User-driven menu generation system with dynamic generation of target files with placeholders for persistent change or temporary security change over cloud computing virtual storage from template files

• US 8,812,462 B2
• Filed: 12/20/2012
• Issued: 08/19/2014
• Est. Priority Date: 07/11/2011
• Status: Active Grant

• Current Assignee: ZAMA Innovations LLC
• Original Assignee: CHANG, PETER HON-YOU
• Inventors: Chang, Peter Hon-You
• Primary Examiner(s): PEACH, POLINA G
• Application Number:
  US13/723,051
• Publication Number:
  US 20130138947A1
• Time in Patent Office: 607 Days
• Field of Search: None
• US Class Current: 707/693
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

Dynamic generation of target files is described. A user can select a template file. The template file includes: at least first and second changeable fields configured to be changed persistently, and a third changeable field. The second changeable field is configured to receive a security-related value. A third changeable field includes a first value configured to be changed temporarily to receive an encrypted version of the first value. The template file is parsed to generate a user interface, including: a first prompting label, corresponding to the first changeable field, requesting the user to enter the user content value, a second prompting label, corresponding to the second changeable field, requesting that the user enter audit data and/or access control data. An encrypted version of the first value corresponding to the third changeable field is generated. The first value is temporarily replaced with the encrypted value. The target file is then generated.

Claims

1. A computer implemented method for generating a target file, comprising:

enabling a user to select, via a user interface, a first template file, wherein the first template file is configurable to include;

a plurality of fields, including;

first and second changeable fields configured to be changed persistently, wherein

the first changeable field is configured to receive from a user a content value used to generate a target file;

the second changeable field is configured to receive a security-related value;

a third changeable field including a first value configured to be changed temporarily to receive an encrypted version of the first value;

parsing the first template file to determine when the first, second, or third changeable fields are present;

at least partly in response to determining that the first, second, and third changeable fields are present in the first template file;

generating a user interface, including;

a first prompting label, corresponding to the first changeable field, requesting the user to enter the user content value,

a second prompting label, corresponding to the second changeable field, requesting that the user enter audit data or access control data;

generating an encrypted version of the first value corresponding to the third changeable field, and temporarily replacing the first value with the encrypted value;

transmitting the first template file over a network to a specified destination including the encrypted version of the first value corresponding to the third changeable field to prevent exposure of the first value to an interceptor, not associated with the specified destination, of the first template, wherein the encrypted version of the first value is stored with the target file during transmission, and after the target file being received at the specified destination, the encrypted version of the first value will be dynamically decrypted and the third changeable field will include the first value; and

generating the target file based at least in part on;

a user input received via the first changeable field, including the user content value,

a user input received via the second changeable field, including the audit data or access control data, and

on the encrypted version of the first value.

2. The method as defined in claim 1, wherein the second changeable field is configured to receive an audit trail update.

3. The method as defined in claim 1, wherein the second changeable field is configured to receive access control permission data.

4. The method as defined in claim 1, the method further comprising:

retrieving the first template file from a cloud storage system; and

dynamically generating the target file from the first template file based at least in part on user inputs received via the first changeable field, the second changeable field, and on the encrypted version of the first value.

5. The method as defined in claim 1, wherein the template file is adapted for system configuration of a cloud computing system and for template based text file cloud service.

6. The method as defined in claim 1, the method further comprising:

decrypting the encrypted version of the first value of the third changeable field at least partly in response to determining that an authorized user is accessing the first target file.

7. The method as defined in claim 1, wherein the user content value comprises a reference to an external file.

8. The method as defined in claim 1, the method further comprising:

detecting a first tag in the first template file indicating a first placeholder for the first changeable field;

at least partly in response to detecting the first tag in the first template file, extracting information of the first placeholder, and dynamically prompting the user to enter at least one value,

detecting a second tag in the first template file to indicate a second placeholder for the second changeable field;

at least partly in response to detecting the second tag in the first template file, extracting information of the second placeholder, and dynamically updating security information;

detecting a third tag in the first template file indicating a third placeholder for the third changeable field; and

at least partly in respond to detecting the third tag in the first template file, extracting the first value of the third placeholder, and replacing it by a dynamically generated encrypted value;

wherein generating the target file is performed or stored using a host computer or a cloud computer system.

9. The method as defined in claim 1, the method further comprising:

retrieving the first template file from a cloud storage system;

wherein generating the target file is performed dynamically, over a host computer or a cloud computer system.

10. The method as defined in claim 1, the method further comprising:

appending the generated target file with a selected second template file; and

generating a second target file based at least in part on a parsing of the generated target file with the appended selected second template file.

11. The method as defined in claim 1, the method further comprising:

appending the first changeable field with another changeable field or embedding the first changeable field within the third changeable field.

12. The method as defined in claim 1, the method further comprising using geometric equations for points, line segments, or curve segments, to encrypt the first value corresponding to the third changeable field and then to decrypt the encrypted first value.

13. The method as defined in claim 1, wherein the target file is a markup language file.

14. The method as defined in claim 1, wherein the target file is an electronic medical record file, an electronic health record file, a smartphone mobile service file, an enterprise resource planning file, a Web service file, a cloud service file, an operating system service file, or a database service file, composed of text or markup language.

15. The method as defined in claim 1, the method further comprising tracking the generation of the target file from the first template file using an audit trail in the form of one or more activity summary files or one or more tables in one or more relational databases, wherein the audit trail is describable by an object class diagram in a unified modeling language.

16. The method as defined in claim 1, wherein

the reference entered as a user input for the first changeable field refers to a second template file.

17. The method as defined in claim 16, wherein the reference to the second template file refers to a template for an electronic medical record file, including nested information addressing hierarchical medical categories, or an electronic health record file, including nested information addressing hierarchical health categories.

18. The method as defined in claim 7, wherein the reference entered as a user input for the first changeable field is a hyperlink.

19. The method as defined in claim 7, wherein the reference entered as a user input for the first changeable field refers to a text file or a non-text file, wherein the non-text file is a binary file or a graphic image file.

20. A user interface generation system, comprising:

at least one processing device;

non-transitory memory storing instructions that when executed by the at least one processing device are configured to cause the user interface generation system to perform operations comprising;

enabling a user to select, via a user interface, a first template file, wherein the first template file is configurable to include;

a plurality of fields, including;

first and second changeable fields configured to be changed persistently, wherein

the first changeable field is configured to receive from a user a content value used to generate a target file;

the second changeable field is configured to receive a security-related value;

a third changeable field including a first value configured to be changed temporarily to receive an encrypted version of the first value;

parsing the first template file to determine when the first, second, or third changeable fields are present;

at least partly in response to determining that the first, second, and third changeable fields are present in the first template file;

generating a user interface, including;

a first prompting label, corresponding to the first changeable field, requesting the user to enter the user content value,

a second prompting label, corresponding to the second changeable field, requesting that the user enter audit data or access control data;

generating an encrypted version of the first value corresponding to the third changeable field, and temporarily replacing the first value with the encrypted value;

transmitting the first template file over a network to a specified destination including the encrypted version of the first value corresponding to the third changeable field to prevent exposure of the first value to an interceptor, not associated with the specified destination, of the first template, wherein the encrypted version of the first value is stored with the target file during transmission, and after the target file being received at the specified destination, the encrypted version of the first value will be dynamically decrypted and the third changeable field will include the first value; and

generating the target file based at least in part on;

a user input received via the first changeable field, including the user content value,

a user input received via the second changeable field, including the audit data or access control data, and

on the encrypted version of the first value.

21. A computer implemented method for encryption comprising:

storing in computer readable memory an array, wherein for a first character set of a first number of characters, the characters in the first character set are represented by the array, the array including indexes from 1 to the first number,

storing in computer readable memory a first data structure that provides a one to one mapping of indexes of the array, whose corresponding array element represents a given character in the first character set, to another index of the array whose corresponding array element represents a character that represents an encrypted version of the given character,

wherein a first portion of the first data structure contains a first sequence of distinct positive integers in the range of 1 to the first number representing the indexes of the array, and a second portion of the first data structure, representing the portion of indexes mapped, by a one to one mapping, from the indexes contained in the first portion, contains a second sequence of distinct positive integer in the range from 1 to the first number ordered differently than the first sequence of distinct positive integers,

receiving, by a computer system, a first character string, the first character string including at least a portion of characters included in the first character set;

encrypting, by the computer system, the first character string by;

identifying, by the computer system, respective index values corresponding to characters in the first character string in the first array;

mapping, by the computer system, the identified index values corresponding to characters in the first character string in the first array to an encrypted version of the first character string utilizing the first data structure;

outputting, by the computer system, the encrypted version of the first character string.

22. The method as defined in claim 21, wherein the one to one mapping is determined by a mathematical formula that randomly generates non-ordered sequence of positive integers in the range from 1 to the first number.

23. The method as defined in claim 21, wherein the one to one mapping is determined by one or more geometric equations for points, line segments, or curve segments.

24. An encryption system, comprising:

at least one processing device;

non-transitory memory storing instructions that when executed by the at least one processing device are configured to cause the encryption system to perform operations comprising;

storing in computer readable memory an array, wherein for a first character set of a first number of characters, the characters in the first character set are represented by the array, the array including indexes from 1 to the first number,

storing in computer readable memory a first data structure that provides a one to one mapping of indexes of the array, whose corresponding array element represents a given character in the first character set, to another index of the array whose corresponding array element represents a character that represents an encrypted version of the given character,

wherein a first portion of the first data structure contains a first sequence of distinct positive integers in the range of 1 to the first number representing the indexes of the array, and a second portion of the first data structure, representing the portion of indexes mapped, by a one to one mapping, from the indexes contained in the first portion, contains a second sequence of distinct positive integer in the range from 1 to the first number ordered differently than the first sequence of distinct positive integers,

receiving a first character string, the first character string including at least a portion of characters included in the first character set;

encrypting the first character string by;

identifying respective index values corresponding to characters in the first character string in the first array;

mapping, by the computer system, the identified index values corresponding to characters in the first character string in the first array to an encrypted version of the first character string utilizing the first data structure;

outputting, by the computer system, the encrypted version of the first character string.

25. A cloud template based text file management system comprising:

a first cloud client, including at least a processing device, hosting a file management system configured to manage at least the creation, using a template file, editing, encryption, decryption, and backup of a first text file;

a first cloud server hosting a virtual file management system, configured to;

receive the first text file from the first cloud client,

manage at least creation and allocation of a partition of a first storage resource for the first cloud client,

perform back up of the received first text file to the first storage resource, determine when the first text file is encrypted,

at least partly in response to the determination that the first text file is encrypted and a request received from an authorized user, decrypt the received first text file,

retrieve the first text file from the first storage resource in response to a request from the first cloud client, and

provide secure communications with the first cloud client using at least;

encryption,

an audit trail, and

access control, the access control indicating who may access the first text file.

26. The system as defined in claim 25, wherein the first cloud client hosts file management drivers configured to provide services to the first cloud client, and

the first cloud server hosts:

virtual file management drivers configured to provide services to the first cloud server;

partial file system libraries, and

an operating system emulator configured to emulate at least portions of a plurality of operating systems, including at least one file management component.

27. The system as defined in claim 26, wherein the cloud template based text file management system is configured to provide services in responding to system calls including at least calls relating to opening, reading, and writing files, for the first cloud client and the first cloud server.