Secure resource distribution through encrypted pointers

• US 7,441,116 B2
• Filed: 12/30/2002
• Issued: 10/21/2008
• Est. Priority Date: 12/30/2002
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Cheng, Li-Te
• Primary Examiner(s): NGUYEN, MINH DIEU T
• Application Number:
  US10/331,398
• Publication Number:
  US 20040128535A1
• Time in Patent Office: 2,122 Days
• Field of Search: 380/45, 380/259, 380/277, 380/282, 713/162, 713/193, 726/28, 705 75- 76, 709/245, 709227-228
• US Class Current: 713/162
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06Q 20/3821 Electronic credentials

Abstract

A secure pointer. The secure pointer can include an encrypted pointer to a resource disposed in a communicatively coupled computing device. The secure pointer also can include a network address of a server computing device able to locate the resource based upon a decrypted form of the encrypted pointer. Finally, the secure pointer can include an encrypted wrapper about the encrypted pointer and the network address. Notably, the encrypted pointer can be encrypted and decrypted according to a local encryption/decryption key known to the server computing device. Yet, the encrypted wrapper can be encrypted according to a public encryption key while the encrypted wrapper can be decrypted according to a private encryption key corresponding to the public encryption key.

Claims

1. A method for securely distributing a requested resource to a requesting client over a computer communications network, the method comprising steps of:

identifying a public encryption key for a requesting client requesting the requested resource;

locating the requested resource;

composing a pointer to the requested resource based upon said location and encrypting said composed pointer using a local encryption/decryption key;

combining said encrypted pointer with a network address of a server coupled to a decoding processor configured to decrypt said encrypted pointer with said local encryption/decryption key to return the requested resource to the requesting client; and

,

encrypting said combination with said public encryption key and forwarding said encrypted combination to the requesting client;

whereby the requesting client both can decrypt said encrypted combination using a private encryption key corresponding to said public encryption key, and also can access the requested resource by transmitting said combination to said server coupled to said decoding processor.

2. The method of claim 1, further comprising the steps of:

receiving said combination in said server coupled to said decoding processor;

extracting said encrypted pointer from said combination and decrypting said encrypted pointer in said decoding processor using said local encryption/decryption key;

locating the requested resource at a location specified by said pointer; and

,

retrieving the requested resource at said location and forwarding said retrieved requested resource to the requesting client.

3. The method of claim 1, wherein said composing step further comprises the step of composing said pointer based upon an identity of the requesting client.

4. The method of claim 3, wherein said composing step further comprises the step of composing said pointer based upon a usage policy for the requested resource.

5. The method of claim 3, wherein said composing step further comprises the step of composing said pointer with a cookie intended for disposition in the requesting client.

6. The method of claim 1, wherein the requested resource is a multimedia resource selected from the group consisting of a music file, an image file and a video file.

7. The method of claim 1, further comprising the step of encoding said pointer using extensible markup language markup language tags.

8. The method of claim 1, wherein said forwarding step comprises the step of establishing a secured sockets layer session with the requesting client and transmitting said combination according to the hypertext transfer protocol.