure vault to a corresponding data entry in the other of the first secure vault or the second secure vault.
15. The secure information storage system of claim 14 , wherein either the at least one data entry in the first secure vault or the at least one data entry in the second secure vault is transferred to a corresponding data entry in the other of the first secure vault or the second secure vault depending on whether the data entry in the first secure vault or the data entry in the second secure vault was last updated.
16. The secure information storage system of claim 13 , wherein the soft token is configured to generate the single use password using a mathematical algorithm based on a previously generated single use password.
17. The secure information storage and delivery system of claim 13 , wherein the soft token is configured to generate the single use password based on time-synchronization between a single use password server and the soft token.
18. The secure information storage and delivery system of claim 13 , wherein the soft token is configured to generate the single use password using a mathematical algorithm based on a challenge and a counter.
19. The secure information storage of claim 13 , wherein the vault server system is configured to:
receive a request for data, including a destination address, from the user computing device;
identify the data in the first secure vault that corresponds to the request; and
forward the identified data to the destination address.