Method and system for secure digital file sharing

• US 8,862,687 B1
• Filed: 07/03/2014
• Issued: 10/14/2014
• Est. Priority Date: 05/16/2008
• Status: Active Grant

• Current Assignee: Quick Vault, Inc. (d/b/a CloudVault)
• Original Assignee: Quick Vault, Inc. (d/b/a CloudVault)
• Inventors: Bacastow, Steven V.
• Primary Examiner(s): Dharia, Rupal
• Assistant Examiner(s): Chacko, Joe
• Application Number:
  US14/323,948
• Publication Number:
  US 20140325229A1
• Time in Patent Office: 103 Days
• US Class Current: 709/213
• CPC Class Codes: G06F 11/1458 Management of the backup or restore process
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A system and method for securely storing, retrieving and sharing data using PCs and mobile devices and for controlling and tracking the movement of data to and from a variety of computing and storage devices.

Claims

1. A computer-implemented method for secure digital file sharing comprising the steps of:

a remote computer receiving from a first computer an authentication request, the authentication request comprising a first computer serial number and a unique software license key, the unique software license key associated with a software agent on the first computer in communication with the remote computer;

the remote computer determining whether the first computer is authorized for use with the remote computer by determining a valid combination of the first computer serial number and the unique software license key;

the remote computer transmitting to the first computer a validation message associated with the first computer;

the remote computer storing a first file received from the first computer in a first database, first database associated with the first computer;

the first file tagged with access rights granted by the first computer which will serve to govern the subsequent use and lifespan of the first file;

the remote computer receiving from the first computer a first detail message associated with a first file copied from the first computer to the remote computer, the first detail message comprising at least a name of the first file copied from the first computer to the remote computer;

the remote computer storing the first detail message in a meta-data log;

the remote computer receiving from a second computer an authentication request, the authentication request comprising a second computer serial number and a unique software license key, the unique software license key associated with a software agent on the second computer, the second computer in communication with the remote computer;

the remote computer determining whether the second computer is authorized for use with the remote computer by determining a valid combination of the second computer serial number and the unique software license key;

the remote computer transmitting to the second computer a validation message associated with the second computer;

the remote computer transferring a copy of the first file from the first database to a second database, second database associated with the second computer;

the remote computer receiving from the second computer a second detail message associated with the first file copied by the remote computer to the second database, the second detail message comprising at least the name of the first file copied from the remote computer to the second database; and

the remote computer storing the second detail message in the meta-data log.

2. The computer-implemented method of claim 1, wherein the first detail message further comprises at least one of:

a file type, a date created, a date transferred, an identifier for the first computer, and a volume.

3. The computer-implemented method of claim 1, wherein the second detail message further comprises at least one of:

a file type, a date created, a date transferred, an identifier for the second computer, and a volume.

4. The computer-implemented method of claim 1, wherein the first file is encrypted before being copied using an encryption key that is related to the unique software license key associated with the software agent on the first computer.

16. The computer implemented method of claim 1, wherein a secure database resident on the remote server is accessed by the first computer'"'"'s software agent using an encryption key associated with the first computer.

17. The computer implemented method of claim 1, wherein the first computer authorizes the second computer to access selected files and folders that are stored in the first database.

18. The computer implemented method of claim 1, wherein a transfer request to receive selected files and folders is initiated from the second computer.

5. A computer-implemented method for secure digital file sharing comprising the steps of:

a remote computer receiving from a first computer an authentication request, the authentication request comprising a first computer serial number and a unique software license key, the unique software license key associated with a software agent on the first computer in communication with the remote computer;

the remote computer determining whether the first computer is authorized for use with the remote computer by determining a valid combination of the first computer serial number and the unique software license key;

the remote computer transmitting to the first computer a validation message associated with the first computer;

the remote computer storing a first file received from the first computer in a first database, first database associated with the first computer;

the first file tagged with access rights granted by the first computer which will serve to govern the subsequent use and lifespan of the first file;

the remote computer receiving from the first computer a first detail message associated with a first file copied from the first computer to the remote computer, the first detail message comprising at least a name of the first file copied from the first computer to the remote computer;

the remote computer storing the first detail message in a meta-data log;

the remote computer receiving from a mobile device an authentication request, the authentication request comprising a mobile device serial number and a unique software license key the unique software license key associated with a software agent on the mobile device in communication with the remote computer;

the remote computer determining whether the mobile device is authorized for use with the remote computer by determining a valid combination of the mobile device serial number and the unique software license key;

the remote computer transmitting to the mobile device a validation message associated with the mobile device;

the remote computer transferring a copy of the first file from the first database to a second database, second database associated with the mobile device;

the remote computer receiving from the mobile device a second detail message associated with the first file copied from the remote computer to the second database, the second detail message comprising at least the name of the first file copied by the remote computer to the second database; and

the remote computer storing the second detail message in the meta-data log.

6. The computer-implemented method of claim 5, wherein the first detail message further comprises at least one of:

a file type, a date created, a date transferred, an identifier for the first computer, and a volume.

7. The computer-implemented method of claim 5, wherein the second detail message further comprises at least one of:

a file type, a date created, a date transferred, an identifier for the second computer, and a volume.

8. The computer-implemented method of claim 5, wherein the mobile device is one of a mobile storage device and a mobile communication device.

9. The computer-implemented method of claim 5, wherein the first file, copied from the first computer to the mobile device, is encrypted before being copied using an encryption key that is related to the unique software license key associated with the software agent on the first computer.

19. The computer implemented method of claim 5, wherein the first database resident on the remote server is accessed by the first computer'"'"'s software agent using the an encryption key associated with the first computer.

20. The computer implemented method of claim 5, wherein the first computer authorizes the mobile device to access selected files and folders that are stored in the first database.

21. The computer implemented method of claim 5, wherein a transfer request to receive selected files is initiated from the mobile device.

10. A computer-implemented method for secure digital file sharing, comprising the steps of:

a remote computer receiving from a first mobile device, a first mobile device serial number and a first unique software license key, the first mobile device in communication with the remote computer,

the remote computer determining whether the first mobile device is authorized for use with the remote computer by determining a valid combination of the first mobile device serial number and the first unique software license key;

upon determining that the first mobile device is authorized, the remote computer transmitting to the first mobile device a validation message associated with the first mobile device;

the remote computer receiving from the first mobile device a first file copied from the first mobile device;

the first file tagged with access rights granted by the first computer which will serve to govern the subsequent use and lifespan of the first file;

the remote computer storing the first file received from the first mobile device, the remote computer in communication with a software agent on the first mobile device;

the remote computer storing a first detail message in a meta-data log, the first detail message associated with the first file copied from the first mobile device to the remote computer, the first detail message comprising at least a name of the first file copied from the first mobile device to the remote computer;

the remote computer receiving from a second mobile device, a second mobile device serial number and a second unique software license key, the second mobile device in communication with the remote computer;

the remote computer determining whether the second mobile device is authorized for use with the remote computer by determining a valid combination of the second mobile device serial number and the second unique software license key;

upon determining that the second mobile device is authorized, the remote computer transmitting to the second mobile device a validation message associated with the second mobile device;

the remote computer transferring a copy of the first file to the second mobile device, the remote computer in communication with a software agent on the second mobile device; and

the remote computer storing in the meta-data log a second detail message associated with the first file transmitted by the remote computer to the second mobile device.

11. The computer-implemented method of claim 10, wherein the first detail message further comprises at least one of:

a file type, a date created, a date transferred, and a volume.

12. The computer-implemented method of claim 10, wherein the second detail message comprises at least one of:

a file name, a file type, a date created, a date transferred, and a volume.

13. The computer-implemented method of claim 10, wherein the first mobile device is one of a mobile storage device and a mobile communication device.

14. The computer-implemented method of claim 10, wherein the second mobile device is one of a mobile storage device and a mobile communication device.

15. The computer-implemented method of claim 10, wherein, prior to the remote computer receiving the first file, the first file is encrypted using an encryption key that is uniquely related to a software license key for a software application on the first mobile device.

22. The computer implemented method of claim 10, wherein the first database resident on the remote server is accessed by the first mobile device'"'"'s software agent using an encryption key.

23. The computer implemented method of claim 10, wherein the first mobile device transmits an authorization to the second mobile device to access selected files stored in the first database.

24. The computer implemented method of claim 10, wherein a transfer request to receive selected files is initiated from the second mobile device.