Computer program and method for biometrically secured, transparent encryption and decryption
A computer program for enabling secured, transparent encryption and decryption provides a user interface that allows a user to drag and drop files into and out of a secure repository and automatically encrypts files transferred into the repository and automatically decrypts files transferred out of the repository. The user can transfer file folders into the repository, wherein the program encrypts all of the files within the folder and retains the original file/folder structure, such that individual files can be moved within the repository, moved out of the repository, and opened or executed directly from the repository. The program requires the user to submit biometric data and grants access to the secure repository only if the biometric data is authenticated. The program generates an encryption key based at least in part on biometric data received from the user. Additionally, the program destroys the key after termination of each encryption/decryption session.
1. A non-transitory computer-readable storage medium with an executable program stored thereon for enabling a storage system having a secure repository for storage of files, wherein the secure repository is associated with information associated with a security template of a user for authentication of the user's identity, wherein the program instructs at least one processor to perform the following steps:
receive information associated with an authentication template of the user to access the secure repository during a session;
compare the information associated with the authentication template with the information associated with the security template;
upon the information associated with the authentication template correlating with the information associated with the security template, generate a key to use for encrypting at least one file stored within the secure repository during the session or decrypting at least one file removed from the secure repository during the session;
receive an instruction from the user to transfer at least one user file to or from the secure repository;
if the received instruction is to transfer the user file to the secure repository, encrypt the user file using said generated key and store the user file in the secure repository,
wherein each user file stored in the secure repository is separately encrypted,
wherein the user file is encrypted and stored in the secure repository automatically upon receipt of the user's instruction to transfer the user file to the secure repository and with no further action from the user, such that the user does not have to request or prompt encryption of the file;
if the received instruction is to transfer the user file from the secure repository, decrypt the user file using said generated key and remove the user file from the secure repository,
wherein the user file is decrypted and removed from the secure repository automatically upon receipt of the user's instruction to transfer the user file from the secure repository and with no further action from the user, such that the user does not have to request or prompt decryption of the file;
terminate the session upon an event; and
destroy the key in association with terminating the session, such that only the information associated with said security template is preserved.
2. The computer-readable storage medium of claim 1 , wherein the user is a first user, the security template is a first security template, and the authentication template is a first authentication template, the program further operable to instruct the at least one processor to perform the step of enrolling a second security template of a second user to be used to authenticate the second user's identity for access to the secure repository.
3. The computer-readable storage medium of claim 2 , wherein the program is further operable to instruct the at least one processor to:
receive information associated with a second authentication template of the second user for accessing the secure repository during a session;
compare the received information associated with the second authentication template with information associated with the second security template; and
upon the information associated with the second authentication template correlating with the information associated with the second security template, generate the key to use for encrypting at least one file stored within the secure repository or decrypting at least one file removed from the secure repository during the session.
4. The computer-readable storage medium of claim 1 , wherein the program is operable to instruct the processor to encode the security template, store the encoded security template, and delete the unencoded security template.
5. The computer-readable storage medium of claim 1 , wherein the event is selected from the group consisting of: an elapse of a predetermined amount of time and a closing of the secure repository.
6. The computer-readable storage medium of claim 1 , wherein the authentication template is selected from the group consisting of: a password created by the user and biometric data associated with the user.
7. The computer-readable storage medium of claim 1 , wherein said key is a first key and said session is a first session, wherein said first key is operable for use only during said first session, and upon the user beginning a second session, the program instructs the processor to create a second key operable for use only during said second session.
8. The computer-readable storage medium of claim 7 , wherein said first key is used to encrypt or decrypt a plurality of files or folders during the first session, and said second key is used to encrypt or decrypt a plurality of files or folders during the second session.
9. A non-transitory computer-readable storage medium with an executable program stored thereon for enabling a storage system having a secure repository for storage of files, wherein the secure repository is associated with information associated with a security template of a user for authentication of the user's identity, wherein the program instructs at least one processor to perform the following steps:
receive information associated with an authentication template of the user to access the secure repository during a session;
compare the information associated with the authentication template with the information associated with the security template;
upon the information associated with the authentication template correlating with the information associated with the security template, generate a key to use for encrypting at least one file stored within the secure repository during the session or decrypting at least one file removed from the secure repository during the session;
receive an instruction from the user to transfer at least one user file to or from the secure repository;
if the received instruction is to transfer the user file to the secure repository, encrypt the user file using said generated key and store the user file in the secure repository,
wherein each user file stored in the secure repository is separately encrypted,
wherein the user file is encrypted and stored in the secure repository automatically upon receipt of the user's instruction to transfer the user file to the secure repository and with only minimal additional action by the user;
if the received instruction is to transfer the user file from the secure repository, decrypt the user file using said generated key and remove the user file from the secure repository,
wherein the user file is decrypted and removed from the secure repository automatically upon receipt of the user's instruction to transfer the user file from the secure repository and with only minimal additional action by the user;
terminate the session upon an event; and
destroy the key in association with terminating the session, such that only the information associated with said security template is preserved.
10. The computer-readable storage medium of claim 9 , wherein the minimal additional action by the user is the user responding to a generated confirmation request to transfer the user file to or remove the user file from the secure repository.
11. The computer-readable storage medium of claim 9 , wherein the minimal additional action by the user does not substantially extend the time or effort required by the user to transfer to or remove the user file from the secure repository beyond the time required to select the file and select the secure repository.
12. The computer-readable storage medium of claim 9 , wherein the user is a first user, the security template is a first security template, and the authentication template is a first authentication template, the program further operable to instruct the at least one processor to perform the following steps:
enroll a second security template of a second user to be used to authenticate the second user's identity for access to the secure repository;
receive information associated with a second authentication template of the second user for accessing the secure repository during a session;
compare the received information associated with the second authentication template with information associated with the second security template; and
upon the information associated with the second authentication template correlating with the information associated with the second security template, generate the key to use for encrypting at least one file stored within the secure repository or decrypting at least one file removed from the secure repository during the session.
13. The computer-readable storage medium of claim 9 , wherein the program is operable to instruct the processor to encode the security template, store the encoded security template, and delete the unencoded security template.
14. The computer-readable storage medium of claim 9 , wherein the event is selected from the group consisting of: an elapse of a predetermined amount of time and a closing of the secure repository.
15. The computer-readable storage medium of claim 9 , wherein the authentication template is selected from the group consisting of: a password created by the user and biometric data associated with the user.
16. The computer-readable storage medium of claim 9 , wherein said key is a first key and said session is a first session, wherein said first key is operable for use only during said first session, and upon the user beginning a second session, the program instructs the processor to create a second key operable for use only during said second session.
17. The computer-readable storage medium of claim 16 , wherein said first key is used to encrypt or decrypt a plurality of files or folders during the first session, and said second key is used to encrypt or decrypt a plurality of files or folders during the second session.