SYSTEM, DEVICE AND METHOD FOR SECURELY TRANSFERRING DATA ACROSS A NETWORK

• US 20110087877A1
• Filed: 10/08/2010
• Published: 04/14/2011
• Est. Priority Date: 10/08/2009
• Status: Active Grant

• Current Assignee: Compriva Communications Privacy Solutions Incorporated
• Original Assignee: Compriva Communications Privacy Solutions Incorporated
• Inventors: DAGG, WILLIAM WALTER, Grace, Barry Michael
• Granted Patent: US 8,549,280 B2
• Time in Patent Office: Days
• US Class Current: 713/150
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/222 using geographical location information, e.g. messages transmitted or received in proximity of a certain spot or area
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A method, system, server device and computer program product for securely transferring data from one or more non-subscribers to a subscriber or subscriber-defined destination, via a network, are provided. Access is provided, to one or more non-subscriber, to a network location indicator (NLI) and a private data transfer conduit is established, accessible via the NLI and configured to accept data from the non-subscribers. Data received at the conduit is transformed into secured data and transferred to the subscriber or subscriber-defined destination. In some embodiments, access to the NLI may be provided by accepting a request from a subscriber and sending, upon receipt of the request, a notification to at least one non-subscriber.

Claims

1. A method of securely transferring data from one or more non-subscribers to a subscriber or a subscriber-defined destination, communicatively linked by a network, the method comprising:

providing access, to at least one of the one or more non-subscribers, to a predetermined network location indicator;

establishing a private data transfer conduit accessible via the network location indicator and configured to accept data received from the at least one of the one or more non-subscribers;

transforming data received by the private data transfer conduit into secured data; and

transferring the secured data via the network to the subscriber or subscriber-defined destination.

2. The method of claim 1, wherein providing access to the at least one of the one or more non-subscribers to a predetermined network location indicator comprises:

receiving a private data transfer conduit request from the subscriber, the private data transfer conduit request comprising information relating to the at least one of the one or more non-subscribers; and

sending a private data transfer conduit notification to the at least one of the one or more non-subscribers, the private data transfer conduit notification comprising the predetermined network location indicator.

3. The method of claim 2, wherein the private data transfer conduit request further includes information relating to the subscriber, and wherein the method further comprises authenticating the subscriber based at least in part on the information relating to the subscriber prior to sending the private data transfer conduit notification.

4. The method of claim 2, further comprising:

sending a second private data transfer conduit notification to a second at least one of the one or more non-subscribers, the second private data transfer conduit notification comprising a second network location indicator;

establishing a second private data transfer conduit accessible via the second network location indicator and configured to accept data received from the second at least one of the one or more non-subscribers;

transforming data received by the second private data transfer conduit into second secured data; and

transferring the second secured data via the network to the subscriber or subscriber-defined destination.

5. The method of claim 1, wherein access to a network location corresponding to the predetermined network location indicator is restricted to a predetermined set of non-sub scribers.

6. The method of claim 1, wherein the method further comprises the step of transforming the secured data into unsecured data after the step of transferring the secured data.

7. The method of claim 1, wherein the method further comprises the step of sending a confirmation notification to the at least one of the one or more non-subscribers after the step of transferring the secured data, the confirmation notification comprising information relating to receipt of the secured data by the subscriber or subscriber defined destination.

8. The method of claim 1, wherein said transforming data comprises one or more of:

encryption, and separation of data for secure transfer across a private network.

9. The method of claim 1, further comprising generating a network location accessible only to subscribers, the network location configured to facilitate generation of the private data transfer conduit request.

10. The method of claim 1, further comprising managing one or more certificates or keys used in said transforming data.

11. The method of claim 1, wherein data accepted at the private data transfer conduit from the one or more non-subscribers is encrypted data.

12. The method of claim 1, wherein providing access to at least one of the one or more non-subscribers to a predetermined network location indicator comprises placing the predetermined network location indicator on another network location accessible to the at least one of the one or more non-subscribers.

13. The method of claim 1, wherein the data is selected from one or more of text information, data files, streaming audio, streaming video and VOIP data.

14. A system for securely transferring information over a network from one or more non-subscribers to a subscriber or subscriber-defined destination, the system comprising:

a subscriber computing device communicatively linked to the network;

one or more non-subscriber devices communicatively linked to the network;

a server module communicatively linked to the network and configured to provide access, to the one or more non-subscribers, to a predetermined network location indicator;

a network location corresponding to the predetermined network location indicator; and

a private data transfer conduit accessible via the network location indicator; and

a processing and server module operatively coupled to the private data transfer conduit and configured to;

accept data from the one or more non-subscribers, transform the data into secured data, and transfer the secured data to the subscriber or subscriber-defined destination via the network.

15. The system of claim 14, wherein the server module is configured to:

accept a private data transfer conduit request from the subscriber comprising information relating to the one or more non-subscribers; and

send, upon receipt of said private data transfer conduit request, a private data transfer conduit notification to the one or more non-subscribers, the notification comprising the predetermined network location indicator.

16. The system of claim 14, wherein providing access to the one or more non-subscribers comprises placing the predetermined network location indicator on another network location accessible to the non-subscriber.

17. The system of claim 14, wherein the subscriber computing device is configured to transform the transferred secured data into unsecured data.

18. The system of claim 14, wherein the data is selected from one or more of text information, data files, streaming audio, streaming video and VOIP data.

19. A server device communicatively linked to a network configured to facilitate secure transfer of information over a network from one or more non-subscribers to a subscriber or subscriber-defined destination, the server device configured to:

provide access to at least one of the one or more non-subscribers to a predetermined network location indicator; and

establish a private data transfer conduit at a network location corresponding to the network location indicator, the private data transfer conduit configured to accept data from a non-subscriber and transform the data into secured data and transfer the secured data to the subscriber or subscriber-defined destination via the network.

20. The server device of claim 19, wherein said providing access to the at least one of the one or more non-subscribers comprises:

accepting a private data transfer conduit request from the subscriber comprising information relating to the at least one of the one or more non-subscribers; and

sending, upon receipt of said private data transfer conduit request, a private data transfer conduit notification to the at least one of the one or more non-subscribers, the private data transfer conduit notification comprising the predetermined network location indicator.

21. The server device of claim 20, wherein the private data transfer conduit request further includes information relating to the subscriber, and wherein the server is further configured to authenticate the subscriber based at least in part on the information relating to the subscriber prior to sending the private data transfer conduit notification.

22. The server device of claim 20, the server device further configured to:

send a second private data transfer conduit notification to a second at least one of the one or more non-subscribers, the second private data transfer conduit notification comprising a second network location indicator;

establish a second private data transfer conduit accessible via the second network location indicator and configured to accept data received from the second at least one of the one or more non-subscribers;

transform data received by the second private data transfer conduit into second secured data; and

transfer the second secured data via the network to the subscriber or subscriber-defined destination.

23. The server device of claim 19, wherein access to a network location corresponding to the predetermined network location indicator is restricted to a predetermined set of non-subscribers.

24. The server device of claim 19, the server device further configured to send a confirmation notification to the at least one of the one or more non-subscribers after the step of transferring the secured data to the subscriber, the confirmation notification comprising information relating to receipt of the secured data by the subscriber.

25. The server device of claim 19, wherein said transforming data comprises one or more of:

encryption, and separation of data for secure transfer across a private network.

26. The server device of claim 20, further configured to generate a network location accessible only to subscribers, the network location configured to facilitate generation of the private data transfer conduit request.

27. The server device of claim 19, further configured to manage one or more certificates or keys used in said transforming data.

28. The server device of claim 19, wherein data accepted at the private data transfer conduit from the at least one of the one or more non-subscribers is encrypted data.

29. The server device of claim 19, wherein providing access to at least one of the one or more non-subscribers comprises associating the predetermined network location indicator with another network location accessible to the at least one of the one or more non-subscribers.

30. The server device of claim 19, wherein the data is selected from one or more of text information, data files, streaming audio, streaming video and VOIP data.

31. A computer program product comprising code which, when loaded into memory and executed on a processor of a computing device, is adapted to securely transfer data from one or more non-subscribers to a subscriber or a subscriber-defined destination communicatively linked by a network, including:

providing access, to the one or more non-subscribers, to a predetermined network location indicator;

establishing a private data transfer conduit accessible via the network location indicator and configured to accept data received from the one or more non-subscribers;

transforming data received by the private data transfer conduit into secured data; and

transferring the secured data via the network to the subscriber or subscriber-defined destination.

32. The computer program product according to claim 31, wherein said providing access to the one or more non-subscribers comprises:

receiving a private data transfer conduit request from the subscriber, the private data transfer conduit request comprising information relating to the one or more non-subscribers;

sending a private data transfer conduit notification to the one or more non-subscribers, the private data transfer conduit notification comprising a network location indicator;

33. The computer program product of claim 31, wherein the data is selected from one or more of text information, data files, streaming audio, streaming video and VOIP data.