# US 11,442,624 B2 · Digital certification system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,442,624 B2
- Document ID: US11442624B2
- Status: Granted
- Kind: B2
- Application number: 16/798,355
- Filed: 2020-02-22
- Published: 2020-06-18
- Granted: 2022-09-13
- Earliest claimed: 2014-09-30
- Applicants: Anthony Tan
- Inventors: Anthony Tan
- Web page: https://patentgrep.com/patent/US11442624B2

## CPC

- G06F 3/0604: {Improving or facilitating administration, e.g. storage management}
- G06F 3/0622: {in relation to access}
- G06F 3/0631: {by allocating resources to storage systems}
- G06F 3/0644: {Management of space entities, e.g. partitions, extents, pools}
- G06F 3/0659: {Command handling arrangements, e.g. command buffers, queues, command scheduling}
- G06F 3/067: {Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]}
- G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]}
- G06F 21/335: {for accessing specific resources, e.g. using Kerberos tickets}
- G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 63/108: {when the policy decisions are valid for a limited amount of time}
- H04L 65/612: for unicast
- H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)}
- H04N 21/231: Content storage operation, e.g. caching movies for short term storage, replicating data over plural servers, prioritizing data for deletion
- H04N 21/2743: Video hosting of uploaded data from client
- G06F 2221/2137: Time limited access, e.g. to a computer or data
- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 2209/603: Digital right managament [DRM]
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION

## Abstract

A digital certification system (or “analyzer”) provides protection for digital content stored on servers, file sharing systems, hard drives and USB enabled external drives or other digital repositories. The analyzer prevents unauthorized access from both owners/administrators and recipients of digital content being shared through a web based or file sharing type service. The analyzer protects the owner of the shared digital content from unauthorized access, while allowing multiple protection instances to be applied to multiple digital content shares within a digital file hosting and sharing environment. Timers are provided to limit access to digital content at the discretion of the owner of the digital content.

## Claims

### Claim 1

A digital certification system for digital content comprising:
one or more communication devices, wherein, in operation, the one or more communication devices receive first identification information and second identification information from one or more client devices;
one or more processors, wherein, in operation, the one or more processors:
verify the first identification information and establish a first secure session;
request the second identification information from the one or more client devices via the first secure session; and
verify the second identification information and establish a second secure session;
wherein a subset of the digital content is accessible to the one or more client devices only after verification of the first identification information and the second identification information;
a first timer, wherein at least one of the first secure session and the second secure session is terminated based on the first timer; and
a second timer, wherein access to at least a portion of the subset of the digital content is prevented based on the second timer.

### Claim 2 (depends on 1)

The digital certification system of claim 1, wherein the first timer measures inactivity and at least one of the first secure session and the second secure session is terminated based on a predefined period of inactivity.

### Claim 3 (depends on 1)

The digital certification system of claim 1, wherein the first timer measures an elapsed time since at least one of the first secure session and the second secure session was established and the at least one of the first secure session and the second secure session is terminated after a predefined period of time.

### Claim 4 (depends on 1)

The digital certification system of claim 1, wherein the second timer measures an elapsed time since the at least a portion of the subset of the digital content was made accessible and access to the at least a portion of the subset of digital content is not possible after a predefined period of time.

### Claim 5 (depends on 1)

The digital certification system of claim 1, wherein the second timer is preset to a calendar date and the at least a portion of the subset of the digital content is not accessible after the calendar date.

### Claim 6 (depends on 1)

The digital certification system of claim 1, wherein the second identification information is received after the first secure session is established.

### Claim 7 (depends on 1)

The digital certification system of claim 1, wherein the first identification information comprises authentication information and the second identification information comprises a token transmitted to the communication device.

### Claim 8 (depends on 7)

The digital certification system of claim 7, further comprising a third timer, wherein the third timer is activated when the token is transmitted to the communication device and verification of the token is not permitted after a predefined period of time measured by the third timer.

### Claim 9

A digital certification system for digital content comprising:
one or more communication devices, wherein, in operation, the one or more communication devices receive first identification information and second identification information from one or more client devices;
a first timer;
a second timer; and
one or more processors, wherein, in operation, the one or more processors:
verify the first identification information and establish a first secure session;
request the second identification information from the one or more client devices via the first secure session; and
verify the second identification information and establish a second secure session;
wherein a subset of the digital content is accessible to the one or more client devices only after verification of the first identification information and the second identification information and during the second secure session;
wherein at least one of the first secure session and the second secure session is terminated based on the first timer; and
wherein access to at least a portion of the subset of the digital content is prevented based on at least one of the first timer and the second timer.

### Claim 10 (depends on 9)

The digital certification system of claim 9, wherein the verification of the second identification, establishment of the second secure session, or both occurs only during a predefined period of time measured by the second timer.

### Claim 11 (depends on 9)

The digital certification system of claim 9, wherein the second timer measures an elapsed time since the at least a portion of the subset of the digital content was made accessible and the at least a portion of the subset of the digital content is not accessible after a predefined period of time.

### Claim 12 (depends on 9)

The digital certification system of claim 9, wherein the first timer measures inactivity and at least one of the first secure session and the second secure session is terminated based on a predefined period of inactivity.

### Claim 13 (depends on 9)

The digital certification system of claim 9, wherein the first timer measures an elapsed time since at least one of the first secure session and the second secure session was established and the at least one of the first secure session and the second secure session is terminated after a predefined period of time.

### Claim 14 (depends on 9)

The digital certification system of claim 9, wherein the second secure session can only be established during the first secure session.

### Claim 15

A method for accessing digital content with a digital certification system comprising:
receiving first identification information and second identification information from one or more client devices via one or more communication devices;
verifying the first identification information and establishing a first secure session;
requesting the second identification information from the one or more client devices via the first secure session;
verifying the second identification information and establishing a second secure session wherein a subset of the digital content is accessible to the one or more client devices only after verification of the first identification information and the second identification information;
terminating at least one of the first secure session and the second secure session based on a first timer; and
terminating access to at least a portion of the subset of the digital content based on a second timer.

### Claim 16 (depends on 15)

The method of claim 15, wherein the first timer measures inactivity and at least one of the first secure session and the second secure session is terminated based on a predefined period of inactivity.

### Claim 17 (depends on 15)

The method of claim 15, wherein the second timer measures an elapsed time since at least a portion of the subset of the digital content was made accessible and the at least a portion of the subset of the digital content is not accessible after a predefined period of time.

### Claim 18 (depends on 15)

The method of claim 15, wherein the first timer measures an elapsed time since at least one of the first secure session and the second secure session was established and the at least one of the first secure session and the second secure session is terminated after a predefined period of time.

### Claim 19 (depends on 15)

The method of claim 15, wherein second timer is a preset calendar date and at least a portion of the subset of the digital content is not accessible after the preset calendar date.

### Claim 20 (depends on 15)

The method of claim 15, wherein the second identification information is received after the first secure session is established.