SYSTEM, APPARATUS AND METHOD FOR ENCRYPTION AND DECRYPTION OF DATA TRANSMITTED OVER A NETWORK

• US 20110167102A1
• Filed: 12/30/2010
• Published: 07/07/2011
• Est. Priority Date: 09/15/2008
• Status: Active Grant

• Current Assignee: CyberArk Software Ltd.
• Original Assignee: Vaultive Ltd.
• Inventors: MATZKEL, Ben, Lahav, Aviad, Tal, Maayan
• Granted Patent: US 8,738,683 B2
• Time in Patent Office: Days
• US Class Current: 709/202
• CPC Class Codes: G06F 15/16 Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs coordinating program control therefor G06F9/52; in regulating and control system G05B
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/066 Format adaptation, e.g. format conversion or compression
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/226 Delivery according to priorities
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and system for securing data transmitted between a client device and a server by obtaining input text at an intermediate module, processing the input text to obtain processed text, and transmitting the processed text to the server. In particular, the server may be configured to provide at least one function on input data provided by the client device, and the intermediate module may be configured to receive input data from the client device, to transform the input data into processed data, and to transmit the processed data to the server. Embodiments of the invention may include systems and methods for intercepting the input data at the intermediate module without transmission of the input data to the server; providing the at least one function by the intermediate module on the input data; and generating by the intermediate module at least one message to the client device based on a result of the at least one function.

Claims

1. In a system comprising a server, a client device, and an intermediate module, wherein the server is configured to provide at least one function on input data provided by the client device, and wherein said intermediate module is configured to receive input data from the client device, to transform said input data into processed data, and to transmit said processed data to the server, the method comprising:

intercepting input data from the client device at the intermediate module without transmission of said input data to the server;

providing said at least one function by the intermediate module on the input data; and

generating by the intermediate module at least one message to the client device based on a result of said function.

2. The method of claim 1 further comprising:

obtaining at the intermediate module a response to said at least one message from said client device;

based on said response, processing the input text to obtain processed input text; and

transmitting the processed input text to the server.

3. The method of claim 1, wherein said function is a spell-checking function, and wherein the message is a result of said spell-checking function on said input data.

4. The method of claim 1, wherein said function is format-checking function on said input data, wherein said input data is in a first format, and wherein said message is a request to provide said input data in a second format different from said first format.

5. The method of claim 4, wherein said first format is a delta-encoded format, and wherein said second format is a full input text format.

6. The method of claim 1, wherein said intermediate module is a software plug-in module installed in said client device.

7. The method of claim 1, wherein said intermediate module is an intermediate server computer connected to said client device and to said server.

8. A system for securing data between a client device and a server comprising:

an intermediate module configured to receive input data from a client device, transform said input data into processed data, and transmit said processed data to a server, wherein said server is configured to provide at least one function on data provided thereto, wherein said intermediate module is further configured to;

intercept input data from the client device without transmitting the input data to the server;

provide said at least one function on the input data; and

generate at least one message to the client device based on a result of said function.

9. The system of claim 8, wherein said intermediate module is further configured to:

obtain a response to said at least one message from said client device;

based on said response, process the input text to obtain processed input text; and

transmit the processed input text to the server.

10. The system of claim 8, wherein said function is a spell-checking function, and wherein the message is a result of said spell-checking function on said input data.

11. The system of claim 8, wherein said function is format-checking function on said input data, wherein said input data is in a first format, and wherein said message is a request to provide said input data in a second format different from said first format.

12. The system of claim 11, wherein said first format is a delta-encoded format, and wherein said second format is a full input text format.

13. The system of claim 8, wherein said intermediate module is a software plug-in module installed in said client device.

14. The system of claim 8, wherein said intermediate module is an intermediate server computer connected to said client device and to said server.