METHOD FOR REMOTELY CONTROLLING AND MONITORING THE DATA PRODUCED ON DESKTOP ON DESKTOP SOFTWARE

• US 20120173884A1
• Filed: 06/29/2010
• Published: 07/05/2012
• Est. Priority Date: 07/01/2009
• Status: Abandoned Application

• Current Assignee: Mandar Patil
• Original Assignee: Mandar Patil
• Inventors: Patil, Mandar
• Application Number:
  US13/381,647
• Publication Number:
  US 20120173884A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself

Abstract

According to this invention there is provided a method of controlling usage of data and prevent unauthorized usage of data that is generated by software using iso data system where data can be used only on the computer which has created the data or use and/or access the data on other computers only if the owner of such data has given access/permission to such data.

Claims

1. A method of controlling usage of data and prevent unauthorized usage of data which is generated by software, using iso data system.

2. A method of claim 1 wherein data can be used only on the computer which has created it using iso data system;

to use said data on another computer, data owner must authorize a recipient, using the same iso data system on another computer.

3. A method of claim 1, comprising:

selecting the data to be shared and embedding data owner'"'"'s customer id;

identifying and authorizing at least one recipient with whom the data is to be shared by entering the recipient'"'"'s customer id;

identifying each set of data being shared by a unique data id generated by the data owner'"'"'s system where in the access permissions to each set of data are associated with each particular data id;

issuing required access permissions to authorized recipient to use the data;

using appropriate data sharing methods i.e. sharing via uploading the data to the online server or by copying the data to any external storage device.

4. A method of claim 1 wherein, during software activation, the vendors'"'"' online server sends two keys namely R1 and R2 to the software. Key R1 is used to encrypt owner'"'"'s data to protect it from unauthorized usage of this data on any other computer. When data in created in the software it is automatically encrypted with the R1 key and stored in this encrypted form. Key R2 is used to protect the data that is to be shared with one or more intended recipients on their computer system. Ra and Rb are the private and public keys of the recipient.

5. A method of claim 3, wherein data owner can share the data with the recipient via uploading the data to the online server or by transferring data to an external storage device and sharing this device with the recipient.

6. A method of claim 3 where incase the recipient has not yet registered the data owner'"'"'s R2 key and data to be shared is uploaded to the online server, data is first decrypted using the data owner'"'"'s R1 key and then encrypted with the data owner'"'"'s R2 key. This data is uploaded to the server where it is decrypted with data owner'"'"'s R2 key and again encrypted with the recipient'"'"'s Rb key. Recipient downloads this data and uses it with his Rb key.

7. A method of claim 3 where incase the recipient has not yet registered the data owner'"'"'s R2 key and data to be shared is sent to the recipient via an external storage device, data is first decrypted using the data owner'"'"'s R1 key and then encrypted with the data owner'"'"'s R2 key. This data transferred to the external storage device and shared with the recipient. The recipient uploads this data to the online server and incase the data owner has given sufficient permissions, the server decrypts this data with the data owner'"'"'s R2 key and encrypts this data with the recipients Rb key after which recipient can download and use this data with his Rb key.

8. A method of claim 3 where incase the recipient has previously registered the data owner'"'"'s R2 key and data to be shared is uploaded to the online server, data is first decrypted using the data owner'"'"'s R1 key and then encrypted with the data owner'"'"'s R2 key. This data is uploaded to the server, the recipient downloads this data from the server and decrypts and uses the data with the data owner'"'"'s R2 key.

9. A method of claim 3 where incase the recipient has registered the data owner'"'"'s R2 key and data is shared via an external storage device, data is first decrypted using the data owner'"'"'s R1 key and then encrypted with the data owner'"'"'s R2 key. This data is transferred to the external storage device and shared with the recipient. Recipient downloads this data from the storage device and decrypts and uses the data with the data owner'"'"'s R2 key.

10. A method of claim 1 wherein, iso data system can be used to protect any data on the data owner'"'"'s computer/system.

11. A method of claim 3 wherein, the data downloaded by the authorized and designated recipient is bound by certain access rights issued by the data owner;

said data can be used by the recipient only as per the access rights set, where said set access rights are viewing, amending, printing and saving.

12. Method of claim 3 wherein, the authorized recipient can amend the data and send it back to the data owner if needed. This amended data will be recognized using a new data id. The data is encrypted with Rb key and uploaded to the server where it is decrypted with the Rb key and again encrypted with the data owner'"'"'s R2 key. Owner can download this data and convert it back to the R1 key and use it.

13. A method of claim 12, wherein recipient can amend the data shared by the data owner, if needed, and send amended data back to the data owner either via uploading the data to the online server or by transferring data to an external storage device and sharing this device with the data owner.

14. A method of claim 12 where incase the recipient has not yet registered the data owner'"'"'s R2 key. Amended data to be shared is encrypted with recipient'"'"'s Rb key and uploaded to the online server, where it is decrypted with the recipient'"'"'s Rb key and later encrypted with the data owner'"'"'s R2 key. Data owner downloads this data and converts it from R2 to his R1 key and then uses it.

15. A method of claim 12 where incase the recipient has not yet registered the data owner'"'"'s R2 key and amended data to be shared is sent to the data owner via an external storage device, data is encrypted using the recipient'"'"'s Rb key transferred to the external storage device and shared with the data owner. The data owner uploads this data to the online server and incase the recipient has given sufficient permissions, the server decrypts this data with the recipient'"'"'s Rb key and encrypts this data with the data owner'"'"'s R2 key after which data owner can download this data, convert it from the R2 key to R1 key and use it.

16. A method of claim 12 where incase the recipient has previously registered the data owner'"'"'s R2 key and amended data to be shared is uploaded to the online server, data owner downloads this data and decrypts it using his R2 key. Said data can be converted from the R2 key to R1 key and then used.

17. A method of claim 12 where incase the recipient has previously registered the data owner'"'"'s R2 key and shares the amended data via an external storage device, data owner downloads this data from the storage device and decrypts it using his R2 key. Said data can be converted from the R2 key to R1 key and then used.

18. Method of claim 3 where process and storage of original data and data which is received for sharing, are processed through two different and mutually exclusive sub systems and are at two separate locations in the same computer/system.

19. A method of claim 12 wherein, the data owner is alerted about the amendment done by the authorized recipient in the shared data and can merge it into the original data if required.

20. A method of claim 1 wherein, the data owner can register his R2 key with other recipients for secured data sharing purpose by sending the server an instruction to do so and entering both customer'"'"'s as well as data owner'"'"'s customer id. The registration of this key can be revoked at any time by either parties, by sending an instruction to the vendor'"'"'s online server about the same.

21. A method of claim 3 wherein, the data owner can block the access rights to the data shared with a recipient, by instructing the server to block or delete the data sent to the recipient.

22. A method of claim 3 wherein, even if the data from the recipients computer, is used on any other computer, it cannot be accessed, used or processed, due to lack of permissions from the data owner.

23. A method of claim 1 wherein, in case the software is required to be reinstalled, an easy method of reinstallation is provided to the software user and the server sends the encryption and decryption keys again to the software after activation. It also sends the previously registered R2 keys of other user'"'"'s into the software.

24. A method of claim 16, wherein incase during reinstallation or each time the software is opened, it is detected that there is the motherboard id of the computer has changed, then the software will have to be revalidated with the server and also the R2 keys will have to be revalidated again by the data owners only then the data sharing from these owners can occur.

25. A method of claim 1 wherein, the iso data system can also be used as an independent encryption module to secure data storage.