CLOUD-BASED FILE DISTRIBUTION AND MANAGEMENT USING REAL IDENTITY AUTHENTICATION

• US 20140101434A1
• Filed: 02/26/2013
• Published: 04/10/2014
• Est. Priority Date: 10/04/2012
• Status: Abandoned Application

• Current Assignee: MSI Security, Ltd.
• Original Assignee: MSI Security, Ltd.
• Inventors: Senthurpandi, Janarthanan, Johnson, Joseph I.
• Application Number:
  US13/778,062
• Publication Number:
  US 20140101434A1
• Time in Patent Office: Days
• US Class Current: 713/150
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints

Abstract

Systems, devices and process for secure storage, retrieval and management of files using cloud-based hosting services are supported with a real identity authentication device and process. Biometric authentication is required for encryption/decryption of files. The real identity authentication processes are integrated with file exchange processes and API'"'"'s related to the hosting services. Systems for enabling third parties to request encrypted files, and for notifying a file owner of such requests, are supported.

Claims

1. A process for securely storing files on a cloud hosting service comprising the steps of:

providing a real identity authentication device, including a processor, a biometric input device, and a storage containing instructions for,

authenticating a user using the real identity authentication device,

receiving an upload request from the user to upload a file to the cloud hosting service;

upon receiving the upload request, automatically encrypting the file using the real identity authentication device; and

uploading the encrypted file to the cloud hosting service.

2. The process of claim 1, further comprising the step of receiving a download request and, upon receiving the download request, automatically decrypting the file using the real identity authentication device.

3. The process of claim 1, wherein the real identity authentication device performs the steps of:

receiving, using the real identity authentication device, an encrypted server biometric token;

collecting real time biometric attributes, based on biometric interaction of the user with the biometric input device;

comparing the server biometric token and the real time biometric attributes;

creating an encrypted authentication token in response to matching the server biometric token to the real time biometric attributes; and

sending the encrypted authentication token to the remote server to authenticate the user.

4. The process of claim 1, further comprising the step of receiving a request to download a file from the hosting service and in response, automatically decrypting the file securely within the storage of the real identity authentication device.

5. The process of claim 1, wherein the step of uploading the file further comprises the step of interfacing with an application programming interface on the hosting service and wherein encryption of the file is transparent to the user.

6. The process of claim 1, further comprising receiving a request from a file requestor for access to the uploaded file and, in response, granting access to the requestor based on verification of the requestor'"'"'s identity using a second real identity authentication device associated with the requestor.

7. The process of claim 1, wherein the step of receiving an upload request and the step of uploading are performed by a cloud hosting services management application on the real identity authentication device.

8. The process of claim 1, further comprising the step of displaying a number of cloud hosting service choices to the user and receiving a selection instruction from the user to indicate a selected hosting service.

9. The process of claim 1, further comprising the step of configuring the cloud hosting service using a cloud hosting services management application on the real identity authentication device.

10. A system for securely managing files on a cloud hosting service comprising:

a real identity authentication device including;

a computer-readable medium for storing data and instructions;

a biometric input device for collecting biometric information based on at least one biometric attribute of the user; and

a processor for executing the instructions stored in the computer-readable medium, the instructions, including a cloud hosting services management application which, when executed, cause the processor to perform the steps of;

authenticating a user using the real identity authentication device,

receiving an upload request from the user to upload a file to the cloud hosting service;

upon receiving the upload request, automatically encrypting the file using the real identity authentication device; and

uploading the encrypted file to the cloud hosting service.

11. The system of claim 10, further comprising a hosting services interface module on the real identity authentication device for interfacing with the cloud hosting service.

12. The system of claim 10, further comprising an upload/download module on the real identity authentication device, for managing uploading and downloading of files.

13. The system of claim 10, wherein the cloud hosting services management application provides for encryption of the file in a transparent manner, relative to the user.

14. The system of claim 10, wherein the real identity authentication device performs the steps of:

sending an authentication request to a remote server;

receiving an encrypted server biometric token from the remote server;

collecting real time biometric attributes, based on biometric interaction of the user with the biometric input device;

creating an encrypted authentication token in response to matching the server biometric token to the real time biometric attributes; and

sending the encrypted authentication token to the remote server to authenticate the user.

15. The system of claim 10, further comprising an access management module for receiving a request from a file requestor for access to the uploaded file and, in response, granting access to the requestor based on verification of the requestor'"'"'s identity using a second real identity authentication device associated with the requestor.

16. The system of claim 10, wherein the cloud hosting services management application performs the step of displaying a number of cloud hosting service choices to the user and receiving a selection instruction from the user to indicate a selected hosting service.

17. The system of claim 10, further comprising a settings module for storing settings relating to the cloud hosting service.

18. The system of claim 11, wherein the hosting service interface module includes an API for interfacing with the cloud hosting service.