IP Library Granted Patent US 10,511,605
Granted Patent B2
US 10,511,605 · App. 15/170,048 · Granted Dec 17, 2019

Method for securing electronic data by restricting access and transmission of the data

Inventors: Fred Ramberg (North Hampton, NH); Trevor Ramberg (North Hampton, NH)
Assignee: Bottomline Technologies (de), Inc.
H04L63/101G06F21/606G06F21/6209H04L63/0428H04L63/107G06F2221/2143
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,511,605
App. No.
15/170,048
Granted
Dec 17, 2019
Kind
B2
Abstract

A method for securing data by embedding the data in a data structure and utilizing a sensor to detect transfer of the data structure. The data is embedded such that the data is only accessible by first executing an executable program. If the executable program determines that the device attempting to access the data (the accessing device) does not have permission to access the data, then the executable program destroys the data. If the data structure is transferred to another device, a sensor positioned to detect the data structure when transferred will identify the data. If the sensor determines that the data structure is not permitted to be transferred, then the sensor destroys the data.

Claims (53)

1. A system for securing electronic data, the system comprising:

a non-transitory computer readable medium of an accessing device storing an executable program configured to be executable by a processor of the accessing device; and

a non-transitory computer readable medium of a host device storing a data structure, the data structure comprising:

an identifier;

embedded data accessible only by first executing the executable program, wherein:

the executable program when executed determines if the accessing device attempting to access the embedded data has permission to access the embedded data;

if the accessing device is determined not to have permission to access the embedded data, the executable program destroys the embedded data; and

if the accessing device is determined to have permission to access the embedded data, the executable program allows the host device to access the embedded data; and

a sensor device positioned between a receiving device and the host device to detect the data structure when transmitted from the host device to the receiving device outside of the predefined area, wherein, during the transmission of data, the sensor device is configured to:

receive the data structure during transmission from the host device to the receiving device;

detect the identifier of the received data structure;

access a permission table associating each of a plurality of identifiers with a permission regarding transmission and determine a permission associated with the identifier;

when the permission associated with the identifier indicates that the data structure is permitted to be transmitted to the receiving device, transmit the received data structure to the receiving device; and

when the permission associated with the identifier indicates that the data structure is not permitted to be transmitted to the receiving device, destroy the embedded data by overwriting the embedded data.

2. The system of claim 1 , wherein the executable program is embedded in the data structure.

3. The system of claim 2 , wherein:

the sensor device destroys the embedded data by setting a flag of the data structure to an armed state; and

the executable program destroys the embedded data if the flag is set to an armed state.

4. The system of claim 3 , wherein:

the sensor device allows the data structure to be transmitted to the receiving device by setting the flag of the data structure to a disarmed state; and

the executable program allows the embedded data to be accessed if the flag is set to the disarmed state.

5. The system of claim 4 , wherein the flag is set by default to the armed state.

6. The system of claim 4 , wherein the flag is set by default to the disarmed state.

7. The system of claim 1 , wherein:

the executable program determines if the accessing device has permission to access the embedded data by:

determining at least one of an identity or a location of the accessing device attempting to access the embedded data; and

determining a permission associated with the identifier;

if the permission associated with the identifier indicates that the data structure is permitted to be accessed by the accessing device, then the executable program allows the embedded data to be accessed; and

if the permission associated with the identifier indicates that the data structure is not permitted to be accessed by the accessing device, then the executable program destroys the embedded data.

8. The system of claim 7 , wherein the executable program determines the permission associated with the identifier by:

connecting to a predetermined server; and

accessing a permission table stored on the predetermined server, wherein the permission table associates each of a plurality of identifiers with a permission regarding access.

9. The system of claim 1 , wherein, when the executable program is executed by the accessing device and the executable program determines that the accessing device does not have permission to access the embedded data, then the executable program determines an identity of the accessing device and transfers the identity of the accessing device to a predetermined server.

10. The system of claim 1 , wherein the embedded data is destroyed by setting each bit of the embedded data to zero or one.

11. The system of claim 1 , wherein the embedded data is destroyed by overwriting each bit of the embedded data with random data.

12. The system of claim 1 , wherein the embedded data is destroyed by first setting each bit of the embedded data to zero or one and then overwriting each bit of the embedded data with random data.

13. The system of claim 1 , further comprising a network for transferring the data structure between the host device and the receiving device.

14. The system of claim 13 , wherein the sensor device comprises a packet analyzer.

15. The system of claim 13 , wherein the network comprises at least one of a TCP/IP network or a system bus.

16. The system of claim 1 , wherein the predefined area is a local area network.

17. A method for securing electronic data, the method comprising:

embedding data to be secured in a data structure such that the embedded data is not accessible without first executing an executable program, wherein the data structure is stored in a non-transitory computer readable medium of a host device;

determining if an accessing device has permission to access the embedded data;

if the accessing device is determined not to have permission to access the embedded data, destroying the embedded data;

if the accessing device is determined to have permission to access the embedded data, allowing the accessing device to access the embedded data;

transmitting the data structure to a receiving device outside of a predefined area;

during transmission of the data structure:

receiving the data structure using a sensor device positioned between the receiving device and the host device;

detecting using the sensor device an identifier of the data structure;

accessing a permission table associating each of a plurality of identifiers

with a permission regarding transmitting and determining a permission associated with the identifier;

when the permission associated with the identifier indicates that the data structure is permitted to be transmitted to the receiving device, transmitting the received data structure from the sensor device to the receiving device; and

when the permission associated with the identifier indicates that the data structure is not permitted to be transmitted to the receiving device, destroying the embedded data by overwriting the embedded data.

Assignments (5)
RELEASE OF SECURITY INTEREST IN REEL/FRAME: 040882/0908 Recorded May 13, 2022
From: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
To: BOTTOMLINE TECHNOLOGIES (DE), INC.
Reel/Frame 060063/0701 →
SECURITY INTEREST Recorded May 13, 2022
From: BOTTOMLINE TECHNOLOGIES, INC.
To: ARES CAPITAL CORPORATION
Reel/Frame 060064/0275 →
CHANGE OF NAME Recorded Mar 19, 2021
From: BOTTOMLINE TECHNOLOGIES (DE), INC.
To: BOTTOMLINE TECHNLOGIES, INC.
Reel/Frame 055661/0461 →
NOTICE OF GRANT OF SECURITY INTEREST IN PATENTS Recorded Dec 12, 2016
From: BOTTOMLINE TECHNOLOGIES (DE), INC.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 040882/0908 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 17, 2016
From: RAMBERG, FRED; RAMBERG, TREVOR
To: BOTTOMLINE TECHNOLOGIES (DE) INC.
Reel/Frame 039469/0573 →
Continuity (2)
Provisional Application 62171716 · Jun 5, 2015
Related Publication 20160359858A1 · Dec 8, 2016