Method, apparatus, and system for secure data transport

• US 6,665,709 B1
• Filed: 03/27/2000
• Issued: 12/16/2003
• Est. Priority Date: 03/27/2000
• Status: Expired due to Term

• Current Assignee: Secure Storage Solutions LLC
• Original Assignee: Securit-e-Doc, Inc.
• Inventors: Barron, Robert H.
• Primary Examiner(s): Wiley, David
• Assistant Examiner(s): NGUYEN, PHUOC H
• Application Number:
  US09/536,203
• Time in Patent Office: 1,359 Days
• Field of Search: 709/203, 709/230, 709/249, 709/226, 709/217, 709/218, 709/201, 370/231, 707/3, 707/5, 707/10, 707/203, 707/226
• US Class Current: 709/217
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: Y10S 707/99935 Query augmenting and refining, e.g. inexact access

Abstract

A platform allowing for the secure file transfer from one location to another (internet or intranet) with virtually impregnable encryption, secure data storage, and a simple web-based user interface. A user accesses the system by a data-base authentication system requiring user name and password. The program residing on the server then generates an encryption sequence. A temporary file is created on the users'"'"'s machine upon which the user uploads the information to be sent. The information is automatically encrypted by the program and transferred to the server and the user'"'"'s temporary file deleted. The information is securely stored in the program on the server until the recipient downloads it. The recipient also accesses the server by a user name and password. The program generates a decryption program. The recipients machine receives the applet program to decrypt the file and a copy of the encrypted file. After decryption is complete, the program saves the files to a specified recipient folder, and can be automatically deleted or archived.

Claims

1. A method of encrypting data for secure transfer and storage of electronic data comprising the steps of:

accessing a conventional web browser from a client computer;

logging onto a qualified server and providing account qualifier data;

reading a transfer information inquiry page upon verification of account qualifier;

obtaining a first applet compiled on said server in response to the inquiry page, the first applet operable to perform the steps of

allowing a client to select a data file to be transferred to the qualified server,

generating a unique random encryption sequence,

encrypting the selected data file to form an encrypted data packet;

forwarding the data packet to said qualified server for storage;

storing the randomly generated encryption sequence on the qualified server; and

deleting the first applet from the client computer; and

providing a means for decrypting said cncrypted data packet comprising the steps of;

accessing a conventional web browser;

logging onto a qualified server and providing account qualifier data;

reading a transfer information inquiry page verification of account qualifier; and

obtaining a second applet compiled on the server in response to said inquiry page, the second applet operable to perform the steps of displaying files available to a recipient;

allowing the recipient to select a file to be retrieved from the qualified server;

retrieving the encrypted data packet and original encryption sequence associated with the selected file;

calculating the decryption sequence based on the original encryption sequence;

decrypting the encrypted data packet;

transferring the file to the client computer; and

deleting the second applet from the client computer.

2. The method of claim 1, wherein the software application residing on the Web server is platform-independent.

3. The method of claim 1, further including the step of compressing the encrypted data packet prior to transferring the encrypted data packet to the archive server.

4. The method of claim 3, wherein the encryption applet includes a compression program to compress the electronic data to form a compressed encrypted data packet.

5. The method of claim 1, wherein the encryption applet compiled by the software application is based on an encryption algorithm, and the encryption algorithm is changeable with respect to the software application.

6. The method of claim 1, further comprising the steps of:

providing a plurality of encryption algorithms;

selecting an encryption algorithm; and

compiling the encryption applet using the selected encryption algorithm.

7. The method according to claim 1 wherein the first applet is further operable to perform the step of providing a secondary security key.

8. The method according to claim 7, wherein said secondary security key is a digital file lock.

9. The method according to claim 1 wherein a recipient is notified of an encrypted data file residing on the qualified server by an e-mail message sent via the open SSL protocol upon submittal of said data packet to said server.

10. The method according to claim 1 wherein said account qualifier is compared against a stored database.