Stacked encryption

• US 10,713,388 B2
• Filed: 05/15/2018
• Issued: 07/14/2020
• Est. Priority Date: 05/15/2017
• Status: Active Grant

• Current Assignee: DOSA X LLC
• Original Assignee: Polyport, Inc.
• Inventors: Ray, Partha, Shull, Michael James
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US15/979,829
• Publication Number:
  US 20180330120A1
• Time in Patent Office: 791 Days
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system
• CPC Class Codes: G06F 30/00 Computer-aided design [CAD]

Abstract

Various embodiments of the present technology generally relate to file sharing, encryption, and protection of digital assets. More specifically, some embodiments of the present technology relate to computer files comprising an unencrypted file combined with an encrypted file, and methods for creation of such combined files. The unencrypted file can be read by target applications and can present a variety of information (e.g., contact information, registration information, etc.). The encrypted data may be accessed only when the proper management software, drivers, application programming interfaces, and other components of a runtime environment have been installed on a computing device.

Claims

1. A collaboration service comprising:

one or more processors;

a project database to store projects that each include a digital asset; and

a communication component to connect the collaboration service to a first collaborator device and a second collaborator device,

wherein the first collaborator device to create the digital asset to be stored on the project database as a stacked file that includes an encrypted portion and an unencrypted portion so that the second collaborator device can only access the unencrypted portion when a runtime environment is properly installed; and

wherein the unencrypted portion of the stacked file is readable by an application running on the second collaborator device when the runtime environment is not properly installed and presents within the application a set of instructions to download the runtime environment.

2. The collaboration service of claim 1, wherein the runtime environment on the second collaborator device includes a sentinel to identify a stacked file type is being opened and launch an encapsulated instance of an application within a sandbox.

3. The collaboration service of claim 2, wherein the runtime environment on the second collaborator device further includes an application programming interface to allow communications between the application running within the sandbox and operating system utilities.

4. The collaboration service of claim 3, wherein the first collaborator device associates rights with the stacked file and wherein the sentinel enforces any restrictions associated with the rights within the sandbox.

5. The collaboration service of claim 2, wherein the runtime environment on the second collaborator device further includes kernel drivers that retrieve a key from a key management system to decrypt the encrypted portion of the stacked file.

6. The collaboration service of claim 1, wherein the encrypted portion is a first file created on the first collaborator device and the unencrypted portion is a second file created by the collaboration service that includes identifying information about a creator of the first file or of an associated project.

7. The collaboration service of claim 6, further comprising an encryption system to encrypt the first file once the first file is associated with one of the projects.

8. A method comprising:

stacking an unencrypted file with an encrypted file; and

combining the unencrypted file with the encrypted file to form a single combined file;

wherein the single combined file includes a marker separating the unencrypted file from the encrypted file and indicates to a computer program reading the single combined file to read the unencrypted file, but not read the encrypted file.

9. The method of claim 8, further comprising receiving, at a cloud-based collaboration service, the encrypted file, automatically generating the unencrypted file, and generated the single combined file in response to the encrypted file being added to a project within the cloud-based collaboration service.

10. The method of claim 8, wherein the unencrypted file displays as a three-dimensional business card that includes instructions on subscribing to a cloud-based collaboration service.

11. The method of claim 8, further comprising generating a hash of a file to be encrypted, assigning an identifier to the file, retrieving an encryption key to generate the encrypted file.

12. The method of claim 8, wherein the encrypted file is a three-dimensional design.

13. The method of claim 12, wherein the three-dimensional design was created using AutoCAD, Maya, Blender, 3DS Max, or Modo.

14. A method for reading a stacked file having an encrypted file portion and an unencrypted file portion, the method comprising:

creating a sandbox within portion of volatile memory and nonvolatile memory of a machine;

encapsulating an instance of an application within the sandbox;

decrypting, using a kernel driver installed on the machine, the encrypted file portion; and

allowing communications into and out of the sandbox with the use of an application programming interface.

15. The method of claim 14, further comprising determining whether a runtime environment is installed on the machine and wherein the stacked file includes markers that indicate to the application reading the stacked file to read the unencrypted file portion and not read the encrypted file portion of the stacked file unless the runtime environment is installed.

16. The method of claim 15, wherein the unencrypted file displays as a three-dimensional business card that includes instructions on subscribing to a cloud-based collaboration service when the runtime environment is not installed.

17. The method of claim 14, wherein the unencrypted file portion and the encrypted file portion are separated from one another through use of markers.

18. The method of claim 14, wherein the encrypted file portion is a file containing a three-dimensional design created using created using AutoCAD, Maya, Blender, 3DS Max, or Modo.

19. A collaboration service comprising:

one or more processors;

a project database to store projects that each include a digital asset; and

a communication component to connect the collaboration service to a first collaborator device and a second collaborator device,

wherein the first collaborator device to create the digital asset to be stored on the project database as a stacked file that includes an encrypted portion and an unencrypted portion so that the second collaborator device can only access the unencrypted portion when a runtime environment is properly installed; and

wherein the runtime environment on the second collaborator device includes a sentinel to identify a stacked file type is being opened and launch an encapsulated instance of an application within a sandbox.

20. The collaboration service of claim 19, wherein the runtime environment on the second collaborator device further includes an application programming interface to allow communications between the application running within the sandbox and operating system utilities.

21. The collaboration service of claim 20, wherein the first collaborator device associates rights with the stacked file and wherein the sentinel enforces any restrictions associated with the rights within the sandbox.

22. The collaboration service of claim 19, wherein the runtime environment on the second collaborator device further includes kernel drivers that retrieve a key from a key management system to decrypt the encrypted portion of the stacked file.

23. The collaboration service of claim 19, wherein the encrypted portion is a first file created on the first collaborator device and the unencrypted portion is a second file created by the collaboration service that includes identifying information about a creator of the first file or of an associated project.

24. The collaboration service of claim 23, further comprising an encryption system to encrypt the first file once the first file is associated with one of the projects.

25. A method comprising:

stacking an unencrypted file with an encrypted file; and

combining the unencrypted file with the encrypted file to form a single combined file;

wherein the unencrypted file displays as a three-dimensional business card that includes instructions on subscribing to a cloud-based collaboration service.

26. The method of claim 25, further comprising receiving, at a cloud-based collaboration service, the encrypted file, automatically generating the unencrypted file, and generated the single combined file in response to the encrypted file being added to a project within the cloud-based collaboration service.

27. The method of claim 25, further comprising generating a hash of a file to be encrypted, assigning an identifier to the file, retrieving an encryption key to generate the encrypted file.

28. The method of claim 25, wherein the encrypted file is a three-dimensional design.

29. The method of claim 28, wherein the three-dimensional design was created using AutoCAD, Maya, Blender, 3DS Max, or Modo.

30. A method comprising:

stacking an unencrypted file with an encrypted file;

combining the unencrypted file with the encrypted file to form a single combined file;

generating a hash of a file to be encrypted;

assigning an identifier to the file; and

retrieving an encryption key to generate the encrypted file.

31. The method of claim 30, further comprising receiving, at a cloud-based collaboration service, the encrypted file, automatically generating the unencrypted file, and generated the single combined file in response to the encrypted file being added to a project within the cloud-based collaboration service.

32. The method of claim 30, wherein the encrypted file is a three-dimensional design.

33. The method of claim 32, wherein the three-dimensional design was created using AutoCAD, Maya, Blender, 3DS Max, or Modo.

34. A method comprising:

stacking an unencrypted file with an encrypted file; and

combining the unencrypted file with the encrypted file to form a single combined file;

wherein the encrypted file is a three-dimensional design.

35. The method of claim 34, further comprising receiving, at a cloud-based collaboration service, the encrypted file, automatically generating the unencrypted file, and generated the single combined file in response to the encrypted file being added to a project within the cloud-based collaboration service.

36. The method of claim 34, wherein the three-dimensional design was created using AutoCAD, Maya, Blender, 3DS Max, or Modo.