SECURED CLOUD DATA STORAGE, DISTRIBUTION AND RESTORATION AMONG MULTIPLE DEVICES OF A USER

• US 20140006773A1
• Filed: 07/01/2013
• Published: 01/02/2014
• Est. Priority Date: 06/29/2012
• Status: Active Grant

• Current Assignee: Orange S.A.
• Original Assignee: Orange S.A.
• Inventors: Ahmed, Tansir, Chazalet, Boris
• Granted Patent: US 9,866,533 B2
• Time in Patent Office: Days
• US Class Current: 713/150
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08

Abstract

A method is provided to share a content stored on a secured server. The content is associated to a first electronic device and encrypted using a public key of the first electronic device. The secured server stores a first re-encryption key from the first electronic device to a second electronic device. The method is implemented by the secured server and includes the steps of determining association of the content with the second electronic device, re-encrypting the content using the first re-encryption key, sending the content to the second electronic device for encryption using a second device public key and storing the encrypted content received from the second electronic device in association with the second electronic device.

Claims

1. A method to share a content stored on a secured server, said content being associated to a first electronic device and encrypted using a public key of said first electronic device, the secured server storing a first re-encryption key from the first electronic device to a second electronic device, the method being implemented by the secured server and comprising steps of:

a) determining association of the content with the second electronic device,

b) re-encrypting the content using the first re-encryption key,

c) sending the content to the second electronic device for encryption using a second device public key, and

d) storing the encrypted content received from the second electronic device in association with said second electronic device.

2. The method according to claim 1, further comprising prior to the step a):

e) receiving a request from a third device for the content associated to the first electronic device, and

wherein the determining of step a) is based on a status of the first electronic device.

3. The method according to claim 1, wherein the determining of step a) is based on receiving a request to associate the content associated to the first electronic device to the second electronic device.

4. The method according to claim 3, the request further comprising a request to delete content associated to the first electronic device.

5. The method according to claim 1, wherein the determining of step a) is based on a status of the first electronic device.

6. The method according to claim 5, wherein the determining of step a) is further based on a status of the second electronic device.

7. The method according to claim 1, further comprising after the step d):

a step of;

f) deleting from the secured server the content being associated to the first electronic device and encrypted using the public key of said first electronic device.

8. The method according to claim 1, further comprising after the step d) a step of:

g) deleting from the secured server any re-encryption keys from or to the first electronic device.

9. A secured server for sharing content stored on a database, said content being associated to a first electronic device and encrypted using a public key of said first electronic device, the secured server storing a first re-encryption key from the first electronic device to a second electronic device, the secured server being configured to:

determine association of a content with an electronic device;

re-encrypt a content using a re-encryption key;

send a content to an electronic device for encryption using a public key; and

store an encrypted content received from an electronic device in association with said electronic device.

10. A a storage medium comprising a computer program product stored thereon and executable by a processor in the form of a software agent including at least one software module setup to implement a method to share a content stored on a secured server, said content being associated to a first electronic device and encrypted using a public key of said first electronic device, the secured server storing a first re-encryption key from the first electronic device to a second electronic device, the method being implemented by the secured server and comprising steps of:

a) determining with the processor association of the content with the second electronic device,

b) re-encrypting the content using the first re-encryption key,

c) sending the content from the secured server to the second electronic device for encryption using a second device public key, and

d) storing the encrypted content received from the second electronic device in association with said second electronic device.