# US 10,482,266 B2 · System and methods for using cipher objects to protect data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,482,266 B2 - Document ID: US10482266B2 - Status: Granted - Kind: B2 - Application number: 15/704,735 - Filed: 2017-09-14 - Published: 2018-06-07 - Granted: 2019-11-19 - Earliest claimed: 2011-12-09 - Assignees: Sertainty Corporation - Applicants: SertintyONE Corporation - Inventors: Gregory Scott Smith; Melani Leigh Smith Weed; Daniel Michael Fischer; Elke M. Ridenour - Web page: https://patentgrep.com/patent/US10482266B2 ## CPC - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F 21/606: {by securing the transmission between two devices or processes} - H04L 63/104: {Grouping of entities} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04W 4/185: {by embedding added-value information into content, e.g. geo-tagging} - G06F 2221/2107: File encryption - G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems, methods, and devices configured to build and utilize an intelligent cipher transfer object are provided. The intelligent cipher transfer object includes a set of participants protected by cloaking patterns. A portable dynamic rule set, which includes executable code for managing access to the protected set of participants, is included within the intelligent cipher transfer object. For a given user, the intelligent cipher transfer object may provide access to some of the participants while preventing access to other participants, based on the portable dynamic rule set therein. ## Claims ### Claim 1 A system for improved security of computer systems, comprising: a computer-readable medium having computer-executable instructions stored thereon, the instructions comprising: a computer-based intelligent cipher transfer object comprising a digital mixture of a set of participants, said set of participants comprising: owner data; one or more outer cloaking patterns configured to be applied to the set of participants such that an interim cipher object is created; and a portable dynamic rule set, said portable dynamic rule set comprising an identity module, an intelligence module, and one or more inner cloaking patterns, each inner cloaking pattern including (i) a transformation to be applied to some participants of the set of participants and (ii) a description for reversing the transformation; wherein, in response to execution by one or more processors of the system, the instructions cause the intelligent cipher transfer object to internally perform the steps of: receiving, from an external agent, a request to access some or all of the set of participants; attempting to verify that the external agent is authorized to access some or all of the set of participants as requested; and upon verifying that the external agent is authorized, providing access to some or all of the set of participants for which the external agent has been verified for access, without providing access to unauthorized portions of the set of participants. ### Claim 2 (depends on 1) The system of claim 1, wherein the portable dynamic rule set is located at variable locations within the intelligent cipher transfer object. ### Claim 3 (depends on 1) The system of claim 1, wherein the intelligence module is located at variable locations within the intelligent cipher transfer object. ### Claim 4 (depends on 1) The system of claim 1, wherein the portable dynamic rule set includes at least one rule that identifies which external agents may access some or all of the set of participants, and a context in which a particular external agent may access some or all of the set of participants. ### Claim 5 (depends on 4) The system of claim 4, wherein the context in which a particular external agent may access some or all of the set of participants comprise one or more of the following: a time period, a location, or an identity of a computing device. ### Claim 6 (depends on 1) The system of claim 1, wherein the set of participants further comprise mixture metadata. ### Claim 7 (depends on 6) The system of claim 6, wherein the mixture metadata includes information which inner or outer cloaking pattern or patterns are used to access each participant of the set of participants. ### Claim 8 (depends on 1) The system of claim 1, further wherein the intelligent cipher transfer object internally performs the steps of: upon failing to verify that the external agent is authorized, executing at least one rule in the portable dynamic rule set, wherein the at least one rule causes one or more of: the intelligent cipher transfer object to self-destruct; a message or alert to be sent to the data owner; or a record of the access request to be stored in the intelligent cipher transfer object. ### Claim 9 (depends on 1) The system of claim 1, further wherein the intelligent cipher transfer object internally performs the steps of: upon providing access to some or all of the set of participants for which the external agent has been verified for access, executing at least one rule in the portable dynamic rule set, wherein the at least one rule causes one or more of: a message or alert to be sent to the data owner; a record of the access request to be stored in the intelligent cipher transfer objects; a signature of the requesting agent to be associated with the requested participant or participants; or at least one rule in the portable dynamic rule set to be added, modified, or deleted. ### Claim 10 (depends on 1) The system of claim 1, wherein the intelligent cipher transfer object is nested within a second intelligent cipher transfer object. ### Claim 11 (depends on 10) The system of claim 10, wherein the inner cloaking patterns are used to cloak the owner data, identity module, intelligence module, or combinations thereof. ### Claim 12 (depends on 10) The system of claim 10, wherein the second intelligent cipher transfer object is nested within one or more additional intelligent cipher transfer objects. ### Claim 13 A system for improved security using digital signatures or verifications, comprising: a computer-readable medium having computer-executable instructions stored thereon, the instructions comprising: a self-governing, self-controlling, self-protecting personal identity appliance, said personal identity appliance comprising a computer-based intelligent cipher transfer object comprising a digital mixture of a set of participants, said set of participants comprising: one or more outer cloaking patterns configured to be applied to the set of participants such that an interim cipher object is created; and a portable dynamic rule set, said portable dynamic rule set comprising an identity module, an intelligence module, and one or more inner cloaking patterns, each inner cloaking pattern including (i) a transformation to be applied to some participants of the set of participants and (ii) a description for reversing the transformation. ### Claim 14 (depends on 13) The system of claim 13, wherein the portable dynamic rule set is located at variable locations within the intelligent cipher transfer object. ### Claim 15 (depends on 13) The system of claim 13, wherein the intelligence module is located at variable locations within the intelligent cipher transfer object. ### Claim 16 (depends on 13) The system of claim 13, wherein the inner cloaking patterns are used to cloak the identity module, intelligence module, or combinations thereof.