System and methods for using cipher objects to protect data
Systems, methods, and devices configured to build and utilize an intelligent cipher transfer object are provided. The intelligent cipher transfer object includes a set of participants protected by cloaking patterns. A portable dynamic rule set, which includes executable code for managing access to the protected set of participants, is included within the intelligent cipher transfer object. For a given user, the intelligent cipher transfer object may provide access to some of the participants while preventing access to other participants, based on the portable dynamic rule set therein.
1. A computer-implemented method for creating digitally secured data, comprising:
initializing a dynamic participant controller (DPC);
receiving, by the DPC, a set of digital participant data;
constructing, by the DPC and using the set of digital participant data, a computer-based intelligent cipher transfer object (ICTO);
applying, by the DPC, an outer cloaking pattern to the set of digital participant data in the ICTO using an interim ruleset;
adding, by the DPC, owner data elements to the ICTO;
replacing, by the DPC, the interim ruleset with owner-specific rules;
applying, by the DPC, an inner cloaking pattern to the ICTO based at least in part on the owner-specific rules, thus creating a secure set of digital participant data.
2. The method of claim 1 , wherein the ICTO is implemented in a portable identity appliance (PIA).
3. The method of claim 1 , wherein initializing a dynamic participant controller (DPC) comprises:
validating the DPC is executed by a trusted system.
4. The method of claim 1 , wherein the owner data elements are optional.
5. The method of claim 1 , wherein the owner-specific rules are obtained from a portable dynamic rule set (PDRS).
6. The method of claim 1 , wherein the set of digital participant data comprises object descriptions, mixture metadata, owner data, outer cloaking patterns, inner cloaking patterns, an identity module, and an intelligence module.
7. The method of claim 6 , wherein the object descriptions comprise owner-supplied and owner-defined earmarks, data identifiers, and properties.
8. The method of claim 6 , wherein the owner data comprises a document, a file, a buffer, a directory, a pointer to remotely stored data, and a database.
9. The method of claim 6 , wherein the intelligence module comprises a rule to apply separate inner cloaking patterns, by DPC, to separate components of the set of digital participant data.
10. The method of claim 6 , wherein the intelligence module comprises nested layers of cloaking of the set of digital participant data.
11. The method of claim 1 , wherein the ICTO comprises a digital signature key.
12. The method of claim 1 , wherein the inner cloaking pattern describes transformations applied to the set of digital participant data to protect the set of digital participant data.
13. The method of claim 12 , wherein the transformations comprise at least one of data compression, data normalization, and encryption.
14. The method of claim 1 , wherein the inner cloaking pattern comprises encryption techniques.
15. The method of claim 1 , wherein applying, by the DPC, an outer cloaking pattern to the set of digital participant data in the ICTO using an interim ruleset comprises:
applying an algorithm, by the DPC, to select an outer cloaking pattern;
applying the outer cloaking pattern, by the DPC, to at least part of the set of digital participant data using the interim ruleset; and
constructing, by the DPC, the initial cloaking pattern and an interim cipher object.
16. The method of claim 15 , wherein the algorithm utilizes time and the owner-specific rules to randomize the inner cloaking pattern.
17. The method of claim 15 , further comprising:
adding the algorithm to an identity module,
wherein the algorithm are managed internally and not shared externally.
18. The method of claim 1 , wherein the owner data elements comprise a nested ICTO.
19. The method of claim 1 , further comprising:
constructing a nested ICTO by adding a first ICTO, by a rule within the first ICTO, to a second ICTO.
20. The method of claim 1 , further comprising:
stopping if an anomaly is detected.