System and method for secured content delivery
A content delivery platform is provided that includes generating a first content package of content that is encrypted with a unique symmetric key, and a second content package including a link encrypted with the key to the first content package. The first content package is stored in a repository, and a request including the key is transmitted to a first computing device associated with a mail exchange for an encryption key file. An encryption key file is generated using the unique symmetric key and together with a authorizing token is received. A third content package is generated that is encrypted using the encryption key file and includes the encrypted link. The third content package is transmitted to a distributor gateway and the encrypted link is accessible in response to the consumer decrypting the third content package. The link is available to provide to access to the content for the consumer.
1. A method by which an authenticated device of a consumer, having a private key, accesses secured content across a communication network, the method comprising:
providing a user interface on the device of the consumer;
receiving, via the user interface from a distributor gateway computing device, a content package containing:
i) data in clear text format; and
ii) encrypted data,
wherein the content package includes an asymmetrically encrypted symmetric key (“AESK”) usable to decrypt at least some of the data, and further wherein the encrypted data includes a link to the actual secured content within a secure domain of a remote server;
using the data in clear text format, via the user interface, to organize and arrange information in the user interface in response to the content package; and
performing, under control of the device of the consumer, a double-decryption process comprising:
i) first decrypting the AESK, via the user interface using the private key, to extract a symmetric key contained in the AESK; and
ii) second decrypting the encrypted data in the content package, via the user interface using the extracted symmetric key, to extract the link; and
accessing the secured content, via the user interface using the extracted link.
2. The method of claim 1 , wherein the step of accessing the secured content further comprises:
establishing, via the user interface, an authenticated session with the secure domain of the remote server; and
accessing the secured content via the user interface during the authenticated session, wherein the actual secured content remains behind a firewall within the secure domain of the remote server.
3. The method of claim 1 , further comprising:
prior to receiving the content package:
receiving, via an authenticating process by the device of the consumer, authentication for accessing the secured content.
4. The method of claim 3 , wherein the step of receiving the authentication includes:
receiving, from a mail exchange computing device across the communication network, an authentication token for use by the device of the consumer;
transmitting, under control of the computing device to a second computing device across the communication network, the authentication token; and
receiving, from the second computing device across the communication network, the private key usable by user interface to decrypt the AESK.
5. The method of claim 1 , further comprising discarding, by the device of the consumer, the AESK and the content package after the device of the consumer accesses the secured content.
6. The method of claim 1 , further comprising:
transmitting, to a distributor gateway computing device via the user interface, a request for access to the secured content,
whereby the step of receiving the content package occurs in response to the request.
7. The method of claim 1 , wherein the communication network is the Internet.
8. A method by which an authenticated device, having a private key, accesses secured content within a secure domain, the method comprising:
providing a user interface on the device;
receiving, via the user interface from a distributor gateway computing device, a content package containing:
i) data in clear text format; and
ii) encrypted data,
wherein the content package includes an asymmetrically encrypted symmetric key (“AESK”) usable to decrypt at least some of the data, and further wherein the encrypted data includes a link to the actual secured content within the secure domain;
using the data in clear text format, via the user interface, to organize and arrange information in the user interface in response to the content package; and
performing, under control of the device, a double-decryption process comprising:
i) first decrypting the AESK, via the user interface using the private key, to extract a symmetric key contained in the AESK; and
ii) second decrypting the encrypted data in the content package, via the user interface using the extracted symmetric key, to extract the link; and
accessing the secured content, via the user interface using the extracted link.
9. The method of claim 8 , wherein the step of accessing the secured content further comprises:
establishing, via the user interface, an authenticated session with the secure domain; and
accessing the secured content via the user interface during the authenticated session, wherein the actual secured content remains behind a firewall within the secure domain.
10. A system by which an authenticated device of a consumer, having a private key, accesses secured content across a communication network, the system comprising:
the authenticated device including at least one processor executing code that is configured to:
provide a user interface on the device of the consumer;
receive, via the user interface from a distributor gateway computing device, a content package containing:
i) data in clear text format; and
ii) encrypted data,
wherein the content package includes an asymmetrically encrypted symmetric key (“AESK”) usable to decrypt at least some of the data, and further wherein the encrypted data includes a link to the actual secured content within a secure domain of a remote server;
use the data in clear text format, via the user interface, to organize and arrange information in the user interface in response to the content package; and
perform, under control of the device of the consumer, a double-decryption process comprising:
i) first decrypting the AESK, via the user interface using the private key, to extract a symmetric key contained in the AESK; and
ii) second decrypting the encrypted data in the content package, via the user interface using the extracted symmetric key, to extract the link; and
access the secured content, via the user interface using the extracted link.
11. The system of claim 10 , wherein the at least one processor executing code is further configured to:
establish, via the user interface, an authenticated session with the secure domain of the remote server; and
access the secured content via the user interface during the authenticated session, wherein the actual secured content remains behind a firewall within the secure domain of the remote server.
12. The system of claim 10 , wherein the at least one processor executing code is further configured, prior to receiving the content package, to:
receive, via an authenticating process by the device of the consumer, authentication for accessing the secured content.
13. The system of claim 12 , wherein the at least one processor executing code is further configured to:
receive, from a mail exchange computing device across the communication network, an authentication token for use by the device of the consumer;
transmit, under control of the computing device to a second computing device across the communication network, the authentication token; and
receive, from the second computing device across the communication network, the private key usable by user interface to decrypt the AESK.
14. The system of claim 10 , wherein the device of the consumer discards the AESK and the content package after the device of the consumer accesses the secured content.
15. The system of claim 10 , wherein the at least one processor executing code is further configured to:
transmit, to a distributor gateway computing device via the user interface, a request for access to the secured content,
whereby the content package is received in response to the request.
16. The system of claim 10 , wherein the communication network is the Internet.