Cross-domain collaborative systems and methods

• US 8,976,008 B2
• Filed: 07/19/2012
• Issued: 03/10/2015
• Est. Priority Date: 08/24/2006
• Status: Active Grant

• Current Assignee: Privacydatasystems LLC
• Original Assignee: Privacydatasystems LLC
• Inventors: Errico, Stephen
• Primary Examiner(s): Khan, Omer S
• Application Number:
  US13/553,370
• Publication Number:
  US 20120284516A1
• Time in Patent Office: 964 Days
• Field of Search: 340/5.82, 713/168, 713/165, 713/170, 713/171, 713/186, 713/169, 713/176, 713/182, 726/7, 726/13, 726/22, 726/5, 380/255, 380/44
• US Class Current: 340/5.82
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 80/00 ICT specially adapted for facilitating communication between medical practitioners or patients, e.g. for collaborative diagnosis, therapy or health monitoring
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

The present disclosure relates to systems and methods for secure and authentic electronic cross domain collaboration between a plurality of users using a combination of biometric security, a separate and secure network infrastructure, management processes, encrypted electronic storage, and collaborative templates. In an exemplary embodiment, an cross domain collaboration system includes a server including a network interface connected to the Internet, a data store including electronic data storage, and a processor, wherein each of the network interface, the data store and the processor are communicatively coupled, and wherein the network interface, the data store and the processor are collectively configured to: biometrically authenticate a plurality of users, wherein each of the plurality of users comprises a security level and a domain; and enable cross domain collaboration between the plurality of users based on the security level of each of the plurality of users.

Claims

1. A cross domain collaboration system, comprising:

a server comprising a network interface connected to the Internet, a data store comprising electronic data storage, and a processor, wherein each of the network interface, the data store and the processor are communicatively coupled, and wherein the network interface, the data store and the processor are collectively configured to;

remotely biometrically authenticate a plurality of users, wherein each of the plurality of users comprises a security level and a domain; and

enable cross domain collaboration between the plurality of users based on the security level of each of the plurality of users;

wherein to biometrically authenticate a user of the plurality of users, the network interface, the data store and the processor are collectively configured to;

send software code to a device associated with the user;

obtain a biometric identification of the user at the device;

create a numerical index of the obtained biometric identification to form a public key at the device;

receive the public key from the device; and

authenticate the public key with a corresponding private key in an authentication database.

2. The cross domain collaboration system of claim 1, wherein each of the plurality of users communicates to the server through a secure connection over the Internet, wherein the secure connection over the Internet comprises a Hypertext Transfer Protocol Secure (HTTPS) connection, and wherein the secure connection traverses outside at least one domain of the plurality of users.

3. The cross domain collaboration system of claim 1, wherein the network interface, the data store and the processor are collectively further configured to:

enable one of the users to set up the cross domain collaboration and invite participants comprising the plurality of users; and

adjust the security level of one or more of the plurality of users, wherein the security level is adjusted downward only.

4. The cross domain collaboration system of claim 1, wherein the network interface, the data store and the processor are collectively further configured to:

register the user for biometric authentication, wherein to register comprises capturing a fingerprint scan of the user and storing the private key in the authentication database responsive to the fingerprint scan; and

set the security level of the user.

5. The cross domain collaboration system of claim 1, wherein the cross domain collaboration comprises a sharing of files comprising any of text, video, audio, file attachments, calendars, contact lists, memos, to do lists, schedules, action item lists, announcements, and task lists between the plurality of users.

6. The cross domain collaboration system of claim 5, wherein the files are stored in the data store and encrypted with one of Triple Data Encryption Standard (T-DES) and Advanced Encryption Standard (AES) encryption.

7. The cross domain collaboration system of claim 1, wherein the data store comprises a plurality of templates for the cross domain collaboration.

8. The cross domain collaboration system of claim 7, wherein the network interface, the data store and the processor are collectively further configured to:

create a new template and store the created template among the plurality of templates; and

adjust security associated with one of the plurality of templates.

9. The cross domain collaboration system of claim 1, wherein the network interface, the data store and the processor are collectively further configured to:

tag all information posted to the cross domain collaboration with a certain security level; and

restrict viewing of the information among the plurality of users based on the certain security level associated with the information.

10. The cross domain collaboration system of claim 1, wherein the network interface, the data store and the processor are collectively further configured to:

code word classify information in the cross domain collaboration responsive to an analysis of the information.

17. The cross domain collaboration method of claim 10, wherein files associated with the cross domain collaboration are stored in a secure data store and encrypted with one of Triple Data Encryption Standard (T-DES) and Advanced Encryption Standard (AES) encryption.

11. Across domain collaboration method, comprising:

receiving a selection of a template from a plurality of templates for a cross domain collaboration;

adjusting security associated with the selected template;

receiving a list of a plurality of users for the cross domain collaboration;

adjusting security associated with each of the plurality of users;

biometrically authenticating each of the plurality of users prior to participation in the cross domain collaboration; and

displaying information in the cross domain collaboration based on a security level of each user;

wherein the biometrically authenticating comprises;

sending software code to a device associated with a user of the plurality of users;

obtaining a biometric identification of the user at the device;

creating a numerical index of the obtained biometric identification to form a public key at the device;

receiving the public key from the device; and

authenticating the public key with a corresponding private key in an authentication database.

12. The cross domain collaboration method of claim 11, further comprising:

creating a custom template for the cross domain collaboration.

13. The cross domain collaboration method of claim 11, wherein the template comprises a collection of any of text, video, audio, file attachments, calendars, contact lists, memos, to do lists, schedules, action item lists, announcements, and task lists.

14. The cross domain collaboration method of claim 11, further comprising:

registering the user for biometric authentication, wherein to register comprises capturing a fingerprint scan of the user and storing the private key in the authentication database responsive to the fingerprint scan; and

setting security for the user.

15. The cross domain collaboration method of claim 11, further comprising:

communicating with each of the plurality of users through a secure connection over the Internet for the cross domain collaboration.

16. The cross domain collaboration method of claim 15, wherein the secure connection over the Internet comprises a Hypertext Transfer Protocol Secure (HTTPS) connection.

18. A secure computer system connected to a plurality of users, comprising:

a cross domain server with a network connection to the Internet;

an authentication database communicatively coupled to the hosted server;

a data store communicatively coupled to the cross domain server, wherein the data store comprises data storage for a cross domain collaboration;

a plurality of users each with a networked device connected to the Internet, wherein the networked device comprises a biometric authentication device and each of the plurality of users comprises a security level;

wherein the cross domain server is configured to host the cross domain collaboration between the plurality of users through a secure Hypertext Transfer Protocol Secure (HTTPS) connection to each of the plurality of users and through biometric authentication of each of the plurality of users prior to accessing the online collaboration, and wherein information is displayed to each of the plurality of users based upon a security level associated with each of the plurality of users; and

wherein the biometric authentication of a user of the plurality of users comprises;

sending software code from the cross domain server to the networked device;

obtaining a biometric identification of the user at the networked device;

creating a numerical index of the obtained biometric identification to form a public key at the networked device;

receiving the public key at the cross domain server from the networked device; and

authenticating the public key with a corresponding private key in the authentication database.