IP Library Granted Patent US 11,184,156
Granted Patent B2
US 11,184,156 · App. 15/342,951 · Granted Nov 23, 2021

Impact data manager for dynamic data delivery

Inventor: Douglas A. Olson (Rosemount, MN)
Assignee: AON GLOBAL OPERATIONS SE, SINGAPORE BRANCH
H04L9/0825G06F16/29H04L63/0442H04L63/08
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,184,156
App. No.
15/342,951
Granted
Nov 23, 2021
Kind
B2
Abstract

In a preferred embodiment, a system for securely delivering source data to a destination system over a network includes a data manager system operatively connected to the network, where the data manager system includes circuitry configured to receive a public key from the destination system, generate a random session key, encrypt the session key with the public key using a public key cryptosystem, divide the source data into a number of chunks, compress each of the chunks, merge all of the compressed chunks into an assembled file, encrypt the assembled file with the session key using a symmetric-key cryptosystem, divide the encrypted assembled file into a number of parts, send each of the parts to the destination system over the network, and send the encrypted session key to the destination system over the network.

Claims (62)

1. A non-transitory computer readable medium having instructions stored thereon, wherein the instructions, when executed by processing circuitry, cause the processing circuitry to:

receive a remote security token from a destination system via a network;

generate a local security token;

encrypt the local security token with the remote security token;

divide source data into a plurality of chunks;

compress each chunk of the plurality of chunks;

append each chunk of the plurality of chunks of the source data with an offset:

after compressing, merge the plurality of chunks into an assembled file comprising a concatenated sequence of records, wherein

each record includes a respective chunk of the plurality of chunks preceded by the offset, wherein the offset indicates a location of a start of a next record of the sequence of records:

encrypt the assembled file with the local security token;

after encrypting the assembled file, divide the assembled file into two or more parts,

wherein

a number of the two or more parts is adjustable based on attributes of the network connecting a transmitting system and the destination system;

transmit each of the two or more parts to the destination system via the network; and

transmit the encrypted local security token to the destination system via the network;

wherein, to access the source data, the destination system merges the two or more parts to obtain the encrypted, assembled file,

decrypts the encrypted local security token,

decrypts the encrypted, assembled file using the encrypted local security token,

divides the decrypted assembled file into the plurality of chunks,

uncompresses each chunk of the plurality of chunks, and reassembles the uncompressed plurality of chunks into the source data.

2. The non-transitory computer readable medium of claim 1 , wherein

the remote security token is a public key; and

encrypting the local security token with the remote security token comprises encrypting the local security token using a public key cryptosystem.

3. The non-transitory computer readable medium of claim 2 , wherein the public key cryptosystem is RSA.

4. The non-transitory computer readable medium of claim 1 , wherein

the local security token is a symmetric key; and

encrypting the assembled file comprises encrypting the assembled file using a symmetric-key cryptosystem.

5. The non-transitory computer readable medium of claim 1 , wherein the plurality of chunks are compressed using a Lempel-Ziv-Renau algorithm.

6. The non-transitory computer readable medium of claim 1 , wherein the assembled file comprises the concatenated sequence of records, wherein each record includes a location of a subsequent record and a compressed chunk of the plurality of chunks.

7. The non-transitory computer readable medium of claim 1 , wherein the instructions, when executed by the processing circuitry, cause the processing circuitry to:

automatically transform, based on one or more rules corresponding to the destination system, any source data in a first format into a second format, the second format being compatible with the destination system; and

perform a validation of at least a portion of the source data in the first format or in the second format based on the one or more rules corresponding to the destination system.

8. The non-transitory computer readable medium of claim 1 , wherein generating the local security token comprises generating a random session key.

9. The non-transitory computer readable medium of claim 1 , wherein the attributes of the network comprise at least one of connection strength of the transmitting system, connection strength of the destination system, or historic transfer speeds.

10. The non-transitory computer readable medium of claim 1 , wherein the number of the two or more parts is adjustable such that a data size of the two or more parts falls in a range between a minimum file part size and a maximum file part size.

11. A method for securely delivering source data to a destination system over a network comprising:

receiving, at a computing device via the network, a public key from the destination system;

generating, by processing circuitry of the computing device, a session key;

encrypting, by the processing circuitry, the session key with the public key using a public key cryptosystem to obtain an encrypted session key;

dividing, by the processing circuitry, the source data into a plurality of chunks;

compressing, by the processing circuitry, each chunk of the plurality of chunks;

after compressing, appending, by the processing circuitry, each chunk of the plurality of chunks of the source data with an offset;

merging, by the processing circuitry, all of the compressed chunks into a single file;

encrypting, by the processing circuitry, the single file with the session key using a second cryptosystem different than the public key cryptosystem;

after encrypting the single file, dividing, by the processing circuitry, the single file into two or more parts, wherein a number of the two or more parts is adjustable based on attributes of the network connecting a transmitting system and the destination system;

causing transmission of, by the processing circuitry, each of the two or more parts to the destination system via the network; and

causing transmission of, by the processing circuitry, the encrypted session key to the destination system via the network;

wherein, to access the source data, the destination system merges the two or more parts to obtain the encrypted, assembled file,

decrypts the encrypted local security token,

decrypts the encrypted, assembled file using the encrypted local security token,

divides the decrypted assembled file into the plurality of chunks,

uncompresses each chunk of the plurality of chunks, and reassembles the uncompressed plurality of chunks into the source data.

12. The method of claim 11 , further comprising, prior to dividing the source data:

automatically transforming, by the processing circuitry based on one or more rules corresponding to the destination system, the source data from a first format into a second format, the second format being compatible with the destination system; and

performing, by the processing circuitry, a validation of at least a portion of the source data in the first format or in the second format based on the one or more rules corresponding to the destination system.

13. The method of claim 12 , further comprising receiving, at the computing system from the destination system via the network, at least a portion of the one or more rules.

14. The method of claim 12 , wherein automatically transforming the source data comprises automatically identifying a respective data type of each column of a plurality of column of data in the source data.

15. The method of claim 11 , further comprising, prior to causing transmission of each of the two or more parts:

receiving, by the processing circuitry, an authentication token from a user of the computing device; and

verifying, by the processing circuitry with the destination system via the network, authorization of the user to transmit the source data to the destination system based on the authentication token.

16. The method of claim 11 , wherein causing transmission of the two or more parts comprises causing transmission of the two or more parts, by a software application executing upon the computing device, using an Internet browser application.

17. The method of claim 16 , further comprising enabling, by the processing circuitry within the Internet browser application, one or more secure transmission settings.

Assignments (4)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 15, 2021
From: AON BENFIELD INC.
To: AON GLOBAL OPERATIONS LIMITED (SINGAPORE BRANCH)
Reel/Frame 056552/0951 →
CHANGE OF NAME Recorded Jun 15, 2021
From: AON GLOBAL OPERATIONS LIMITED (SINGAPORE BRANCH)
To: AON GLOBAL OPERATIONS SE, SINGAPORE BRANCH
Reel/Frame 056596/0038 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 26, 2021
From: AON BENFIELD GLOBAL, INC.
To: AON BENFIELD INC.
Reel/Frame 056397/0280 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 3, 2016
From: OLSON, DOUGLAS A.
To: AON BENFIELD GLOBAL, INC.
Reel/Frame 040217/0758 →
Continuity (3)
Continuation In Part 13493095 · Jun 11, 2012
Provisional Application 61512390 · Jul 27, 2011
Related Publication 20170078094A1 · Mar 16, 2017