# US 10,484,340 B2 · Data encryption system by using a security key

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,484,340 B2
- Document ID: US10484340B2
- Status: Granted
- Kind: B2
- Application number: 15/296,050
- Filed: 2016-10-18
- Published: 2017-05-04
- Granted: 2019-11-19
- Earliest claimed: 2015-11-03
- Assignees: Leadot Innovation, Inc.
- Applicants: Leadot Innovation, Inc.
- Inventors: Justin Wang
- Web page: https://patentgrep.com/patent/US10484340B2

## CPC

- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- G06F 21/602: {Providing cryptographic facilities or services}
- H04L 9/0618: {Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation}
- H04L 67/04: specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
- H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46)
- H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
- H04L 67/125: involving control of end-device applications over a network
- H04W 12/033: of the user plane, e.g. user's traffic
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Data encryption system includes a data generation device, a security key mapping device, an internet transmission security device, and a receiver. The data generation device is used for generating raw data. The security key mapping device is linked to the data generation device for encrypting the raw data to generate a plurality of encrypted data blocks according to a security key. The internet transmission security device is linked to the security key mapping device for transmitting and protecting the plurality of encrypted data blocks. The receiver is linked to the internet transmission security device for receiving the plurality of encrypted data blocks.

## Claims

### Claim 1

A data encryption system, comprising:
a data generation device configured to generate raw data;
a security key mapping device linked to the data generation device and configured to partition the raw data into a plurality of data blocks, scramble allocations of the plurality of data blocks, and then encrypt a plurality of data blocks with scrambled allocations to generate a plurality of encrypted data blocks according to a security key;
an internet transmission security device linked to the security key mapping device and configured to transmit and protect the plurality of encrypted data blocks under a secure socket layer (SSL);
a receiver linked to the internet transmission security device and configured to receive the plurality of encrypted data blocks;
a memory linked to the security key mapping device and configured to save the plurality of encrypted data blocks;
a cloud storage device linked to the receiver and configured to save the plurality of encrypted data blocks; and
a management information system linked to the cloud storage device and configured to process data saved in the cloud storage device;
wherein the security key comprises a character sequence authorized by a data owner of the raw data, the internet transmission security device performs an interleaver allocation process to the plurality of encrypted data blocks enhancing communication robustness by alternating allocations of different encrypted data blocks;
wherein the data saved in the cloud storage device is accessed to transmission after the cloud storage device is authorized by the management information system, and the data generation device establishes a duplex data transmission link to the security key mapping device for performing duplex data transmissions, after the duplex data transmission link is established, the data generation device transmits a part of raw data to the security key mapping device and receives viewable data of another part of raw data restored from the plurality of encrypted data blocks through the duplex data transmission link when the data owner has the security key; and
wherein the data generation device, the security mapping device, the internet transmission security device and the management information system are implemented in a computer as software.

### Claim 2 (depends on 1)

The data encryption system of claim 1, further comprising:
a local storage device linked to the security key mapping device and configured to save the plurality of encrypted data blocks.

### Claim 3 (depends on 1)

The data encryption system of claim 1, wherein the plurality of encrypted data blocks belong to a plurality of scrambled data blocks.

### Claim 4 (depends on 1)

The data encryption system of claim 1, wherein the security key mapping device uses a polynomial code to generate the plurality of encrypted data blocks according to the security key.

### Claim 5 (depends on 1)

The data encryption system of claim 1, wherein the security key is a user password and the security key mapping device uses a block coding process to generate the plurality of encrypted data blocks according to the user password.

### Claim 6 (depends on 1)

The data encryption system of claim 1, wherein the data generation device and the security key mapping device are allocated inside the computer and the receiver is allocated inside a cloud server.
