User-driven menu generation system with dynamic generation of target files with placeholders for persistent change or temporary security change over cloud computing virtual storage from template files

• US 8,352,444 B1
• Filed: 07/09/2012
• Issued: 01/08/2013
• Est. Priority Date: 07/11/2011
• Status: Active Grant

• Current Assignee: ZAMA Innovations LLC
• Original Assignee: CHANG, PETER HON-YOU
• Inventors: Chang, Peter Hon-You
• Primary Examiner(s): Jalil, Neveen Abel
• Assistant Examiner(s): PEACH, POLINA G
• Application Number:
  US13/544,552
• Publication Number:
  US 20130018927A1
• Time in Patent Office: 183 Days
• Field of Search: None
• US Class Current: 707/694
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

Dynamic generation of target files is described. A user can select a template file. The template file includes: at least first and second changeable fields configured to be changed persistently, and a third changeable field. The second changeable field is configured to receive a security-related value. A third changeable field includes a first value configured to be changed temporarily to receive an encrypted version of the first value. The template file is parsed to generate a user interface, including: a first prompting label, corresponding to the first changeable field, requesting the user to enter the user content value, a second prompting label, corresponding to the second changeable field, requesting that the user enter audit data and/or access control data. An encrypted version of the first value corresponding to the third changeable field is generated. The first value is temporarily replaced with the encrypted value. The target file is then generated.

Claims

1. A computer implemented method for generating a target file, comprising:

enabling a user to select a first template file, wherein the first template file includes;

a plurality of fields, including;

at least first and second changeable fields configured to be changed persistently, wherein

the first changeable field is configured to receive from a user a content value used to generate a target file;

the second changeable field is configured to receive a security-related value;

at least a third changeable field including a first value configured to be changed temporarily to receive an encrypted version of the first value,

wherein when the target file is intercepted during transmission to a first destination, the third changeable field of the target file contains the encrypted version of the first value to prevent exposure of the first value to an interceptor, wherein the encrypted version of the first value is stored with the target file during transmission, and after the target file being received at the first destination, the encrypted version of the first value will be dynamically decrypted and the third changeable field will include the first value;

one or more unchangeable fields;

parsing the first template file to generate a user interface, including;

a first prompting label, corresponding to the first changeable field, requesting the user to enter the user content value,

a second prompting label, corresponding to the second changeable field, requesting that the user enter audit data and/or access control data;

generating an encrypted version of the first value corresponding to the third changeable field, and temporarily replacing the first value with the encrypted value; and

generating the target file based at least in part on;

a user input received via the first changeable field, including the user content value,

a user input received via the second changeable field, including the audit data and/or access control data, and

on the encrypted version of the first value.

2. The method as defined in claim 1, wherein the second changeable field is configured to receive an audit trail update.

3. The method as defined in claim 1, wherein the second changeable field is configured to receive access control permission data.

4. The method as defined in claim 1, the method further comprising:

retrieving the first template file from a cloud storage system; and

dynamically generating the target file from the first template file based at least in part on user inputs received via the first changeable field, the second changeable field, and on the encrypted version of the first value.

5. The method as defined in claim 1, the method further comprising:

decrypting the encrypted version of the first value of the third changeable field at least partly in response to determining that an authorized user is accessing the first target file.

6. The method as defined in claim 1, the method further comprising:

detecting a first tag in the first template file indicating a first placeholder for the first changeable field;

at least partly in response to detecting the first tag in the first template file, extracting information of the first placeholder, and dynamically prompting the user to enter at least one value,

detecting a second tag in the first template file to indicate a second placeholder for the second changeable field;

at least partly in response to detecting the second tag in the first template file, extracting information of the second placeholder, and dynamically updating security information;

detecting a third tag in the first template file indicating a third placeholder for the third changeable field; and

at least partly in respond to detecting the third tag in the first template file, extracting the first value of the third placeholder, and replacing it by a dynamically generated encrypted value;

wherein generating the target file is performed and/or stored using a host computer or a cloud computer system.

7. The method as defined in claim 1, the method further comprising:

retrieving the first template file from a cloud storage system;

wherein generating the target file is performed dynamically, over a host computer or a cloud computer system.

8. The method as defined in claim 1, the method further comprising:

appending the generated target file with a selected second template file; and

generating a second target file based at least in part on a parsing of the generated target file with the appended selected second template file.

9. The method as defined in claim 1, the method further comprising:

appending the first changeable field with another changeable field or embedding the first changeable field within the third changeable field.

10. The method as defined in claim 1, the method further comprising using geometric equations for points, line segments, or curve segments, to encrypt the first value corresponding to the third changeable field and then to decrypt the encrypted first value.

11. The method as defined in claim 1, wherein the target file is a markup language file.

12. The method as defined in claim 1, wherein the target file is an electronic medical record file, an electronic health record file, a smartphone mobile service file, an enterprise resource planning file, a Web service file, a cloud service file, an operating system service file, or a database service file, composed of text and/or markup language.

13. The method as defined in claim 1, the method further comprising tracking the generation of the target file from the first template file using an audit trail in the form of one or more activity summary files and/or one or more tables in one or more relational databases, wherein the audit trail is describable by an object class diagram in a unified modeling language.

14. A system comprising:

one or more computing devices;

non-transitory computer readable media having instructions stored thereon that when executed by the one or more computing devices, cause the one or more computing devices to perform operations comprising;

enabling a user to select a first template file, wherein the first template file includes;

a plurality of fields, including;

at least first and second changeable fields configured to be changed persistently, wherein

the first changeable field is configured to receive from a user a content value used to generate a target file;

the second changeable field is configured to receive a security-related value;

at least a third changeable field including a first value configured to be changed temporarily to receive an encrypted version of the first value

wherein when the target file is intercepted during transmission to a first destination, the third changeable field of the target file contains the encrypted version of the first value to prevent exposure of the first value to an interceptor, wherein the encrypted version of the first value is stored with the target file during transmission, and after the target file being received at the first destination, the encrypted version of the first value will be dynamically decrypted and the third changeable field will include the first value;

one or more unchangeable fields;

parsing the first template file to generate a user interface, including;

a first prompting label, corresponding to the first changeable field, requesting the user to enter the user content value,

a second prompting label, corresponding to the second changeable field, requesting that the user enter audit data and/or access control data;

generating an encrypted version of the first value corresponding to the third changeable field, and temporarily replacing the first value with the encrypted value; and

generating the target file based at least in part on;

a user input received via the first changeable field, including the user content value,

a user input received via the second changeable field, including the audit data and/or access control data, and

on the encrypted version of the first value.

15. The system as defined in claim 14, wherein the second changeable field is configured to receive an audit trail update.

16. The system as defined in claim 14, wherein the second changeable field is configured to receive access control permission data.

17. The system as defined in claim 14, the operations further comprising:

retrieving the first template file from a cloud storage system; and

dynamically generating the target file from the first template file based at least in part on user inputs received via the first changeable field, the second changeable field, and on the encrypted version of the first value.

18. The system as defined in claim 14, the operations further comprising:

decrypting the encrypted version of the first value of the third changeable field at least partly in response to determining that an authorized user is accessing the first target file.

19. The system as defined in claim 14, the operations further comprising:

detecting a first tag in the first template file indicating a first placeholder for the first changeable field;

at least partly in response to detecting the first tag in the first template file, extracting information of the first placeholder, and dynamically prompting the user to enter at least one value,

detecting a second tag in the first template file to indicate a second placeholder for the second changeable field;

at least partly in response to detecting the second tag in the first template file, extracting information of the second placeholder, and dynamically updating security information;

detecting a third tag in the first template file indicating a third placeholder for the third changeable field; and

at least partly in respond to detecting the third tag in the first template file, extracting the first value of the third placeholder, and replacing it by a dynamically generated encrypted value;

wherein generating the target file is performed and/or stored using a host computer or a cloud computer system.

20. The system as defined in claim 14, the operations further comprising:

retrieving the first template file from a cloud storage system,

wherein generating the target file is performed dynamically, over a host computer or a cloud computer system.

21. The system as defined in claim 14, the operations further comprising:

appending the generated target file with a selected second template file; and

generating a second target file based at least in part on a parsing of the generated target file with the appended selected second template file.

22. The system as defined in claim 14, the operations further comprising:

appending the first changeable field with another changeable field or embedding the first changeable field within the third changeable field.

23. The system as defined in claim 14, the operations further comprising using geometric equations for points, line segments, or curve segments, to encrypt the first value corresponding to the third changeable field and then to decrypt the encrypted first value.

24. Non-transitory computer readable media having instructions stored thereon that when executed by a computing system, cause the computing system to perform operations comprising:

enabling a user to select a first template file, wherein the first template file includes;

a plurality of fields, including;

at least first and second changeable fields configured to be changed persistently, wherein

the first changeable field is configured to receive from a user a content value used to generate a target file;

the second changeable field is configured to receive a security-related value;

at least a third changeable field including a first value configured to be changed temporarily to receive an encrypted version of the first value,

wherein when the target file is intercepted during transmission to a first destination, the third changeable field of the target file contains the encrypted version of the first value to prevent exposure of the first value to an interceptor, wherein the encrypted version of the first value is stored with the target file during transmission, and after the target file being received at the first destination, the encrypted version of the first value will be dynamically decrypted and the third changeable field will include the first value;

one or more unchangeable fields;

parsing the first template file to generate a user interface, including;

a first prompting label, corresponding to the first changeable field, requesting the user to enter the user content value,

a second prompting label, corresponding to the second changeable field, requesting that the user enter audit data and/or access control data;

generating an encrypted version of the first value corresponding to the third changeable field, and temporarily replacing the first value with the encrypted value; and

generating the target file based at least in part on;

a user input received via the first changeable field, including the user content value,

a user input received via the second changeable field, including the audit data and/or access control data, and

on the encrypted version of the first value.