Granted Patent B2

US 12,267,419 · App. 17/496,604 · Granted Apr 1, 2025

Inventor: Mindaugas Valkaitis (Vilnius, LT)

Assignee: UAB 360 IT

H04L9/0833G06F21/602H04L9/0825H04L9/14H04L9/3073H04L67/1097

Abstract

Claims (85)

1. A method, comprising:

determining, by a device, an assigned key pair associated with the device, the assigned key pair including an assigned public key and an assigned private key;

determining, by the device for a folder associated with encrypted content, a folder access key pair including a folder access public key and a folder access private key;

determining, by the device for a group, a group access key pair including a group access public key and a group access private key;

determining, by the device for respective content, a respective symmetric key and a respective content access key pair associated with encrypting content to determine the encrypted content, the respective content access key pair including a content access public key and a content access private key;

encrypting, by the device based at least in part on utilizing the respective symmetric key, the respective content to determine the encrypted content;

encrypting, by the device, the respective symmetric key for the respective content based at least in part on utilizing the content access public key to determine an encrypted symmetric key;

first encrypting, by the device, the content access private key for the respective content by utilizing the assigned public key to determine a first encrypted content access private key;

second encrypting, by the device, the content access private key by utilizing the folder access public key to determine a second encrypted content access private key;

encrypting, by the device, the folder access private key by utilizing the assigned public key to determine a first encrypted folder access private key;

encrypting, by the device, the folder access private key by utilizing the group access public key to determine a second encrypted folder access private key;

transmitting, by the device for storage in correlation with the folder, the encrypted symmetric key, the first encrypted content access private key, the second encrypted content access private key, the first encrypted folder access private key, and the second encrypted folder access private key; and

accessing, by the device, the folder based at least in part on decrypting the first encrypted folder access private key by utilizing the assigned private key or based at least in part on decrypting the second encrypted folder access private key by utilizing the group access private key.

2. The method of claim 1 , further comprising:

encrypting the group access private key by utilizing the assigned public key to determine an encrypted group access private key.

3. The method of claim 1 , further comprising:

decrypting an encrypted group access private key by utilizing the assigned private key.

4. The method of claim 1 , further comprising:

determining a master key based at least in part on a master string of alphanumeric characters;

encrypting the assigned private key by utilizing the master key to determine an encrypted assigned private key; and

encrypting the group access private key by utilizing the assigned public key to determine an encrypted group access private key.

5. The method of claim 1 , further comprising:

determining a master key based at least in part on a master string of alphanumeric characters;

decrypting an encrypted assigned private key by utilizing the master key; and

decrypting an encrypted group access private key by utilizing the assigned private key.

6. The method of claim 1 , further comprising:

decrypting the encrypted content based at least in part on the device accessing the folder.

7. The method of claim 1 , wherein the group is a virtual group.

8. A device, comprising:

a memory; and

a processor communicatively coupled to the memory, the memory and the processor being configured to:

determine an assigned key pair associated with the device, the assigned key pair including an assigned public key and an assigned private key;

determine, for a folder associated with encrypted content, a folder access key pair including a folder access public key and a folder access private key;

determine, for a group, a group access key pair including a group access public key and a group access private key;

determine, for respective content, a respective symmetric key and a respective content access key pair associated with encrypting content to determine the encrypted content, the respective content access key pair including a content access public key and a content access private key;

encrypt, based at least in part on utilizing the respective symmetric key, the respective content to determine the encrypted content;

encrypt the respective symmetric key for the respective content based at least in part on utilizing the content access public key to determine an encrypted symmetric key;

first encrypt the content access private key for the respective content by utilizing the assigned public key to determine a first encrypted content access private key;

second encrypt the content access private key by utilizing the folder access public key to determine a second encrypted content access private key;

encrypt the folder access private key by utilizing the assigned public key to determine a first encrypted folder access private key;

encrypt the folder access private key by utilizing the group access public key to determine a second encrypted folder access private key; and

transmit, for storage in correlation with the folder, the encrypted symmetric key, the first encrypted content access private key, the second encrypted content access private key, the first encrypted folder access private key, and the second encrypted folder access private key; and

access the folder based at least in part on decrypting the first encrypted folder access private key by utilizing the assigned private key or based at least in part on decrypting the second encrypted folder access private key by utilizing the group access private key.

9. The device of claim 8 , wherein the memory and the processor are configured to:

encrypt the group access private key by utilizing the assigned public key to determine an encrypted group access private key.

10. The device of claim 8 , wherein the memory and the processor are configured to:

decrypt an encrypted group access private key by utilizing the assigned private key.

11. The device of claim 8 , wherein the memory and the processor are configured to:

determine a master key based at least in part on a master string of alphanumeric characters;

encrypt the assigned private key by utilizing the master key to determine an encrypted assigned private key; and

encrypt the group access private key by utilizing the assigned public key to determine an encrypted group access private key.

12. The device of claim 8 , wherein the memory and the processor are configured to:

determine a master key based at least in part on a master string of alphanumeric characters;

decrypt an encrypted assigned private key by utilizing the master key; and

decrypt an encrypted group access private key by utilizing the assigned private key.

13. The device of claim 8 , wherein the memory and the processor are configured to:

decrypt the encrypted content based at least in part on the device accessing the folder.

14. The user device of claim 8 , wherein the group is a virtual group.

15. A non-transitory computer-readable medium configured to store instructions, which when executed by a processor associated with a device, configure the processor to:

determine an assigned key pair associated with the device, the assigned key pair including an assigned public key and an assigned private key;

determine, for a folder associated with encrypted content, a folder access key pair including a folder access public key and a folder access private key;

determine, for a group, a group access key pair including a group access public key and a group access private key;

determine, for respective content, a respective symmetric key and a respective content access key pair associated with encrypting content to determine the encrypted content, the respective content access key pair including a content access public key and a content access private key;

encrypt, based at least in part on utilizing the respective symmetric key, the respective content to determine the encrypted content;

encrypt the respective symmetric key for the respective content based at least in part on utilizing the content access public key to determine an encrypted symmetric key;

first encrypt the content access private key for the respective content by utilizing the assigned public key to determine a first encrypted content access private key;

second encrypt the content access private key by utilizing the folder access public key to determine a second encrypted content access private key;

encrypt the folder access private key by utilizing the assigned public key to determine a first encrypted folder access private key;

encrypt the folder access private key by utilizing the group access public key to determine a second encrypted folder access private key; and

transmit, for storage in correlation with the folder, the encrypted symmetric key, the first encrypted content access private key, the second encrypted content access private key, the first encrypted folder access private key, and the second encrypted folder access private key; and

access the folder based at least in part on decrypting the first encrypted folder access private key by utilizing the assigned private key or based at least in part on decrypting the second encrypted folder access private key by utilizing the group access private key.

16. The non-transitory computer-readable medium of claim 15 , wherein the processor is configured to:

encrypt the group access private key by utilizing the assigned public key to determine an encrypted group access private key.

17. The non-transitory computer-readable medium of claim 15 , wherein the processor is configured to:

decrypt an encrypted group access private key by utilizing the assigned private key.

18. The non-transitory computer-readable medium of claim 15 , wherein the processor is configured to:

determine a master key based at least in part on a master string of alphanumeric characters;

encrypt the assigned private key by utilizing the master key to determine an encrypted assigned private key; and

encrypt the group access private key by utilizing the assigned public key to determine an encrypted group access private key.

19. The non-transitory computer-readable medium of claim 15 , wherein the processor is configured to:

determine a master key based at least in part on a master string of alphanumeric characters;

decrypt an encrypted assigned private key by utilizing the master key; and

decrypt an encrypted group access private key by utilizing the assigned private key.

20. The non-transitory computer-readable medium of claim 15 , wherein the processor is configured to:

decrypt the encrypted content based at least in part on the device accessing the folder.

Assignments (1)

Continuity (2)

References Cited (9)