System and method for sharing data

• US 8,782,424 B2
• Filed: 12/21/2009
• Issued: 07/15/2014
• Est. Priority Date: 12/17/2009
• Status: Active Grant

• Current Assignee: IQVIA, Inc. (IQVIA Holdings, Inc.)
• Original Assignee: IMS Health Incorporated (IQVIA Holdings, Inc.)
• Inventors: Machani, Salah
• Primary Examiner(s): Gelagay, Shewaye
• Application Number:
  US12/643,701
• Publication Number:
  US 20110154456A1
• Time in Patent Office: 1,667 Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 51/214 using selective forwarding
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/24 Accounting or billing

Abstract

A system and method for sharing data is provided. A request is received from a mobile device to transfer a set of data to a recipient. The set of data is stored by a server and controlled by a user of the mobile device. The request is authenticated, and the data is encrypted. The set of data is transmitted to a recipient specified by the user via the mobile device.

Claims

1. A method for sharing data, comprising:

providing a plurality of security elements from a server in order to provision an application on a mobile device;

receiving a first request from said mobile device to transfer a set of data, said set of data being stored by said server and controlled by a user of said mobile device, said first request specifying a recipient other than said user, an authentication key derived from a plurality of said security elements, and a method of transferring said data;

authenticating said first request using said authentication key;

receiving a passphrase to be used to encrypt said set of data;

encrypting said set of data;

transmitting said encrypted set of data by said server to said recipient via said method, wherein said transmitting occurs in the absence of a second request from said recipient for said set of data and in the absence of prior communication between said mobile device and said recipient; and

providing metadata in order to enable said recipient to access said set of data on said server, wherein said set of data is represented by the metadata.

2. The method of claim 1, wherein said set of data is transmitted to said recipient via email.

3. The method of claim 2, further comprising compressing said set of data before said transmitting.

4. The method of claim 1, wherein said set of data is encrypted using a pass phrase provided by said user via said mobile device.

5. The method of claim 1, further comprising:

generating a pass phrase for encrypting said set of data; and

transmitting said pass phrase to said user via said mobile device, wherein said set of data is encrypted using said pass phrase.

6. The method of claim 1, wherein said set of data is represented by metadata stored on said mobile device.

7. The method of claim 1, wherein said first request includes a one-time password, and wherein said authenticating comprises authenticating said one-time password.

8. A computer system for sharing data, comprising:

at least one server, said server comprising at least one processor and a memory;

an interface to at least a plurality of mobile devices;

a database maintained in storage of said server for storing data and security credentials associated with users that can control said data;

an interface to provide an initial security credential from said server to a provisioning module operating on said mobile devices;

an authentication module for retrieving said security credentials stored in said database and authenticating communications received from mobile devices derived from said security credentials and determining an authentication key based at least in part on said security credentials;

an encryption module for encrypting said data, wherein said encryption module receives a passphrase to be used to encrypt said set of data; and

a network interface for receiving a first request from a user via one of said mobile devices for transmitting said encrypted set of said data to a recipient other than said user via a method specified in said first request, said set of said data being controllable by the user of said one mobile device, and for transmitting said encrypted set of said data to said recipient via said specified method after encryption by said encryption module,

wherein said transmitting occurs in the absence of a second request from said recipient for said set of data and in the absence of prior communication between said mobile device and said recipient; and

wherein a metadata is provided to enable said recipient to access said set of data on said server, wherein said set of data is represented by the metadata.

9. The computer system of claim 8, wherein said network interface transmits said set of said data to said recipient via email.

10. The computer system of claim 9, wherein said set of said data is compressed before transmission to said recipient.

11. The computer system of claim 8, wherein said encryption module encrypts said set of said data using a pass phrase provided by the user via said one mobile device.

12. The computer system of claim 8, wherein said system generates a pass phrase used by said encryption module to encrypt said set of said data.

13. The computer system of claim 12, wherein said system communicates said pass phrase to said one mobile device so that the user can communicate said pass phrase to said recipient via another channel of communication.

14. The computer system of claim 8, wherein said set of said data is represented by metadata stored on said mobile device.

15. The computer system of claim 8, wherein said communications include one-time passwords generated by the mobile devices, and wherein said authentication module authenticates said communications by authenticating said one-time passwords.

16. A method for sharing data, comprising:

providing a plurality of security elements from a server in order to provision an application executing on a mobile device;

receiving a first request, having an authentication key derived from said plurality of said security elements from said mobile device to transfer a set of data to a recipient other than a user of said mobile device via a transmission method specified in said first request, said set of data being stored by said server and controlled by a user of said mobile device;

authenticating said first request using said authentication key;

receiving a passphrase to be used to encrypt said set of data;

encrypting said set of data;

transmitting said encrypted set of data to said recipient via said specified transmission method;

wherein said transmitting occurs in the absence of a second request from said recipient for said set of data and in the absence of prior communication between said mobile device and said recipient; and

providing metadata in order to enable said recipient to access said set of data on said server, wherein said set of data is represented by the metadata.

17. The method of claim 16, wherein said making comprises:

transmitting said set of data to said recipient via email.

18. The method of claim 17, further comprising:

encrypting said set of data before said transmitting.

19. The method of claim 18, further comprising:

compressing said set of data before said transmitting.

20. The method of claim 16, wherein said set of data is access-controlled and is accessible using a pass phrase provided by said user via said mobile device.

21. The method of claim 16, further comprising:

generating a pass phrase for accessing said set of data; and

transmitting said pass phrase to said user via said mobile device.

22. The method of claim 16, wherein said set of data is represented by metadata stored in a data management application on said mobile device.

23. The method of claim 16, wherein a one-time password is transmitted with said first request, and wherein said authenticating comprises authenticating said one-time password.