IP Library › Patent Application 14691331
Patent Application
App. No. 14/691,331

Method and System for Securing Documents on a Remote Shared Storage Resource

Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US None
App. No.
14/691,331
Abstract

This invention discloses a novel system and method for displaying electronic documents on remote devices and enabling collaborative editing in conjunction with a content management system where the documents that are shared are securely encrypted on the system in a manner that avoids a single point of failure in the security.

Claims (52)

1 . A method executed by a shared computer system that is comprised of data storage of securing content files associated with a folder data structure stored on the shared computer system, said folder data structure being associated with a public/private encryption key pair and a folder originator, said folder originator being associated with a public/private encryption key pair, the method comprising:

by a computer, receiving and storing the content file;

generating a public/private encryption key pair associated with the content file;

encrypting the content file with the public key associated with the content file;

retrieving from data storage the public key of the public/private encryption key pair associated with the folder data structure;

encrypting the private key associated with the content file using the public key of the folder data structure;

encrypting the private key associated with the folder data structure using the public key associated with the folder originator associated with the folder data structure; and

preventing access to an unencrypted version of the folder data structure private key and an unencrypted version of the private key associated with the content file.

2 . The method of claim 1 further comprising:

decrypting the folder data structure private key using the folder originator private key;

obtaining a destination user public key;

encrypting the folder data structure private key using the public key of the destination user.

3 . A computer system for securing a content file comprising:

at least one central processing unit connected using a data channel to at least one data storage device;

a folder data structure stored on the shared computer system, said folder data structure being associated with a public/private encryption key pair and a folder originator, said folder originator being associated with a public/private encryption key pair;

said system being adapted to execute a method comprising:

receiving and storing the content file;

generating a public/private encryption key pair associated with the content file;

encrypting the content file with the public key associated with the content file;

retrieving from data storage the public key of the public/private encryption key pair associated with the folder data structure;

encrypting the private key associated with the content file using the public key of the folder data structure;

encrypting the private key associated with the folder data structure using the public key associated with the folder originator associated with the folder data structure; and

preventing access to an unencrypted version of the folder data structure private key and an unencrypted version of the unencrypted private key associated with the content file.

4 . The shared computer system of claim 3 further adapted to execute the method of:

decrypting the folder data structure private key using the folder originator private key;

obtaining a destination user public key; and

encrypting the folder data structure private key using the public key of the destination user.

5 . A non-transitory computer storage medium containing program code that, when executed by a shared computer system, causes the shared computer system to execute a method of securing a content file associated with a folder data structure stored on the shared computer system, said folder data structure being associated with a public/private encryption key pair and a folder originator, said folder originator being associated with a public/private encryption key pair, the method comprising:

receiving and storing the content file;

generating a public/private encryption key pair associated with the content file;

encrypting the content file with the public key associated with the content file;

retrieving from data storage the public key of the public/private encryption key pair associated with the folder data structure;

encrypting the private key associated with the content file using the public key of the folder data structure; and

encrypting the private key associated with the folder data structure using the public key associated with the folder originator associated with the folder data structure; and preventing access to an unencrypted version of the folder data structure private key and an unencrypted version of the unencrypted private key associated with the content file.

6 . The non-transitory storage medium of claim 5 further adapted so that the executed method is further comprised of:

decrypting the folder data structure private key using the folder originator private key;

obtaining a destination user public key; and

encrypting the folder data structure private key using the public key of the destination user.

7 . The method of claim 1 where the preventing access step is comprised of:

removing from data storage the unencrypted version of the private key associated with the content file; and

removing from data storage the unencrypted version of the folder data structure private key.

8 . The system of claim 3 further adapted to execute the preventing access by removing from data storage the unencrypted version of the private key associated with the content file; and removing from computer data storage the unencrypted version of the folder data structure private key.

9 . The non-transitory storage medium of claim 5 further adapted so that the preventing access is executed by removing from computer data storage the unencrypted private key associated with the content file and removing from computer data storage the unencrypted folder data structure private key.

10 . The method of claim 1 where the preventing access step is comprised of:

encrypting the unencrypted version of the private key associated with the content file; and

encrypting the unencrypted version of the folder data structure private key.

11 . The system of claim 3 further adapted to execute the preventing access by:

encrypting the unencrypted version of the private key associated with the content file; and

encrypting the unencrypted version of the folder data structure private key.

12 . The non-transitory storage medium of claim 5 further adapted so that the preventing access is executed by:

encrypting the unencrypted version of the private key associated with the content file; and

encrypting the unencrypted version of the folder data structure private key.