Distributed privacy framework system and method of implementation

• US 9,298,935 B1
• Filed: 09/20/2013
• Issued: 03/29/2016
• Est. Priority Date: 09/20/2013
• Status: Active Grant

• Current Assignee: Piyush Kumar
• Original Assignee: Piyush Kumar
• Inventors: Kumar, Piyush
• Primary Examiner(s): LIN, KENNY S
• Application Number:
  US14/033,431
• Time in Patent Office: 921 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

An apparatus, program product and method for managing access to a secure, encrypted webserver. A user computer may communicate through a cloud server with the secure webserver via an End-To-End encrypted connection. The webserver being able to run applications, receive and distribute data with similarly secured webservers and receive and distribute data between the webserver and the client computer. The End-To-End Encrypted connection may remain open until the client computer disconnects and the identity of the user is authenticated by a cloud server.

Claims

1. A method for creating and managing a distributed privacy preserving framework platform for storing a plurality of digital data and content items and launching a plurality of computer based applications between a plurality of entities connected by a computer network, comprising:

a) Providing an abstraction layer over a native operating system an underlying computer;

b) Providing an encapsulated webserver for each individual user;

c) Providing a mechanism for installation of substituent applications upon the framework platform;

d) Enabling the substituent applications to utilize network connections of the underlying computer;

e) Providing a graphical user interface for interaction with said framework platform; and

f) Providing an interface to be used by the substituent applications to read and write data on hardware of the individual user without compromising security and integrity of the corresponding computing system.

2. The method for creating and managing a distributed privacy preserving framework platform of claim 1, wherein encrypted communications between the each individual user and said webserver are formed by a method comprising:

a) The individual user entering a URL into a web browser;

b) URL being dynamically resolved using a DNS cloud to a second cloud; and

c) Second cloud acting as a dynamic real-time reverse proxy to the hardware of the individual user, thus allowing formation of an encrypted tunnel between the web browser and the hardware.

3. The method for creating and managing a distributed privacy preserving framework platform of claim 1, wherein communication between multiple entities utilizing the framework platform comprises:

a) A first device submitting a login request to a second device through the use of an internet browser and submitting authentication credentials to the second device to verify access levels of the user submitting the request;

b) A second device references ownership or privilege data that details which of said plurality of devices is allowed to access a plurality of particular digital content or data items stored on said second device;

c) Said second device confirms that said first device may access said plurality of particular digital content or data items;

d) Said second device grants access to said first device to access said plurality of particular digital content or data items; and

e) Any of said plurality of the particular digital content or data items or communication messages are transferred between said first and second devices over an encrypted network channel.

4. The method for creating and managing a distributed privacy preserving framework platform of claim 3, wherein the particular digital data or content item of the first device to be read or transferred to the second device is further cryptographically disguised by applying an algorithm wherein the bits of the particular digital data or content item are rearranged to provide a second layer of encryption.

5. The method for creating and managing a distributed privacy preserving framework platform of claim 1, wherein the each individual user is presented with a desktop application which, when installed, gives the individual user the capability to launch and maintain a plurality of data and applications on said platform.

6. The method for creating and managing a distributed privacy preserving framework platform of claim 1, wherein the each individual user of a first device authorizes one or more users of one or more corresponding second devices, through a one-way or two-way friendship, to access a plurality of files located on a first device for reading or copying onto said corresponding second device after receiving a request to read or copy said files with an authentication method, comprising:

a) The user of said corresponding second device submits identifying information through an Internet browser, said Internet browser contacts the first device through an Internet communication;

b) The user of said corresponding second device submits to the first device a request to create a trusted encrypted connection, referred to as a friendship link, which is persistent across sessions;

c) The individual user of said first device receives said request to create said trusted encrypted connection;

d) The individual user of said first device accepts or declines said request; and

e) If the individual user of said first device accepts said request, said trusted encrypted connection is formed between said first device and said corresponding second device and the individual user of said first device assigns permissions to the one or more users of said one or more corresponding second devices so that the one or more users of said corresponding second device can access and copy a whole or part of the plurality of data and applications being hosted on the first device.

7. The method for creating and managing a distributed privacy preserving framework platform of claim 6, wherein the individual user and said one or more users is the same user.

8. The method for creating and managing a distributed privacy preserving framework platform of claim 1, wherein any authorized user is able to access said plurality of substituent applications hosted on a remote disk drive via a persistent encrypted connection if said authorized user has sufficient permissions to access said remote disk drive and substituent applications.

9. The method for creating and managing a distributed privacy preserving framework platform of claim 1, wherein the digital item that is stored on the devices of said plurality of entities may be encrypted.

10. The method for creating and managing a distributed privacy preserving framework platform of claim 1, wherein said substituent applications comprise:

a) An email module;

b) A photo viewing and sharing module;

c) A search engine module;

d) A social networking module;

e) A texting or messaging module;

f) A video chatting module; and

g) An e-reader and library module.

11. The method for creating and managing a distributed privacy preserving framework platform of claim 10, wherein the content of modules and applications are entirely hosted on user controlled hardware, and remotely accessible from a network enabled device via a persistent encrypted connection once said device is verified by said user controlled hardware.

12. The method for creating and managing a distributed privacy preserving framework platform of claim 1, further comprising a pluggable architecture with an exposed API for application developers to develop and deploy applications for installation.

13. The method for creating and managing a distributed privacy preserving framework platform of claim 1, wherein private links and associated file or directory handles pointing to a data item can be generated and stored in persistent storage, said private links being registered with the webserver to make said data item publicly visible while requiring a password to become accessible.

14. The method for creating and managing a distributed privacy preserving framework platform of claim 1, wherein public links and associated file or directory handles pointing to a data item can be generated and stored in persistent storage, said public links being registered with the webserver to make said data item publicly visible while requiring a password to become accessible.