METHODS FOR CONDUCTING SERVER-SIDE ENCRYPTION/DECRYPTION-ON-DEMAND

• US 20070198823A1
• Filed: 12/29/2006
• Published: 08/23/2007
• Est. Priority Date: 06/30/1999
• Status: Active Grant

• Current Assignee: Edwin Blew, Ker-Ming Chang
• Original Assignee: Edwin Blew, Ker-Ming Chang
• Inventors: Chang, Ker-Ming, Blew, Edwin
• Granted Patent: US 7,519,810 B2
• Time in Patent Office: Days
• US Class Current: 713/150
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06

Abstract

A method and system for encryption and decryption of data tiles on a web-based computer system includes encrypting the data file in a memory subsystem, such as RAM, storing the encrypted data file in one or more of a plurality of memory locations analyzing and modifying the encrypted data file, retrieving and decrypting the modified data file; and displaying the decrypted data file on a web browser. The computer system may include one to three servers. The data file may be encrypted and decrypted using any dual-key encryption algorithm, such as PGP, or a single key algorithm. Data transmitted into and out of the computer system may be via an SSL/HTTPS protocol to provide additional security.

Claims

1. A method for securely storing an electronic data file, comprising:

transmitting to a computer system, an electronic data file, wherein the computer system comprises a memory subsystem and a plurality of memory locations;

encrypting the data file in the memory subsystem; and

storing the encrypted data file in the one or more memory locations;

wherein encrypting the data file occurs without assistance from a user and without requiring the user'"'"'s knowledge of the algorithm used to encrypt the data file.

2. The method of claim 1 further comprising:

verifying the user is authorized to access to the computer system.

3. The method of claim 1 further comprising:

retrieving the encrypted data file from the one or more memory locations;

decrypting the data file;

modifying the decrypted data file;

re-encrypting the data file; and

storing the modified data file in the one or more memory locations, wherein the decrypting and re-encrypting occur without assistance from the user and without requiring the user'"'"'s knowledge of the algorithm used to encrypt the data file.

4. The method of claim 1 wherein the transmitting step is performed using a SSL/HTTPS protocol.

5. The method of claim 1 further comprising:

retrieving the encrypted data file from the one or more memory locations;

decrypting the data file; and

providing the user access to the data file, wherein the decrypting occurs without assistance from the user and without requiring the user'"'"'s knowledge of the algorithm user to encrypt the data file.

6. The method of claim 1 wherein the memory subsystem includes random access memory.

7. A method for securely storing an electronic data file comprising:

transmitting to a first computer system, an electronic data file, wherein the first computer system comprises a memory subsystem;

encrypting the data file in the memory subsystem;

transmitting the encrypted data file to a second computer system having a plurality of memory locations; and

storing the encrypted data file in one or more of the memory locations,

wherein encrypting the data file occurs without assistance from a user and without requiring the user'"'"'s knowledge of the algorithm used to encrypt the data file.

8. The method of claim 7 further comprising:

verifying the user is authorized to access the first computer system.

9. The method of claim 7 further comprising:

retrieving the encrypted data file from the one or more memory locations;

decrypting the data file;

modifying the decrypted data file;

re-encrypting the data file; and

storing the modified data file in the one or more memory locations, wherein the decryption and reencrypting occur without assistance from the user and without requiring the user'"'"'s knowledge of the algorithm used to encrypt the data file.

10. The method of claim 7 wherein the receiving step is performed using a SSL/HTTPS protocol.

11. The method of claim 7 further comprising:

retrieving the encrypted data file from the one or more memory locations;

decrypting the data file; and

providing the user access to the data file, wherein the decrypting occurs without assistance from the user and without requiring the user'"'"'s knowledge of the algorithm user to encrypt the data file.

12. The method of claim 7 wherein the memory subsystem includes random access memory.

13. The method of claim 7 further comprising:

retrieving the encrypted data file from the one or more memory locations;

transmitting the encrypted data file to a third computer system;

decrypting the data file on the third computer system;

modifying the encrypted data file;

re-encrypting the data file on the third computer system;

transmitting the modified data file to the second computer system; and

storing the modified data file in the one or more memory locations.

14. A system for transferring an electronic data file, comprising:

a first computer system for encrypting a data file and decrypting an encrypted data file, the first computer system having a memory subsystem; and

a second computer system in communication with the first computer system, the second computer system having a plurality of memory locations configured to store the encrypted data files,

wherein the first computer system is configured to;

receive the data file from a user device,

encrypt the data file in the memory subsystem without interaction from a user and without requiring the user'"'"'s knowledge of the algorithm used to encrypt the data file; and

transmit the encrypted data file to the second computer system,

wherein the second computer system is configured to;

receive the encrypted data file from the first computer system, and

store the encrypted data file in one or more memory locations.

15. The system of claim 14 wherein the second computer system is further configured to:

retrieve the encrypted data file from the one or more memory locations; and

transmit the encrypted data file to the first computer,

16. The system of claim 14 wherein the first computer system is further configured to:

receive the encrypted data file from the second computer; and

decrypt the encrypted data file in the memory subsystem;

wherein decrypting the encrypted data file occurs without interaction with a user and without requiring the user'"'"'s knowledge of the algorithm used to decrypt the encrypted data file by the user.

17. The system of claim 14 wherein the second computer system is further configured to:

retrieve the encrypted data file from the one or more memory locations;

decrypt the data file;

modify the decrypted data file;

re-encrypt the data file; and

store the modified data file in the one or more memory locations.

18. The system of claim 14 further comprising:

a third computer system in communication with the second computer,

wherein the second computer system is further configured to;

retrieve the encrypted data file from the one or more memory locations;

transmit the encrypted data file to the third computer system;

receive a modified data file from the third computer system, and

store the modified data file in the one or more memory locations, and

wherein the third computer system is configured to;

receive the encrypted data file from the second computer;

decrypt the data file;

modify the decrypted data file;

re-encrypt the data file; and

transmit the modified data file to the second computer.

19. A system for securely storing an electronic data file comprising:

a receiving subsystem configured to receive a data file from a user device,

an encrypting subsystem configured to encrypt the data file,

a plurality of memory locations configured to store an encrypted data file in one or more memory locations; and

a decrypting subsystem configured to decrypt the encrypted data file; and

a display subsystem configured to display the decryption file.

wherein the encrypting subsystem operates to encrypt the data file without assistance from a user and without requiring the user'"'"'s knowledge of the algorithm used to encrypt the data file, and

wherein the decrypting subsystem operates to decrypt the encrypted data file without assistance from a user and without requiring the user'"'"'s knowledge of the algorithm used to encrypt data file.

20. A method for accessing a secure electronic file on a computer system, comprising:

retrieving, from a computer system having a memory subsystem and a plurality of memory locations, an encrypted data file from one or more memory locations;

decrypting the encrypted data file in the memory subsystem; and

providing access to the decrypted data file,

wherein decrypting the encrypted data file occurs without assistance from a user and without requiring the user'"'"'s knowledge of the algorithm used to encrypt the data file.

21. The method of claim 20 further comprising:

modifying the decrypted data file;

encrypting the modified data file; and

storing the encrypted modified data file in the one or more memory locations,

wherein the encryption of the modified data file occurs without assistance from a user and without requiring the user'"'"'s knowledge of the algorithm used to encrypt the data file.

22. The method of claim 20 wherein the memory subsystem includes random access memory.

23. A method for securely accessing an electronic data file comprising:

retrieving, from a first computer system comprising a plurality of memory locations, an encrypted data file from one or more of the memory locations;

transmitting the encrypted data file to a second computer system comprising a memory subsystem;

decrypting the encrypted data file in the memory subsystem; and

displaying the decrypted data file,

wherein decrypting the encrypted data file occurs without assistance from a user and without requiring the user'"'"'s knowledge of the algorithm used to encrypt the data file.

24. The method of claim 23 further comprising:

transmitting the encrypted data file to a third computer system;

decrypting the encrypted data file;

modifying by the third computer system, the data file;

encrypting the modified data file;

transmitting the encrypted modified data file to the first computer system; and

storing the modified data file in the one or more memory locations.

25. The method of claim 23 further comprising:

retrieving the encrypted data file from the one or more memory locations;

decrypting the encrypted data file;

modifying the data file;

encrypting the modified data file; and

storing the encrypted modified data file in the one or more memory locations.

26. The method of claim 23 wherein the memory subsystem includes random access memory.

27. A system for securely storing electronic data files comprising:

means for receiving a data file;

means for encrypting the data file;

means for storing the encrypted data file;

means for retrieving the stored data file;

means for decrypting the retrieved data file; and

means for displaying the decrypted data file.

28. The method of claim 27 further comprising:

means for modifying the retrieved data file;

means for encrypting the modified data file; and

means for storing the encrypted modified data file.