Secure data storage and communication for network computing

• US 9,639,707 B1
• Filed: 01/10/2011
• Issued: 05/02/2017
• Est. Priority Date: 01/14/2010
• Status: Active Grant

• Current Assignee: Richard W. Vanderdrift
• Original Assignee: Richard W. Vanderdrift
• Inventors: VanderDrift, Richard W.
• Primary Examiner(s): Okeke, Izunna
• Assistant Examiner(s): CRIBBS, MALCOLM
• Application Number:
  US12/987,755
• Time in Patent Office: 2,304 Days
• Field of Search: None
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

A method comprising the steps of receiving a data object, obfuscating the meaning of at least a portion of the data and transmitting the data to a second processor-controlled device. In some embodiments the data may be formatted as either a spreadsheet or an XML file and the obfuscation process may operate on the elements and the attributes of the XML file. The obfuscating may include replacing meaningful data with identifiers before transmitting them to another client device or a server. In response, the other client device or server may operate on the data and return it, or optionally return code or applets to be executed on the client device. Some embodiments allow for a server or other client device to access remote resources for use when processing the data. The client devices may be cellular telephones or other smart devices including portable computers and tablets.

Claims

1. A method, including steps of

receiving one or more set of data structures from one or more client devices at a server device, wherein said server device maintains said set of data structures in a format inaccessible to unauthorized users of said set of data structures;

sending, one or more times, particular sets of data object instances from said one or more client devices to the server device, said sets of data object instances having an organization in a data structure;

at said server, causing each said set of data object instances from said client device to be operated on in accord with a set of data management rules, said steps of causing to be operated including supplying one or more applets to the client device, the applets operating at the client device to operate on one or more data object instances at the client device;

wherein, in response to said requests from said one or more client devices, performing an operation on said server device, wherein said operation changes a relationship of said plurality of data object instances to said data structure without changing attribute values of said data object instances,

sending a result of said steps of performing the operation to said client device,

wherein said steps of supplying one or more applets are performed in response to receiving partially obfuscated data object instances at said server,

wherein the server determines a particular set of applets to supply in response to said non-obfuscated portions of said partially obfuscated data object instances.

2. A method as in claim 1, including steps of

receiving, on a processor-controlled client device, said plurality of data object instances;

generating a second organization having a data structure including said plurality of data object instances having been revealed.

3. A method as in claim 1, wherein

said being hidden includes being encrypted or obfuscated.

4. A method as in claim 3, wherein

said being obfuscated includes replacing said plurality of said data object instances to be hidden with unique identifiers.

5. A method as in claim 1, wherein

said data object instances include entries and said data structure includes a relational database table.

6. A method as in claim 1, wherein said data structure includes an XML file.

7. A method as in claim 1, wherein

said data object instances include database tables and said data structure includes a relational database.

8. A method as in claim 2, wherein

said portion of said plurality of data object instances that is hidden includes said organization of said data structure.

9. A method as in claim 2, wherein

said portion of said plurality of data object instances that is hidden includes a set of attribute values of said data object instances.

10. A method as in claim 1, wherein

the applets operate at the client device on data object instances completely maintained at the client device.

11. A method as in claim 1, wherein

said steps of supplying one or more applets are performed in response to receiving obfuscated data object instances at said server.

12. A method as in claim 1, wherein

said steps of causing to be operated include steps of

supplying at least partially modified data object instances to the client device with said one or more applets,

wherein the client device executes or interprets the applets on the partially modified data object instances.