System, Method, and Device for Delivering Communications and Storing and Delivering Data

• US 20150012758A1
• Filed: 09/22/2014
• Published: 01/08/2015
• Est. Priority Date: 04/06/2012
• Status: Active Grant

• Current Assignee: Karolyn Gee
• Original Assignee: Karolyn Gee, Wayne Odom
• Inventors: Odom, Wayne, Gee, Karolyn
• Granted Patent: US 9,043,934 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00731 involving a digital rights management system for enforcing a usage restriction
• CPC Class Codes: G11B 20/00855 involving a step of exchanging information with a remote server
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection

Abstract

A system, method, and device includes a platform data storage that stores a wrap that secures an executable controller and executable sensors. The wrap is verified, optionally through a downloaded authentication driver. After verifying the wrap, the wrap is opened and a sister of the executable controller is installed into the platform memory to cooperate with the executable controller. Additionally or alternatively, the authentication driver may cooperate with the executable controller. The executable controller allows the platform processor to access data secured in a vault and/or verify the platform to create a connection to a connection server.

Claims

1. A hardware platform comprising:

a platform processor physically associated, and in communication, with memory, wherein said platform processor is operative to run a platform operating system; and

a data storage physically separate from said memory and readable by said platform processor, wherein said data storage is operative to store, in non-volatile storage, a vault which secures data and an executable wrap which secures an executable controller and secures an executable sensor, wherein said wrap includes instructions executable by said platform processor to (a) contact a remote server separate from said platform to prompt said remote server to transmit an executable authentication driver to said platform, (b) install said authentication driver into said memory and authenticate said platform using said authentication driver, and (c) only when said platform is authenticated using said authentication driver, install said executable sensor to said memory, wherein said authentication driver in said memory cooperates with said executable controller in said data storage to automatically and continuously permit or deny access by said platform processor to only permit said platform processor to access said secure data protected by said vault when both said authentication driver in said memory and said executable controller in said data storage are accessible and to otherwise deny access, wherein said platform processor can execute only said authentication driver and is prevented by said wrap from executing said executable controller directly, and wherein said executable sensor is operative to monitor at least one of said platform and said data storage for anomalies and, upon detecting an anomaly, deny access to said secure data secured by said vault by said executable sensor deleting said authentication driver from said memory upon detecting an anomaly thereby rendering said secure data inaccessible to said platform processor.

2. The platform of claim 1 wherein said authentication driver includes instructions executable by said platform processor to erase from said memory all data written to said memory by said wrap.

3. The platform of claim 1 wherein said authentication driver includes instructions executable by said platform processor to erase from said memory all data written to said memory by said virtual operating system.

4. The platform of claim 1 wherein said wrap further includes instructions executable by said platform processor to encrypt said secure data.

5. The platform of claim 4 wherein said step of encrypting said secure data comprises:

receiving input through said platform;

receiving input from said remote server;

generating an encryption key based on said input received through said platform and said input received from said remote server; and

encrypting said secure data for storage in said vault using said encryption key.

6. The platform of claim 4 wherein said wrap further includes instructions executable by said platform processor to decrypt said secure data comprising:

receiving input through said platform;

receiving input from said remote server;

generating a decryption key based on said input received through said platform and said input received from said remote server; and

decrypting said secure data stored in said vault using said decryption key.

7. A system comprising:

an authentication server;

a hardware platform in communication with said authentication server, said platform comprising;

a platform processor physically associated, and in communication, with memory, wherein said platform processor is operative to run a platform operating system; and

a data storage physically separate from said memory and readable by said platform processor, wherein said data storage is operative to store, in non-volatile storage, a vault which secures data and an executable wrap which secures an executable controller and secures an executable sensor, wherein said wrap includes instructions executable by said platform processor to (a) contact said authentication server prompt said authentication server to transmit an executable authentication driver to said platform, (b) install said authentication driver into said memory and authenticate said platform using said authentication driver, and (c) only when said platform is authenticated using said authentication driver, install said executable sensor to said memory, wherein said authentication driver in said memory cooperates with said executable controller in said data storage to automatically and continuously permit or deny access by said platform processor to only permit said platform processor to access said secure data protected by said vault when both said authentication driver in said memory and said executable controller in said data storage are accessible and to otherwise deny access, wherein said platform processor can execute only said authentication driver and is prevented by said wrap from executing said executable controller directly and wherein said executable sensor is operative to monitor at least one of said platform and said data storage for anomalies and, upon detecting an anomaly, deny access to said secure data secured by said vault by said executable sensor deleting said authentication driver from said memory upon detecting an anomaly thereby rendering said secure data inaccessible to said platform processor;

a connection server in communication with said platform having a connection server processor operative to execute program instructions to conduct the steps of;

receiving a connection request from said platform;

authenticating said platform;

opening a connection server port identified by a connection server port address;

reconnecting to said authenticated platform via said connection server port at said connection server port address; and

communicating between said connection server and said authenticated platform via said connection server port through said virtual operating system at said authenticated platform;

a data server in communication with said connection server, said data server comprising;

a data server processor;

a data server communication device controlled by said data server processor and operative for selective communication with said connection server via ports assigned by said data server processor; and

a data server data storage readable by said data server processor, wherein said data server data storage is operative to store, in non-volatile storage, program instructions executable by said data server processor to conduct the steps of;

generating and transmitting to said connection server a polling signal via a polling port;

monitoring said polling port for a reply to said polling signal from said connection server, wherein said reply is generated by said connection server as a result of said communication with said authenticated platform;

only in response to receiving a reply to said polling signal, opening a secure random socket connection for use by said data server communication device, said secure random socket connection having a secure random socket connection address randomly selected by said data server processor and hidden from said connection server at least until after said secure random socket connection has been opened by said data server processor;

establishing a connection to said connection server via said data server communication device using said secure random socket connection opened by said data server processor;

communicating between said data server and said connection server via said secure random socket connection; and

closing said secure random socket connection after communication with said connection server has occurred.

8. The system of claim 7 wherein said program instructions executable by said connection server processor comprise communicating with said data server via said secure random socket connection without storing said communication at said connection server.

9. The system of claim 7 wherein said authentication driver includes instructions executable by said platform processor to erase from said memory all data written to said memory by said wrap.

10. The platform of claim 7 wherein said wrap further includes instructions executable by said platform processor to encrypt said secure data.

11. The platform of claim 10 wherein said step of encrypting said secure data comprises:

receiving input through said platform;

receiving input from said authentication server;

generating an encryption key based on said input received through said platform and said input received from said authentication server; and

encrypting said secure data for storage in said vault using said encryption key.

12. The platform of claim 10 wherein said wrap further includes instructions executable by said platform processor to decrypt said secure data comprising:

receiving input through said platform;

receiving input from said authentication server;

generating a decryption key based on said input received through said platform and said input received from said authentication server; and

decrypting said secure data stored in said vault using said decryption key.

13. A system comprising:

an authentication server;

a hardware platform in communication with said authentication server, said platform comprising;

a platform processor physically associated, and in communication, with memory, wherein said platform processor is operative to run a platform operating system; and

a data storage physically separate from said memory and readable by said platform processor, wherein said data storage is operative to store, in non-volatile storage, a vault which secures data and an executable wrap which secures an executable controller and secures an executable sensor, wherein said wrap includes instructions executable by said platform processor to (a) contact said authentication server prompt said authentication server to transmit an executable authentication driver to said platform, (b) install said authentication driver into said memory and authenticate said platform using said authentication driver, and (c) only when said platform is authenticated using said authentication driver, install said executable sensor to said memory, wherein said authentication driver in said memory cooperates with said executable controller in said data storage to automatically and continuously permit or deny access by said platform processor to only permit said platform processor to access said secure data protected by said vault when both said authentication driver in said memory and said executable controller in said data storage are accessible and to otherwise deny access, wherein said platform processor can execute only said authentication driver and is prevented by said wrap from executing said executable controller directly, and wherein said executable sensor is operative to monitor at least one of said platform and said data storage for anomalies and, upon detecting an anomaly, deny access to said secure data secured by said vault by said executable sensor deleting said authentication driver from said memory upon detecting an anomaly thereby rendering said secure data inaccessible to said platform processor;

a connection server in communication with said platform having a connection server processor operative to execute program instructions to conduct the steps of;

receiving a connection request from said platform;

authenticating said platform;

opening a connection server port identified by a connection server port address;

reconnecting to said authenticated platform via said connection server port at said connection server port address; and

communicating between said connection server and said authenticated platform via said connection server port;

a data server in communication with said connection server, said data server comprising;

a data server processor;

a data server communication device controlled by said data server processor and operative for selective communication with said connection server via ports assigned by said data server processor; and

a data server data storage readable by said data server processor, wherein said data server data storage is operative to store, in non-volatile storage, program instructions executable by said data server processor to conduct the steps of;

generating and transmitting to said connection server a polling signal via a polling port;

monitoring said polling port for a reply to said polling signal from said connection server, wherein said reply is generated by said connection server as a result of said communication with said authenticated platform;

only in response to receiving a reply to said polling signal, opening a secure random socket connection for use by said data server communication device, said secure random socket connection having a secure random socket connection address randomly selected by said data server processor and hidden from said connection server at least until after said secure random socket connection has been opened by said data server processor;

establishing a connection to said connection server via said data server communication device using said secure random socket connection opened by said data server processor;

communicating between said data server and said connection server via said secure random socket connection; and

selectively closing said secure random socket connection after communication with said connection server has occurred.

14. The system of claim 13 wherein said instructions executable by said connection server processor further comprise signaling said data server to maintain said secure random socket connection open to enable real-time communication between said platform and said data server.

15. The system of claim 13 wherein said program instructions executable by said connection server processor comprise communicating with said data server via said secure random socket connection without storing said communication at said connection server.

16. The system of claim 13 wherein said authentication driver includes instructions executable by said platform processor to erase from said memory all data written to said memory by said wrap.

17. The platform of claim 13 wherein said wrap further includes instructions executable by said platform processor to encrypt said secure data.

18. The platform of claim 17 wherein said step of encrypting said secure data comprises:

receiving input through said platform;

receiving input from said authentication server;

generating an encryption key based on said input received through said platform and said input received from said authentication server; and

encrypting said secure data for storage in said vault using said encryption key.

19. The platform of claim 17 wherein said wrap further includes instructions executable by said platform processor to decrypt said secure data comprising:

receiving input through said platform;

receiving input from said authentication server;

generating a decryption key based on said input received through said platform and said input received from said authentication server; and

decrypting said secure data stored in said vault using said decryption key.