PRIVATE PEER-TO-PEER NETWORK PLATFORM FOR SECURE COLLABORATIVE PRODUCTION AND MANAGEMENT OF DIGITAL ASSETS

• US 20150074389A1
• Filed: 10/28/2014
• Published: 03/12/2015
• Est. Priority Date: 04/05/2010
• Status: Abandoned Application

• Current Assignee: CLOUDPIC GLOBAL INC.
• Original Assignee: CLOUDPIC GLOBAL INC.
• Inventors: Chuang, Richard, Debry, David Franklyn
• Application Number:
  US14/526,307
• Publication Number:
  US 20150074389A1
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: G06F 16/1834 implemented based on peer-to-peer networks, e.g. gnutella p2p communication protocols H04L67/104
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols

Abstract

Asset management systems and methods are presented. In one embodiment, a system includes a computing resource associated with a project member. A project container is stored on the computing resource, wherein the project container comprises encrypted objects related to a project. The encrypted objects includes project metadata and one or more working objects associated with one or more sub-projects of which the project member is granted permissioned access. An encryption/decryption engine is included for encrypting and decrypting the encrypted objects. The system includes an archive file system for storing the encrypted objects and previous versions of the objects, and a façade file system for viewing and accessing and interacting with the one or more working objects. Other computing resources associated with other project members are similarly configured, wherein a plurality of project containers store distributed objects that are grouped within the project. An authentication server provides authenticated access to each of the plurality of project containers, and authenticated peer-to-peer communication between the plurality of project containers.

Claims

1-18. -18. (canceled)

19. A system for asset management, comprising:

a first computing resource associated with a first project member;

a first project container stored on said first computing resource, wherein said first project container comprises first encrypted objects related to a project, wherein said first encrypted objects comprises first project metadata and one or more working objects associated with one or more sub-projects of which said first project member is granted permissioned access;

an encryption/decryption engine for encrypting and decrypting said first encrypted objects;

a first archive file system for storing said first encrypted objects; and

a faç

ade file system for providing access to and storing a copy of said one or more working objects.

20. The system of claim 19, further comprising:

said first file system for storing previous versions of said first encrypted objects for purposes of version control.

21. The system of claim 19, further comprising:

a second computing resource associated with a second project member, wherein said second project member is associated with said project;

a second project container stored on said second computing resource, wherein said second project container comprises second encrypted objects related to said project, wherein said second encrypted objects comprises second project metadata and one or more working objects associated with one or more sub-projects of which said second project member is granted permissioned access.

22. The system of claim 21, further comprising:

distributed objects stored on said first and second project containers grouped within said project.

23. The system of claim 21, further comprising:

an authentication engine for authenticating said first project member to said project in response to a first authentication request, and for authenticating said second project member to said project in response to a second authentication request, and for authenticating communications between said first and second project members, wherein an object and metadata related to said object delivered from said first computing resource to said second computing resource does not pass through said authentication engine.

24. The system of claim 21, further comprising:

a communication network supporting said first and second communication resources and said authentication server; and

a secure peer to peer communication session between said first and second computing resources for delivering said distributed objects.

25. The system of claim 21, further comprising:

a new object committed to said first project container and stored in said first project container in encrypted form, and delivered to said second computing resource authorized to receive said new object over a secure peer to peer communication session;

new metadata associated with said new object, wherein said new metadata is stored in said first project container in encrypted form, and separately delivered from said first computing resource to said second computing resource over said secure peer to peer communication session.

26. The system of claim 21, further comprising:

one or more objects within said distributed objects associated with a tag, wherein an action is performed on said tagged objects as a group.

27. A system for asset management, comprising:

an authentication engine configured for authenticating a computing resource over a communication network in response to an authentication request for access to an encrypted project container stored on said computing resource, wherein said computing resource is associated with a first project member to a project, wherein said encrypted project container is associated with a plurality of encrypted project containers stored on a plurality of computing resources of a plurality of project members, wherein distributed objects stored on said plurality of project containers are grouped within said project.

28. The system of claim 27, wherein said authentication engine is configured to compare said project member to a list of authorized members granted access to said plurality of project containers.

29. The system of claim 28, wherein said authentication engine is configured to modify said list of authorized members.

30. The system of claim 27, further comprising:

an encryption drive key generated by said authentication engine, wherein said encryption drive key enables access to encrypted objects stored in said encrypted project container.

31. The system of claim 30,wherein said encryption drive key is configured to decrypt an object received from said encrypted project container.

32. The system of claim 30, wherein said encryption drive key is configured to encrypt an object stored into said encrypted project container.

33. The system of claim 30, wherein said encryption drive key enables access to said encrypted objects grouped under a sub-project of said project.

34. The system of claim 27, wherein said authentication engine is configured for authenticating communications between computing resources of said plurality of project members, and wherein said system further comprises:

a session key pair generated by said authentication engine, wherein a first half of said session key pair is delivered to a remote computing resource and a second half of said session key pair is delivered to another computing resource associated with another project member, wherein said session key pair is used to establish a secure peer-to-peer communication session between said remote computing resource and another computing resource over a communication network.

35. The system of claim 34, further comprising:

a kill command generated by said authentication engine and delivered to at least one of said plurality of computing resources of said plurality of project members, wherein said kill command disables access to a corresponding project container.

36. The system of claim 27, wherein said authentication engine is configured to provide network address translation information to said plurality of computing resources to facilitate peer-to-peer communication between said computing resources.