Securing private information in public, private and mobile devices

Patent metadata

Field	Value
Publication number	US-9369440-B2
Application number	US-201213877578-A
Country	US
Kind code	B2
Filing date	Jul 24, 2012
Priority date	Jul 24, 2012
Publication date	Jun 14, 2016
Grant date	Jun 14, 2016

Abstract

Technologies are generally disclosed for methods and systems for securing data. An example method may include storing, by a processing device, the data in a memory. The data may be encrypted and accessible only with the use of a decryption key. The method may further include receiving, by the processing device, one or more permission requests to access the data and requesting, by the processing device, the decryption key. In response to receiving the decryption key, the method may include authenticating, by the processing device, the decryption key to verify one or more permissions, and allowing, by the processing device, access to the data in accordance with the one or more permissions.

First claim

What is claimed is:

1. A method, comprising:
transforming, by a processing device, data into encrypted data, wherein the data is encrypted with an encryption key generated by and obtained from at least one remote computing device;
destroying, by the processing device, the encryption key after the transforming the data into the encrypted data;
storing, by the processing device, the encrypted data in a memory, wherein the encrypted data is accessible only with the use of a decryption key generated by the at least one remote computing device;
receiving, by the processing device, one or more requests to access the encrypted data from at least one application associated with the processing device;
requesting, by the processing device, the decryption key from the at least one application; and
in response to receiving the decryption key:
transmitting, by the processing device, the decryption key to the at least one remote computing device for authentication of the decryption key and verification of one or more permissions associated with the at least one application,
receiving, by the processing device, a transmission comprising authorization from the at least one remote computing device, wherein the at least one remote computing device is configured to authenticate the decryption key and determine whether the decryption key is valid for at least a portion of the encrypted data that the at least one application has requested to decrypt,
transforming, by the processing device, the portion of the encrypted data for which the decryption key is valid into decrypted data with the decryption key, and
allowing, by the processing device, access to the decrypted data in accordance with the one or more permissions.

2. The method of claim 1 , further comprising, in response to not receiving the decryption key, preventing, by the processing device, access to the encrypted data.

3. The method of claim 1 , further comprising in response to not receiving the decryption key, generating, by the processing device, an alert to a remote computing device.

4. The method of claim 1 , wherein the data comprises information associated with a user identity.

5. The method of claim 1 , wherein the decryption key is unique to the data.

6. A system, comprising:
a processing device; and
a non-transitory, processor-readable storage medium in communication with the processing device, wherein the non-transitory, processor-readable storage medium contains one or more programming instructions that, when executed, cause the processing device to:
transform data into encrypted data, wherein the data is encrypted with an encryption key generated by and obtained from at least one remote computing device;
delete the encryption key after transformation of the data into the encrypted data;
store the encrypted data in a memory, wherein the encrypted data is accessible only with the use of a decryption key generated by the at least one remote computing device;
receive one or more requests to access the encrypted data from at least one application associated with the processing device;
request the decryption key from the at least one application; and
in response to receiving the decryption key:
transmit the decryption key to the at least one remote computing device for authentication of the decryption key and verification of one or more permissions associated with the at least one application,
receive a transmission comprising authorization from the at least one remote computing device, wherein the at least one remote computing device is configured to authenticate the decryption key and determine whether the decryption key is valid for at least a portion of the encrypted data that the at least one application has requested to decrypt,
transform the portion of the encrypted data for which the decryption key is valid into decrypted data with the decryption key, and
allow access to the decrypted data in accordance with the one or more permissions.

7. The system of claim 6 , wherein the one or more programming instructions further comprise one or more programming instructions that, when executed, cause the processing device to, in response to not receiving the decryption key, prevent the at least one application from accessing the encrypted data.

8. The system of claim 6 , wherein the one or more programming instructions further comprise one or more programming instructions that, when executed, cause the processing device to, in response to not receiving the decryption key, generate an alert to for a remote computing device.

9. The system of claim 6 , wherein the data comprises information associated with a user identity.

10. The system of claim 6 , wherein the decryption key is unique to the data.

11. A method, comprising:
transforming, by a processing device, a first portion of data into first encrypted data, wherein the first portion is associated with a first application, and wherein the first portion is encrypted with a first encryption key generated by and obtained from at least one remote computing device;
rendering, by the processing device, the encryption key unreadable after the transforming the first portion of the data into the first encrypted data;
storing, by the processing device, the first encrypted data in a memory, wherein the first encrypted data is accessible only via a decryption key generated by the at least one remote computing device;
receiving, by the processing device, one or more requests from a second application associated with the processing device, wherein the one or more requests contain the decryption key;
transmitting, by the processing device, the decryption key to the at least one remote computing device for authentication of the decryption key and verification of one or more permissions associated with the second application;
receiving, by the processing device, a transmission comprising authorization from the at least one remote computing device, wherein the at least one remote computing device is configured to authenticate the decryption key and determine whether the decryption key is valid for at least a portion of the encrypted data that the second application has requested to decrypt; and
transforming, by the processing device, the portion of the first encrypted data for which the decryption key is valid into decrypted data with the decryption key.

12. The method of claim 11 , further comprising:
transforming, by the processing device, a second portion of the data into second encrypted data, wherein the second portion is associated with the second application, and wherein the second portion is encrypted with a second encryption key obtained from the one or more remote computing devices.

13. The method of claim 11 , wherein the data comprises information associated with a user identity.

14. The method of claim 11 , wherein the decryption key is unique to the second application.

15. The method of claim 11 , wherein the decryption key is unique to the first encrypted data.

16. A system, comprising:
a processing device; and
a non-transitory, processor-readable storage medium in communication with the processing device, wherein the non-transitory, processor-readable storage medium contains one or more programming instructions that, when executed, cause the processing device to:
transform a first portion of data into first encrypted data, wherein the first portion is associated with a first application, and wherein the first portion is encrypted with an encryption key generated by and obtained from at least one remote computing device;
destroy the encryption key after transforma

Assignees

• Margalit Mordehai
• Empire Technology Dev Llc

Inventors

• Margalit Mordehai

Classifications

• H04L63/101

  Access control lists [ACL] · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/068

  using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088) · CPC title

• G06F21/6281

  at program execution time, where the protection is within the operating system · CPC title