User-mediator monitoring and controlling access to electronic content
Methods, systems and apparatuses for a user-mediator controlling access to an electronic content, are disclosed. One method includes receiving, by a user-mediator server of the user-mediator, a second share SK G2 from an owner server, wherein a first share SK G1 is provided to a member server of a member of a group by the owner. Further, the user-mediator receives a request from the member for mediation, including the mediator receiving a dispatch of the header of the encrypted electronic content. Further, the mediator receives a request for mediation, including the mediator receiving a dispatch of the header of the encrypted electronic content from the member. Further, the user-mediator determines whether the member is eligible to decrypt the electronic content, if eligible, the user-mediator responds to the request for mediation with a member accessible header, wherein the member accessible header includes the header after application of SK G2 .
1. A method of a user-mediator mediating (monitoring and controlling) access to an electronic content, comprising:
receiving, by a mediator computing device of the user-mediator, a second share SK G2 from an owner server of an owner wherein a first share SK G1 is provided to a member server of a member of a group by the owner;
wherein the group is created by the owner server generating a group public key PK G and a group secret key SK G ;
wherein the member is added by owner server to the group by generating the first share SK G1 from the group secret key SK G and a public key of the member, and the second share SK G2 from the group secret key SK G and a public key of the user-mediator;
wherein a supplicant publishes an electronic content for the group, comprising the supplicant encrypting the electronic content to the group public key PK G , wherein the electronic content includes a header and a payload; and
wherein the member obtains the encrypted electronic content;
further comprising;
the user-mediator receiving a request, by the member, for mediation, comprising the user-mediator receiving a dispatch of the header of the encrypted electronic content from the member;
determining, by the user-mediator, whether the member is eligible to decrypt the electronic content, if eligible, the user-mediator responding to the request for mediation with a member accessible header, whereat the member accessible header Includes the header after application of SK G2 ;
wherein the member obtains a secret based on SK G1 and the member accessible header; and
wherein the member decrypts the payload of the electronic content using the secret.
2. The method of claim 1 , wherein the electronic content includes a credit card number and an amount of a charge.
3. The method of claim 1 , wherein the supplicant includes a point of sale party.
4. The method of claim 3 , wherein the point of sale party receives payment from the user-mediator or another party.
5. The method of claim 1 , wherein the user-mediator includes a credit card holder.
6. The method of claim 5 , wherein the owner server of the owner is operated by a credit card issuing bank.
7. The method of claim 5 , wherein the member server of the member of the group is operated by a credit card processing network.
8. The method of claim 5 , wherein the mediator computing device of the user-mediator includes a registered computing device of the user-mediator.
9. The method of claim 8 , wherein the user-mediator receiving the request from the member for mediation comprises the registered computing device of the user-mediator receiving an electronic message that includes the request.
10. The method of claim 9 , wherein the registered computing device of the user-mediator includes a cell phone of the user-mediator.
11. The method of claim 10 , wherein the user-mediator receiving the request from the member for mediation comprises a cell phone of the user-mediator receiving a small messaging system (SMS) message that includes the request.
12. The method of claim 11 , wherein the user-mediator responding to the request for mediation with the member accessible header comprises the user-mediator responding to the SMS message with the member accessible header that includes the header after application of SK G2 .
13. The method of claim 1 , further comprising the user-mediator approving or disapproving the request.
14. The method of claim 3 , wherein if the user-mediator does not respond to the request within a particular amount of time, the user-mediator automatically approves the request.
15. The method of claim 13 , wherein if the user-mediator does not respond to the request within a particular amount of time, the user-mediator automatically disapproves the request.
16. A user-mediator server operative to monitor and control access to an electronic content, comprising a user-mediator of the user-mediator server operative to:
receive a second share SK G2 from an owner server of an owner, wherein a first share SK G1 provided to a member server of a member of a grow by the owner;
wherein the group is created by the owner server generating a group public key PK G and a group secret key SK G ;
wherein the member is added by owner server to the group by generating the first sham SK G1 from the group secret key SK G and a public key of the member, and the second share SK G2 from the group secret key SK G and a public key of the user-mediator;
wherein a supplicant publishes an electronic content for the group, comprising the supplicant encrypting the electronic content to the group public key PK G , wherein the electronic content includes a header and a payload; and
wherein the member obtains the encrypted electronic content;
the user-mediator of the mediator server further operative to:
receive a request, by the member, for mediation, comprising the user-mediator receiving a dispatch of the header of the encrypted electronic content from the member;
determine whether the member is eligible to decrypt the electronic content, if eligible, the user-mediator responding to the request for mediation with a member accessible header, wherein the member accessible header includes the header after application of SK G2 ;
wherein the member obtains a secret based on SK G1 and the member accessible header; and
wherein the member decrypts the payload of the electronic content using the secret.
17. The user-mediator server of claim 16 , wherein the electronic content includes a credit card number and an amount of a charge.
18. The user-mediator server of claim 16 , wherein the supplicant includes a point of sale party, wherein the point of sale party receives payment from the user-mediator or another party, wherein the user-mediator includes a credit card holder, wherein the owner server of the owner is operated by a credit card issuing bank, and wherein the member server Of the member of the group is operated by a credit card processing network.
19. The user-mediator server of claim 16 , wherein the mediator computing device of the user-mediator includes a registered computing device of the user-mediator.
20. The user-mediator server of claim 19 , wherein the user-mediator receiving the request from the member for mediation comprises the registered computing device of the user-mediator receiving an electronic message that includes the request.