Recipient blind cryptographic access control for publicly hosted message and data streams
US-9059840-B2 · Jun 16, 2015 · US
US9729315B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-9729315-B2 |
| Application number | US-201514791198-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jul 2, 2015 |
| Priority date | Jul 16, 2012 |
| Publication date | Aug 8, 2017 |
| Grant date | Aug 8, 2017 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A public/private key pair is generated on a client device for an application. A device identifier for the client device is generated. An application identifier for the application is generated on the client device. At least one of the public key, the device identifier, and the application identifier are transmitted to a server.
Opening claim text (preview).
What is claimed is: 1. A system, comprising: a processor configured to: generate a public/private key pair for an application on a first device; generate a random server seed and a random local seed; generate a device identifier for the first device; generate an application identifier for the application on the first device, wherein the application identifier is a unique identifier for a particular installation of the application on the first device; provide at least one of the public key, the device identifier, and the application identifier to a server; generate a plurality of symmetric keys based on at least one of the random server seed and the random local seed, wherein the plurality of symmetric keys are used to encrypt communications with a second device; and exchange encrypted communications with the second device, wherein at least one of the device identifier and the application identifier is used to decrypt a portion of the encrypted communications received from the second device; and a memory coupled to the processor and configured to provide the processor with instructions. 2. The system of claim 1 , wherein the processor is further configured to: obtain the application from a software distribution server; install the application on the first device. 3. The system of claim 2 , wherein the software distribution server is a third-party distribution server. 4. The system of claim 1 , wherein the processor is further configured to: capture hardware information regarding the first device; perform a hash on at least a portion of the captured hardware information to create the device identifier. 5. The system of claim 4 , wherein the hardware information is selected from the group consisting of: MAC addresses, motherboard identifiers; CPU identifiers, hard drive identifiers, random access memory (RAM), cache, and controller cards. 6. A method, comprising: generating, using a first device, a public/private key pair for an application on the first device; generating, using the first device, a random server seed and a random local seed; generating, using the first device, a device identifier for the first device; generating, using the first device, an application identifier for the application on the first device, wherein the application identifier is a unique identifier for a particular installation of the application on the first device; providing, from the first device, at least one of the public key, the device identifier, and the application identifier to a server; generating, using the first device, a plurality of symmetric keys based on at least one of the random server seed and the random local seed, wherein the plurality of symmetric keys are used to encrypt communications with a second device; and exchanging encrypted communications with the second device, wherein at least one of the device identifier and the application identifier is used to decrypt a portion of the encrypted communications received from the second device. 7. The method of claim 6 , further comprises: obtaining, at the first device, the application from a software distribution server; installing the application on the first device. 8. The method of claim 7 , wherein the software distribution server is a third-party distribution server. 9. The method of claim 6 , wherein creating the device identifier further comprises: capturing hardware information regarding the first device; performing a hash on at least a portion of the captured hardware information to create the device identifier. 10. The method of claim 9 , wherein the hardware information is selected from the group consisting of: MAC addresses, motherboard identifiers; CPU identifiers, hard drive identifiers, random access memory (RAM), cache, and controller cards. 11. A computer program product embodied in a tangible computer readable storage medium and comprising computer instructions for: generating a public/private key pair for an application on a first device; generating a random server seed and a random local seed; generating a device identifier for the first device; generating an application identifier for the application on the first device, wherein the application identifier is a unique identifier for a particular installation of the application on the first device; providing at least one of the public key, the device identifier, and the application identifier to a server; generating a plurality of symmetric keys based on at least one of the random server seed and the random local seed, wherein the plurality of symmetric keys are used to encrypt communications with a second device; and exchanging encrypted communications with the second device, wherein at least one of the device identifier and the application identifier is used to decrypt a portion of the encrypted communications received from the second device. 12. The computer program product of claim 11 , further comprising computer instructions for: obtaining the application from a software distribution server; installing the application on the first device. 13. The computer program product of claim 12 , wherein the software distribution server is a third-party distribution server. 14. The computer program product of claim 11 , further comprising computer instructions for: capturing hardware information regarding the first device; performing a hash on at least a portion of the captured hardware information to create the device identifier. 15. The computer program product of claim 14 , wherein the hardware information is selected from the group consisting of: MAC addresses, motherboard identifiers; CPU identifiers, hard drive identifiers, random access memory (RAM), cache, and controller cards.
output devices, e.g. displays or monitors · CPC title
Several contacts: gestures triggering a specific function, e.g. scrolling, zooming, right-click, when the user establishes several contacts with the surface simultaneously; e.g. using several fingers or a combination of fingers and pen · CPC title
by partitioning the display area of the touch-screen or the surface of the digitising tablet into independently controllable areas, e.g. virtual keyboards or menus · CPC title
based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance · CPC title
using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.