SECURE DECENTRALIZED CONTENT MANAGEMENT PLATFORM AND TRANSPARENT GATEWAY

• US 20150215291A1
• Filed: 12/05/2014
• Published: 07/30/2015
• Est. Priority Date: 12/05/2013
• Status: Abandoned Application

• Current Assignee: Otman A Basir, Tarek A.M. Abdunabi
• Original Assignee: Otman A Basir, Tarek A.M. Abdunabi
• Inventors: Basir, Otman A, Abdunabi, Tarek A.M.
• Application Number:
  US14/561,901
• Publication Number:
  US 20150215291A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]

Abstract

An apparatus and method for private, peer-to-peer, and end-to-end content delivery, management, and access is disclosed. Content examples may include encrypted email, Instant Messaging (IM), and Voice over Internet Protocol (VoIP) communications. The disclosed apparatus, hereafter referred to as Personal Portable Device, is a small device that is owned by the service'"'"'s subscribers. A Personal Portable Device is connected to its owner'"'"'s home Internet router via Ethernet cable (or Wi-Fi). Then, the Internet router is configured to forward ports on the Personal Portable Device to allow incoming requests. In one embodiment, two (or more) owners of the Personal Portable Devices communicate securely over the Internet. Each device acts as a standalone web server with email, IM, and VoIP servers. Portable Personal Devices communicate with each other over the Internet in peer-to-peer fashion, and automatically handle the generation and exchange of encryption/decryption keys.

Claims

1. A network communication system comprising:

first and second personal portable devices each including a CPU, web server and cryptography engine;

first and second email clients connected to the first and second personal portable devices, respectively, via secure connections;

the first personal portable device configured to receive communications from the first email client and to send the communications to the second personal portable device via a peer-to-peer connection, which is configured to deliver the communications to the second email client.

2. The network communication system of claim 1 wherein the first and second personal portable devices exchange encryption/decryption keys and the first personal portable device uses the keys to encrypt the communications before sending them to the second personal portable device, and the second personal portable device uses the keys to decrypt the communications.

3. A system for secure, decentralized network communication including:

a. interfaces for local and/or remote networks,

b. servers to accept, secure, share, and/or store-and-forward local or remote content, and

c. usage-based access controls.

4. The system in claim 3 wherein the security logic is encapsulated within a network appliance.

5. The system in claim 4 wherein the network appliance additionally provides network routing capabilities.

6. The system in claim 3 wherein network communication includes secure content, examples of which include store-and-forward message-based content (email, instant messaging), and streaming content (voice communication).

7. The system in claim 6 wherein secure content can be accessed from remote computer without installing software and without modification of the remote computer.

8. The system in claim 6 wherein one or more recipients of the content are known and authenticated with a compatible secure communication system, and secure content is transferred only to these authenticated recipients.

9. The system in claim 6 wherein one or more recipients of the content cannot be authenticated or do not have a compatible secure communication system, and information is transferred to these recipients with options to self-authenticate and access the content directly.

10. The system in claim 5 further providing secure communication channels transparently to connected computers, without requiring additional software to be installed on the connected computers.

11. The system in claim 6 further connected with a second system to form a secure point-to-point tunnel for communication.

12. The system in claim 9 wherein the self-authentication process is performed locally to access secured content (i.e. a secured message is delivered and remains secured until successfully authenticated, not just the instructions to remotely access the message).

13. The system in claim 6 further with one or more user accounts and automatic generation of user accounts for recipients of new content.

14. The system in claim 9 further providing options to send standard, unsecured content to recipients (fallback mechanism).

15. The system in claim 3 further providing archival options in local, remote, or distributed storage systems.

16. The system in claim 15 further providing secure wipe actions triggered by one or more of:

remote trigger, false password, failed access attempts, or elapsed time without receiving a predetermined cue (keep-alive).

17. The system in claim 15 further providing controls for the sender of content to specify and automatically enforce its lifespan where the content is permanently removed at;

(a) a specific date and time, (b) a specific duration after the content is accessed by the recipient, or (c) on the receipt or absence of receipt of a trigger from the sender.

18. The system in claim 15 further providing controls for the recipient of content to specify and automatically enforce its lifespan where the content is permanently removed or archived at;

(a) a specific date and time, or (b) a specific duration after the content is accessed.

19. The system in claim 6 further providing controls for the sender of content to receive and/or monitor information about the state of the content, where state may include;

in transit, delivered, opened, archived, deleted, forwarded, or permanently removed due to a trigger.