System and method of applying multiple adaptive privacy control layers to single-layered media file types

• US 10,395,047 B2
• Filed: 12/31/2016
• Issued: 08/27/2019
• Est. Priority Date: 12/31/2016
• Status: Active Grant

• Current Assignee: Entefy Inc.
• Original Assignee: Entefy Inc.
• Inventors: Ghafourifar, Alston, Greenberg, Philip Nathan
• Primary Examiner(s): Nipa, Wasika
• Application Number:
  US15/396,479
• Publication Number:
  US 20180189504A1
• Time in Patent Office: 969 Days
• CPC Class Codes: G06F 16/182 Distributed file systems
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/629 to features or functions of an application

Abstract

Users desire a communications system that allows the users to apply customized privacy settings (and, optionally, encryption keys) differently to particular portions of a document—even if the document is of a ‘lossy’ file type, e.g., a JPEG image. The custom access permission settings may be implemented by obfuscating portions of the original file and then embedding “secret,” e.g., hidden and/or encrypted, versions of the obfuscated portions in parts of the data structure of the original lossy file in the form of “layers” (e.g., the bit-equivalent of PNG layers). The individual encrypted layers may then be decrypted according to each recipient'"'"'s permissions and layered on top of the original lossy file ‘in memory’ before being displayed to the recipient. The use of multiple encrypted layers allows for the visual revelation of the content of the original lossy file without modifying the actual underlying image content of the original lossy file.

Claims

1. A non-transitory computer readable medium comprising computer executable instructions stored thereon that when executed cause one or more processing units to:

receive an indication of a first protected portion and a second protected portion of a file of a single-layered, lossy file type having first dimensions, wherein the file further comprises anchor points;

receive first and second respective access permission settings for each of the first and second protected portions;

receive an indication of a first recipient for the first protected portion;

receive an indication of a second recipient for the second protected portion;

generate a first layer representation corresponding to the first protected portion and a second layer representation corresponding to the second protected portion;

generate an edited copy of the file based on the indication of the first and the second protected portions to create an edited single-layered, lossy file;

add the first and second layer representations back into the file structure of the edited single-layered, lossy file;

crop the edited single-layered, lossy file to have dimensions different from the first dimensions; and

transmit the cropped and edited single-layered, lossy file to the first and the second recipients,

wherein the anchor points are configured to align the first and second layer representations at the correct positions within the cropped and edited single-layered, lossy file when an authorized recipient views the cropped and edited single-layered, lossy file in an authorized viewing application.

2. The non-transitory computer readable medium of claim 1, wherein the instructions further include instructions to cause the one or more processing units to:

generate the edited single-layered, lossy file by obfuscating at least one of the first protected portion and the second protected portion.

3. The non-transitory computer readable medium of claim 1, wherein the first protected portion and the second protected portion are at least partially overlapping.

4. The non-transitory computer readable medium of claim 2, wherein the instructions to obfuscate at least one of the first protected portion and the second protected portion further comprise instructions to mask the content of the single-layered, lossy file at the first protected portion and the second protected portion, respectively.

5. The non-transitory computer readable medium of claim 1, wherein the instructions further include instructions to cause the one or more processing units to:

encrypt at least one of the first and second protected portions based, at least in part, on the first and the second access permission settings, respectively.

6. The non-transitory computer readable medium of claim 1, wherein the first layer representation comprises the first protected portion of the single-layered, lossy file and a transparent region around the first protected portion that is co-extensive with the first dimensions.

7. The non-transitory computer readable medium of claim 1, wherein the first layer representation is a binary representation of a single PNG layer.

8. The non-transitory computer readable medium of claim 7, wherein the instructions to add the first and second protected portions, associated with their respective access permission settings, back into the file structure of the edited single-layered, lossy file further comprise instructions to:

insert the first and second layer representations into one or more header elements of the edited single-layered, lossy file'"'"'s data structure.

9. The non-transitory computer readable medium of claim 1, wherein the cropped and edited single-layered, lossy file is configured such that the first and second layer representations are only viewable by a recipient in an authorized viewing application.

10. The non-transitory computer readable medium of claim 1, wherein the first and second layer representations are configured to be layered on top of the cropped and edited single-layered, lossy file when an authorized recipient views the cropped and edited single-layered, lossy file in an authorized viewing application.

11. A system, comprising:

a memory; and

one or more processing units, communicatively coupled to the memory, wherein the memory stores instructions to configure the one or more processing units to;

receive an indication of a first protected portion of a file of a single-layered, lossy file type having first dimensions, wherein the file further comprises anchor points;

receive a first access permission setting for the first protected portion;

receive an indication of a first recipient for the first protected portion;

generate a first layer representation corresponding to the first protected portion;

generate an edited copy of the file based on the indication of the first protected portion to create an edited single-layered, lossy file;

add the first layer representation back into the file structure of the edited single-layered, lossy file;

crop the edited single-layered, lossy file to have dimensions different from the first dimensions; and

transmit the cropped and edited single-layered, lossy file to the first recipient,

wherein the anchor points are configured to align the first layer representation at the correct positions within the cropped and edited single-layered, lossy file when an authorized recipient views the cropped and edited single-layered, lossy file in an authorized viewing application.

12. The system of claim 11, wherein the instructions are further configured to cause the one or more processing units to:

generate the edited single-layered, lossy file by obfuscating the first protected portion.

13. The system of claim 11, wherein the first protected portion comprises a sub-portion of the file.

14. The system of claim 12, wherein the instructions to obfuscate the first protected portion are further configured to cause the one or more processing units to mask the content of the file at the first protected portion.

15. The system of claim 11, wherein the instructions are further configured to cause the one or more processing units to:

encrypt the first protected portion based, at least in part, on the first access permission setting.

16. The system of claim 11, wherein the first layer representation comprises the first protected portion of the file and a transparent region around the first protected portion that is co-extensive with the first dimensions.

17. The system of claim 11, wherein the first layer representation is a binary representation of a single PNG layer.

18. The system of claim 17, wherein the instructions to add the first protected portion, associated with its access permission settings, back into the file structure of the edited single-layered, lossy file further comprise instructions to:

insert the first layer representation into one or more header elements of the edited single-layered, lossy image file'"'"'s data structure.

19. The system of claim 11, wherein the edited single-layered, lossy file is configured such that the first layer representation is only viewable by a recipient in an authorized viewing application.

20. The system of claim 11, wherein the first layer representation is configured to be layered on top of the edited single-layered, lossy file when an authorized recipient views the cropped and edited single-layered, lossy file in an authorized viewing application.

21. A computer-implemented method, comprising:

receiving an indication of a first protected portion of a file of a single-layered, lossy file type having first dimensions, wherein the file further comprises anchor points;

receiving a first access permission setting for the first protected portion;

receiving an indication of a first recipient for the first protected portion;

encrypting the first protected portion based, at least in part, on the first access permission setting and the first recipient;

generating a first encrypted layer representation corresponding to the encrypted first protected portion;

generating an edited copy of the file based on the indication of the first protected portion to create an edited single-layered, lossy file;

adding the first encrypted layer representation, associated with its access permission settings, back into the file structure of the edited single-layered, lossy file;

cropping the edited single-layered, lossy file to have dimensions different from the first dimensions; and

transmitting the cropped and edited single-layered, lossy file to the first recipient,

wherein the anchor points are configured to align the first layer representation at the correct positions within the cropped and edited single-layered, lossy file when the first layer representation is layered on top of the cropped and edited single-layered, lossy file.

22. The method of claim 21, wherein the act of generating the edited single-layered, lossy file further comprises obfuscating the first protected portion.

23. The method of claim 21, wherein the first encrypted layer representation is configured to be decrypted and layered on top of the cropped and edited single-layered, lossy file when an authorized recipient views the cropped and edited single-layered, lossy file in an authorized viewing application.