IP Library Granted Patent US 11,398,902
Granted Patent B2
US 11,398,902 · App. 17/016,595 · Granted Jul 26, 2022

Systems and methods for non-deterministic multi-party, multi-user sender-receiver authentication and non-repudiatable resilient authorized access to secret data

Inventor: David Lanc (Edinburgh, GB)
Assignee: CYBORN LIMITED
H04L9/085H04L9/0866H04L9/32
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,398,902
App. No.
17/016,595
Granted
Jul 26, 2022
Kind
B2
Abstract

Systems and methods for non-deterministic multi-party, multi-user sender-receiver authentication and non-repudiated resilient authorized access to secret data are described herein. In one aspect, a method for data access includes receiving, at a server, a request for data access from a user; transmitting to users, a prompt for identity verification corresponding to the identity of each user, where at least one of user is different than the user requesting data access; receiving, in response to the identity verification prompt, a plurality of identification key fragments from storage locations or devices associated with the users, where each identification key fragment is user specific; generating an organization-specific data object from the plurality of identification key fragments; confirming the organization-specific data object by the users whose identities were validated; and authorizing the request for data access based on confirming the organization-specific data object.

Claims (46)

1. A method for data access comprising:

receiving, at a system provider server, a request for data access from an organization user;

transmitting to one or more organization users, a prompt for identity verification corresponding to the identity of each corresponding organization user, wherein at least one of the one or more users is different than the user requesting data access;

receiving, in response to the identity verification prompt, a plurality of identification key fragments from a plurality of storage locations or devices associated with at least a subset of the one or more organization users, wherein each identification key fragment is user specific;

generating an organization-specific data object from the plurality of identification key fragments;

confirming the organization-specific data object by the at least subset of the one or more organization users whose identities were validated;

identifying a plurality of mandatory organization users;

identifying a predetermined mandatory fragment threshold;

determining whether the plurality of identification key fragments contains one or more mandatory identification key fragments;

determining whether the one or more mandatory identification key fragments meets or exceeds the predetermined mandatory identification key fragment threshold; and

authorizing the request for data access based on confirming the organization-specific data object and a determination that the one or more mandatory identification key fragments meets or exceeds the predetermined mandatory fragment threshold.

2. The method of claim 1 , further comprising:

transmitting notification of data access authorization to the organization user.

3. The method of claim 1 , further comprising:

transmitting a notification of failed access from the system provider server subsequent to the system provider server failing to receive authorization to request or grant access.

4. The method of claim 1 , further comprising:

determining whether the plurality of identification key fragments meets or exceeds a minimum fragment threshold, wherein the generating is further based on the determination.

5. The method of claim 1 , further comprising:

identifying a plurality of organization users;

generating a plurality of identification key fragments based on the identified plurality of organization users, wherein the plurality of identification key fragments is equal to or greater than the plurality of organization users.

6. The method of claim 5 , further comprising:

associating each identification key fragment with an organizational user;

storing information corresponding to an association between each identification key fragment and the corresponding organizational user; and transmitting each identification key fragment to one of a corresponding plurality of storage locations or types or devices.

7. A method for data access comprising:

receiving, at a system provider server, a request for data access from an organization;

transmitting to one or more system provider users, a prompt for identity verification corresponding to the identity of each corresponding system provider user;

receiving, in response to identity verification prompt, a plurality of identification key fragments recovered from a plurality of storage locations or devices associated with at least a subset of the one or more system provider users, wherein each identification key fragment is user specific;

generating a system provider-specific data object from the plurality of identification key fragments;

confirming the system provider-specific data object by the at least subset of the one or more system provider users whose identities were validated;

identifying a plurality of mandatory system provider users;

identifying a predetermined mandatory fragment threshold;

determining whether the plurality of identification key fragments contains one or more mandatory identification key fragments;

determining whether the one or more mandatory identification key fragments meets or exceeds the predetermined mandatory identification key fragment threshold; and

authorizing the request for data access based on confirming the system provider-specific data object and the determining whether the one or more mandatory identification key fragments meets or exceeds the predetermined mandatory identification key fragment threshold.

8. The method of claim 7 , further comprising:

transmitting notification of data access authorization to an organization.

9. The method of claim 7 , further comprising:

transmitting a notification of failed access from the system provider server subsequent to the system provider server failing to authorize access.

10. The method of claim 7 , further comprising:

determining whether the plurality of identification key fragments meets or exceeds a minimum fragment threshold, wherein the generating is further based on the determination.

11. The method of claim 7 , further comprising:

identifying a plurality of system provider users;

generating a plurality of identification key fragments based on the identified plurality of system provider users, wherein the plurality of identification key fragments is equal to or greater than the plurality of system provider users.

12. The method of claim 11 , further comprising:

associating each identification key fragment with a system provider user; and

storing information corresponding to an association between each identification key fragment and the corresponding system provider user; and transmitting each identification key fragment to one of a corresponding plurality of storage locations or types or devices.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 25, 2023
From: CYBORN LIMITED
To: PROVENIRE LIMITED
Reel/Frame 065006/0455 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 4, 2021
From: LANC, DAVID
To: CYBORN LIMITED
Reel/Frame 055149/0547 →
Continuity (1)
Related Publication 20220078005A1 · Mar 10, 2022
Cited By (1)
US 12,225,129