AUGMENTED REALITY BASED PRIVACY AND DECRYPTION

• US 20160110560A1
• Filed: 12/30/2015
• Published: 04/21/2016
• Est. Priority Date: 12/07/2012
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Forte, Andrea, Vahlis, Evgene
• Granted Patent: US 9,600,686 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0822 using key encryption key

Abstract

A method, non-transitory computer readable medium and apparatus for decrypting a document are disclosed. For example, the method captures a tag on an encrypted document, transmits the tag to an application server of a communication network to request a per-document decryption key, receives the per-document decryption key if the tag is authenticated, and decrypts a portion of the encrypted document using a temporary decryption key contained in the tag, the tag decrypted with the per-document decryption key.

Claims

1. A method comprising:

registering, by an application server, with a communication network service provider of a communication network;

receiving, by the application server, a master public key and a private signature key from the communication network service provider;

receiving, by the application server, from a device of a user a request for a document;

encrypting, by the application server, the document with a temporary key to generate an encrypted document;

encrypting, by the application server, the temporary key with the master public key into a tag;

generating, by the application server, a signed tag with the private signature key and the tag; and

sending, by the application server, the encrypted document and the signed tag to the device of the user.

2. The method of claim 1, wherein the tag comprises a signature, an identification of a user and a time stamp, wherein the signature is generated using the private signature key.

3. The method of claim 1, wherein the encrypted document is visually encoded block by block using an n×

m matrix.

4. The method of claim 1, wherein the master public key of a master key pair is used to generate and encrypt the temporary key that is contained in the tag and the temporary key is to be used to decrypt the encrypted document.

5. The method of claim 4, wherein a per-document decryption key is generated using a private master key of the master key pair.

6. The method of claim 1, wherein the encrypted document comprises a printed document.

7. The method of claim 1, wherein the encrypted document comprises an electronic document.

8. The method of claim 1, wherein the device comprises an augmented reality device.

9. The method of claim 8, wherein the augmented reality device comprises a mobile end point device.

10. A tangible computer-readable medium storing a plurality of instructions, which when executed by a processor of an application server, cause the processor to perform operations, the operations comprising:

registering with a communication network service provider of a communication network;

receiving a master public key and a private signature key from the communication network service provider;

receiving from a device of a user a request for a document;

encrypting the document with a temporary key to generate an encrypted document;

encrypting the temporary key with the master public key into a tag;

generating a signed tag with the private signature key and the tag; and

sending the encrypted document and the signed tag to the device of the user.

11. The tangible computer-readable medium of claim 10, wherein the tag comprises a signature, an identification of a user and a time stamp, wherein the signature is generated using the private signature key.

12. The tangible computer-readable medium of claim 10, wherein the encrypted document is visually encoded block by block using an n×

m matrix.

13. The tangible computer-readable medium of claim 10, wherein the master public key of a master key pair is used to generate and encrypt the temporary key that is contained in the tag and the temporary key is to be used to decrypt the encrypted document.

14. The tangible computer-readable medium of claim 13, wherein a per-document decryption key is generated using a private master key of the master key pair.

15. The tangible computer-readable medium of claim 10, wherein the encrypted document comprises a printed document.

16. The tangible computer-readable medium of claim 10, wherein the encrypted document comprises an electronic document.

17. The tangible computer-readable medium of claim 10, wherein the device comprises an augmented reality device.

18. The tangible computer-readable medium of claim 17, wherein the augmented reality device comprises a mobile end point device.

19. An apparatus comprising:

a processor of an application server; and

a computer-readable medium storing a plurality of instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising;

registering with a communication network service provider of a communication network;

receiving a master public key and a private signature key from the communication network service provider;

receiving from a device of a user a request for a document;

encrypting the document with a temporary key to generate an encrypted document;

encrypting the temporary key with the master public key into a tag;

generating a signed tag with the private signature key and the tag; and

sending the encrypted document and the signed tag to the device of the user.

20. The apparatus of claim 19, wherein the tag comprises a signature, an identification of a user and a time stamp, wherein the signature is generated using the private signature key.