Conveying encrypted electronic data from a device outside a multitenant system via the multitenant system to a recipient device that is a tenant device associated with the multitenant system

Patent metadata

Field	Value
Publication number	US-11032352-B2
Application number	US-201916263435-A
Country	US
Kind code	B2
Filing date	Jan 31, 2019
Priority date	Jan 31, 2019
Publication date	Jun 8, 2021
Grant date	Jun 8, 2021

Abstract

Electronic data can be transmitted from a device outside a multitenant system to a recipient device that is a tenant device associated with the multitenant system. A processor of the device outside the multitenant system can encrypt the electronic data to produce a first file. The processor can produce a second file. The second file can include the first file and an identification. The identification can be for the recipient device. The processor can encrypt the second file to produce a third file. The processor can transmit, to the multitenant system, a file for transmission. The file for transmission can include the third file. The multitenant system can be configured to communicate with the recipient device.

First claim

The invention claimed is:

1. A method for transmitting electronic data from a device outside a multitenant database to a tenant recipient device configured to receive files from the multi tenant database, the method comprising:
receiving, by a processor of the device outside the multitenant database, a first key from the tenant recipient device;
encrypting, by the processor with the first key, the electronic data to produce a first encrypted file;
producing, by the processor a second file, the second file including the first encrypted file and a first identification, the first identification associated with the tenant recipient device;
receiving, by the processor of the device outside the multitenant database, a second key from the multitenant database;
encrypting, by the processor with the second key, the second file to produce a third encrypted file; and
transmitting, by the processor and to the multitenant database, the third encrypted file;
decrypting, by a processor at the multitenant database, the third encrypted file with the second key to produce the second file including the first encrypted file and the first identification;
transmitting, by the processor at the multitenant database, the first encrypted file to the tenant recipient device based on the first identification; and
decrypting, by a processor at the tenant recipient device, the first encrypted file with the first key to produce the electronic data.

2. The method of claim 1 , wherein the electronic data comprise at least one of an electronic message having alphabetic and numeric characters, voice data, or video data.

3. The method of claim 1 , wherein the transmitting comprises transmitting the third encrypted file for transmission through at least one of a packet switched network, a peer-to-peer network, or a cellular network.

4. The method of claim 1 , further comprising:
determining, by the processor of the device outside the multitenant database, a first intermediate device to be used to convey the file for transmission from the processor to the multitenant database;
producing, by the processor of the device outside the multitenant database, a fourth file, the fourth file including the third encrypted file and a second identification, the second identification being for the multitenant database; and
encrypting, by the processor of the device outside the multitenant database, the fourth file to produce a fifth file;
wherein:
the transmitting comprises transmitting via the first intermediate device; and
the file for transmission includes the fifth file.

5. The method of claim 4 , wherein the determining comprises determining the first intermediate device without using a routing table or a routing policy.

6. The method of claim 4 , further comprising:
determining, by the processor, a signal path from the processor to the multitenant database, the signal path being for the file for transmission;
wherein the determining the first intermediate device is based on the signal path.

7. The method of claim 4 , further comprising:
determining, by the processor of the device outside the multitenant database, a second intermediate device to be used to convey the file for transmission from the processor to the multitenant database;
producing, by the processor of the device outside the multitenant database, a sixth file, the sixth file including the fifth file and a third identification, the third identification being for the first intermediate device; and
encrypting, by the processor of the device outside the multitenant database, the sixth file to produce a seventh file;
wherein:
the transmitting further comprises transmitting via the second intermediate device; and
the file for transmission includes the seventh file.

8. The method of claim 1 , wherein the transmitting comprises transmitting the file for transmission without predetermining all intermediate devices to be used to convey the file for transmission from the processor to the multitenant database.

9. The method of claim 8 , further comprising determining, by the processor and using a routing table or a routing policy, a first intermediate device to be used to convey the file for transmission from the processor to the multitenant database.

10. The method of claim 9 , further comprising:
determining, by the processor, a portion of a signal path from the processor to the multitenant database, the portion of the signal path being for the file for transmission; and
determining, by the processor and based on the portion of the signal path, a second intermediate device to be used to convey the file for transmission from the processor to the multitenant database.

11. A non-transitory computer-readable medium storing computer code for controlling a processor of a device outside of a multitenant database to cause the processor to transmit electronic data to a tenant recipient device configured to receive files from the mu ltitenant database, the computer code including instructions to cause the processor to:
receive from the tenant recipient device, a first key;
encrypt the electronic data with the first key to produce a first encrypted file;
produce a second file, the second file including the first encrypted file and a first identification, the first identification being for the tenant recipient device;
receive from the multitenant database a second key;
encrypt the second file with the second key to produce a third encrypted file; and
transmit, to the multitenant database, the third file;
decrypt, at the multitenant database, the third encrypted file with the second key to produce the second file including the first encrypted file and the first identification;
transmit the first encrypted file to the tenant recipient device based on the first identification; and
decrypt, at the tenant recipient device, the first encrypted file with the first key to produce the electronic data.

12. A system for transmitting electronic data from a device outside a multitenant database to a tenant recipient device configured to receive files from the multitenant database, the system comprising:
a memory, of the device outside the multitenant database, configured to store the electronic data, a first encrypted file, a second file, and a third encrypted file; and
a processor, of the device outside the multitenant database, configured to:
receive a first key from the tenant recipient device associated with the multitenant database;
encrypt the electronic data with the first key to produce the first encrypted file, the first encrypted file configured to be decrypted at the tenant recipient device with the first key to produce the electronic data;
produce the second file, the second file including the first encrypted file and a first identification, the first identification being for the tenant recipient device;
receive a second key from the multitenant database;
encrypt the second file with the second key to produce the third encrypted file, the third encrypted file configured to be decrypted at the multitenant database to produce the second file including the first encrypted file and the first identification; and
transmit, to the multitenant database, the third encrypted file, the third encrypted file configured to be decrypted with the second key to produce the first identification, and further configured to be transmitted to the tenant recipient device based on the first identification.

13. A method for conveying electronic data from a device outside a multitenant database to a tenant recipient device configured to receive files from the multitenant database, the method comprising:
receiving, by a processo

Assignees

• Salesforce Com Inc

Inventors

• Lew Eugene

Classifications

• H04L67/63

  Routing a service request depending on the request content or context · CPC title

• H04L9/0816

  Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use · CPC title

• H04L45/70

  Routing based on monitoring results · CPC title

• H04L63/0478 Primary

  applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key (cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14) · CPC title

• H04L67/06 Primary

  specially adapted for file transfer, e.g. file transfer protocol [FTP] · CPC title