Patent · US Expired

Method and apparatus for using non-secure file servers for secure information storage

US7178021B1 · kind B1 · utility

163Cited by
8References
33Claims
0Family size

Assignee

Inventors

Key dates

Filing dateMar 2, 2000
Grant dateFeb 13, 2007
Priority date
Expiry dateMar 2, 2020

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG06F2221/2107
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

A method and apparatus for utilizing a non-secure file server for storing and sharing data securely only among clients and groups authorized to read and modify the data. A first client that desires to store data on the file server encrypts the data with a first encryption key having an associated first decryption key. The client encrypts the first decryption key with a second encryption key having an associated second decryption key known to the first client. Additionally, the first decryption key is encrypted with respective encryption keys of other clients or groups intended to have access to the data stored on the file server and the clients and groups retain their respective decryption keys. All of the encrypted first decryption keys are stored within an access control list in association with the encrypted data on the non-secure file server. In response to an indication that the data should be transmitted to one of the clients, the file server returns to the client the encrypted data along with at least the applicable encrypted first decryption key for the respective client. The client is able to decrypt the first decryption key and decrypt the data using the unencrypted first…

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.