SECURE DIGITAL STORAGE

• US 20130212704A1
• Filed: 02/11/2013
• Published: 08/15/2013
• Est. Priority Date: 02/13/2012
• Status: Active Grant

• Current Assignee: WwPass Corp.
• Original Assignee: WwPass Corp.
• Inventors: Shablygin, Eugene, Scace, Eric, Vysogrets, Mikhail, Zakharov, Vasily, Bolotov, Oleg
• Granted Patent: US 9,177,169 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: G06F 2221/2107 File encryption

Abstract

Systems and methods for activating a token to enable a user to enter a transaction based on information received from a recovery key and a passcode are described herein.

Claims

1. A computer-implemented method comprising:

receiving from a user a request to access secure data container provided by a service provider;

identifying a location associated with the secure data container based on an identifier of the secure data container and an identifier of the service provider;

verifying that the secure data container has an active status;

identifying a directory container associated with the secure data container, the directory container identified based on a directory container identifier and including a list of file identifiers associated with files stored in file containers; and

providing access to the directory container to the user.

2. The method of claim 1, further comprising:

receiving a request from the user to add new data to the directory container;

comparing the size of data in the secure data container and the size of the new data to a maximum size of the secure data container; and

adding the new data to the secure data container in response to determining that the size of the data in the container and the new data is less than the maximum size of the secure data container.

3. The method of claim 2, the adding comprising:

creating a file container, the file container identified in part by a file identifier;

generating a file encryption key;

generating encrypted data by encrypting the new data using the file encryption key;

storing the encrypted data in the file container in a first part of the file container;

generating an encrypted file key by encrypting the file key using an encryption key associated with the user; and

storing the encrypted file key in a second part of the file container.

4. The method of claim 2, further comprising:

adding the file identifier to the list of file identifiers stored in the directory container.

5. The method of claim 4, wherein the list of file identifiers is encrypted using a directory encryption key.

6. The method of claim 1, further comprising:

enabling the service provider to change the status of a secure data container without being able to decrypt the file containers associated with the secure data container.

7. The method of claim 6, further comprising:

providing a list of a plurality of secure data containers to a service provider, the plurality of secure data containers including the secure data container;

receiving a request from the service provider to change the status of the secure data container;

identifying the location associated with the secure data container based on the identifier of the secure data container and the identifier of the service provider; and

changing the status of the secure data container.

8. The method of claim 1, further comprising:

presenting to the user a list of a plurality of secure data containers associated with the user, each secure data container provided by different service provider.

9. A system comprising:

one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising;

receiving from a user a request to access secure data container provided by a service provider;

identifying a location associated with the secure data container based on an identifier of the secure data container and an identifier of the service provider;

verifying that the secure data container has an active status;

identifying a directory container associated with the secure data container, the directory container identified based on a directory container identifier and including a list of file identifiers associated with files stored in file containers; and

providing access to the directory container to the user.

10. The system of claim 9, wherein the operations further comprise:

receiving a request from the user to add new data to the directory container;

comparing the size of data in the secure data container and the size of the new data to a maximum size of the secure data container; and

adding the new data to the secure data container in response to determining that the size of the data in the container and the new data is less than the maximum size of the secure data container.

11. The system of claim 10, the adding comprising:

creating a file container, the file container identified in part by a file identifier;

generating a file encryption key;

generating encrypted data by encrypting the new data using the file encryption key;

storing the encrypted data in the file container in a first part of the file container;

generating an encrypted file key by encrypting the file key using an encryption key associated with the user; and

storing the encrypted file key in a second part of the file container.

12. The system of claim 10, wherein the operations further comprise:

adding the file identifier to the list of file identifiers stored in the directory container.

13. The system of claim 12, wherein the list of file identifiers is encrypted using a directory encryption key.

14. The system of claim 9, wherein the operations further comprise:

enabling the service provider to change the status of a secure data container without being able to decrypt the file containers associated with the secure data container.

15. The system of claim 14, wherein the operations further comprise:

providing a list of a plurality of secure data containers to a service provider, the plurality of secure data containers including the secure data container;

receiving a request from the service provider to change the status of the secure data container;

identifying the location associated with the secure data container based on the identifier of the secure data container and the identifier of the service provider; and

changing the status of the secure data container.

16. The system of claim 9, wherein the operations further comprise:

presenting to the user a list of a plurality of secure data containers associated with the user, each secure data container provided by different service provider.

17. A computer storage medium encoded with computer program instructions that when executed by one or more computers cause the one or more computers to perform operations comprising:

receiving from a user a request to access secure data container provided by a service provider;

identifying a location associated with the secure data container based on an identifier of the secure data container and an identifier of the service provider;

verifying that the secure data container has an active status;

identifying a directory container associated with the secure data container, the directory container identified based on a directory container identifier and including a list of file identifiers associated with files stored in file containers; and

providing access to the directory container to the user.

18. The medium of claim 17, wherein the operations further comprise:

receiving a request from the user to add new data to the directory container;

comparing the size of data in the secure data container and the size of the new data to a maximum size of the secure data container; and

adding the new data to the secure data container in response to determining that the size of the data in the container and the new data is less than the maximum size of the secure data container.

19. The medium of claim 18, the adding comprising:

creating a file container, the file container identified in part by a file identifier;

generating a file encryption key;

generating encrypted data by encrypting the new data using the file encryption key;

storing the encrypted data in the file container in a first part of the file container;

generating an encrypted file key by encrypting the file key using an encryption key associated with the user; and

storing the encrypted file key in a second part of the file container.

20. The medium of claim 18, wherein the operations further comprise:

adding the file identifier to the list of file identifiers stored in the directory container.

21. The medium of claim 20, wherein the list of file identifiers is encrypted using a directory encryption key.

22. The medium of claim 17, wherein the operations further comprise:

enabling the service provider to change the status of a secure data container without being able to decrypt the file containers associated with the secure data container.

23. The medium of claim 22, wherein the operations further comprise:

providing a list of a plurality of secure data containers to a service provider, the plurality of secure data containers including the secure data container;

receiving a request from the service provider to change the status of the secure data container;

identifying the location associated with the secure data container based on the identifier of the secure data container and the identifier of the service provider; and

changing the status of the secure data container.

24. The medium of claim 17, wherein the operations further comprise:

presenting to the user a list of a plurality of secure data containers associated with the user, each secure data container provided by different service provider.