US 10,567,167 B1Granted

Systems and methods for encryption and provision of information security using platform services

AssigneeIonic Security Inc.

InventorsAdam Ghetti, Jeffrey Howard, James Jordan, Nicholas Smith, Jeremy Eckman, Ryan Speers, Sohaib Bhatti

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods for securing or encrypting data or other information arising from a user's interaction with software and/or hardware, resulting in transformation of original data into ciphertext. Generally, the ciphertext is generated using context-based keys that depend on the environment in which the original data originated and/or was accessed. The ciphertext can be stored in a user's storage device or in an enterprise database (e.g., at-rest encryption) or shared with other users (e.g., cryptographic communication). The system generally allows for secure federation across organizations, including mechanisms to ensure that the system itself and any other actor with pervasive access to the network cannot compromise the confidentially of the protected data.

Claims22

Dependent claims

A method, comprising the steps of:

retrieving a secure enrollment profile, wherein the secure enrollment profile comprises cryptographic identity data corresponding to a particular electronic computing device that is enrolled with a federated security platform associated with a plurality of tenants;
determining, based on the cryptographic identity data, a particular tenant corresponding to the particular electronic computing device for enabling secure tenant-specific tracking, by the platform, of electronic activities of the particular electronic computing device;
receiving, from the platform, one or more policies defining whether to perform a cryptographic operation with respect to one or more data items generated by the particular electronic computing device according to tenant-defined criteria corresponding to the particular electronic computing device;
automatically identifying the one or more data items;
automatically comparing the one or more data items to the one or more policies to determine whether to perform the cryptographic operation with respect to the one or more data items;
and
automatically performing the cryptographic operation with respect to at least one of the one or more data items.

4 more elements

A system, comprising:

a federated security platform associated with a plurality of tenants, the platform comprising a server;
and
an electronic computing device enrolled with the platform, the electronic computing device comprising a processor, the processor operative to:
retrieve, from the platform, a secure enrollment profile, wherein the secure enrollment profile comprises cryptographic identity data corresponding to the electronic computing device;
determine, based on the cryptographic identity data, a particular tenant corresponding to the electronic computing device for enabling secure tenant-specific tracking, by the platform, of electronic activities of the electronic computing device;
receive, from the platform, one or more policies defining whether to perform a cryptographic operation with respect to one or more data items generated by the electronic computing device according to tenant-defined criteria corresponding to the electronic computing device;
automatically identify the one or more data items;
automatically compare the one or more data items to the one or more policies to determine whether to perform the cryptographic operation with respect to the one or more data items;
and
automatically perform the cryptographic operation with respect to at least one of the one or more data items.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/029,996Filed 9 Jul 2018 · continuation
Priority: 5 Feb 2015
Granted: 18 Feb 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification18 codes

H04L 9/083
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…:…
G06F 21/316
User authentication: by observing the pattern of computer usage, e.g. typical user behaviour
G06F 21/602
Protecting data: providing cryptographic facilities or services
G06F 21/62
Protecting data: protecting access to data via a platform, e.g. using keys or access control rules

Family

Application62/112,638Us provisional application · filed 5 Feb 2015
Application15/017,284Parent of this continuation · filed 5 Feb 2016
Application15/469,871Parent of this continuation · filed 27 Mar 2017
US 9,608,809 B1Parent of this continuation · filed 28 Mar 2017
US 10,020,935 B1Parent of this continuation
US 10,567,167 B1This patent

From the US filing history. Foreign family members aren’t listed.