# US 11,909,862 B2 · Sharing access to data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,909,862 B2 - Document ID: US11909862B2 - Status: Granted - Kind: B2 - Application number: 18/131,145 - Filed: 2023-04-05 - Published: 2023-08-10 - Granted: 2024-02-20 - Earliest claimed: 2021-09-21 - Assignees: Uab 360 It - Applicants: Uab 360 It - Inventors: Mindaugas Valkaitis - Web page: https://patentgrep.com/patent/US11909862B2 ## CPC - H04L 9/0819: {Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062)} - H04L 9/0618: {Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation} - H04L 9/0822: {using key encryption key} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords} - H04L 9/0869: {involving random numbers or seeds} - H04L 9/30: Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy - H04L 9/3073: {involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing} - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 63/045: {wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption (cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14)} - H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)} - H04L 2463/062: applying encryption of the keys - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method including configuring, by an infrastructure device, a first device to determine a symmetric sharing encryption key based at least in part on a content access private key of a content access key pair associated with encrypted content and an assigned public key associated with a second device; configuring, by the infrastructure device, the first device to encrypt the content access private key of the content access key pair associated with the encrypted content utilizing the sharing encryption key; and configuring, by the infrastructure device, the first device to transmit the encrypted content access private key to enable the second device to access the encrypted content is disclosed. Various other aspects are contemplated. ## Claims ### Claim 1 A method, comprising: configuring, by an infrastructure device, a first device to determine a symmetric sharing encryption key based at least in part on a content access private key of a content access key pair associated with encrypted content and an assigned public key associated with a second device; configuring, by the infrastructure device, the first device to encrypt the content access private key of the content access key pair associated with the encrypted content utilizing the sharing encryption key; and configuring, by the infrastructure device, the first device to transmit the encrypted content access private key to enable the second device to access the encrypted content. ### Claim 2 (depends on 1) The method of claim 1, further comprising: configuring the first device to transmit a request to receive the assigned public key associated with the second device; and configuring the first device to receive, based at least in part on transmitting the request, the assigned public key associated with the second device. ### Claim 3 (depends on 1) The method of claim 1, further comprising: configuring the first device to encrypt data utilizing the assigned public key associated with the second device; configuring the first device to transmit the encrypted data to the second device; and configuring the first device to receive decrypted data from the second device. ### Claim 4 (depends on 1) The method of claim 1, wherein configuring the first device to determine the symmetric sharing encryption key includes configuring the first device to determine the symmetric sharing encryption key based at least in part on combining the content access private key and the assigned public key. ### Claim 5 (depends on 1) The method of claim 1, further comprising: configuring the first device to encrypt the content utilizing a randomly generated key, which is a symmetric key. ### Claim 6 (depends on 1) The method of claim 1, further comprising: configuring the first device to verify an authenticity of the assigned public key associated with the second device. ### Claim 7 (depends on 1) The method of claim 1, wherein the first device is associated with a first registered account having authorized access to the encrypted content. ### Claim 8 An infrastructure device, comprising: a memory; and a processor communicatively coupled to the memory, the memory and the processor being configured to: configure a first device to determine a symmetric sharing encryption key based at least in part on a content access private key of a content access key pair associated with encrypted content and an assigned public key associated with a second device; configure the first device to encrypt the content access private key of the content access key pair associated with the encrypted content utilizing the sharing encryption key; and configure the first device to transmit the encrypted content access private key to enable the second device to access the encrypted content. ### Claim 9 (depends on 8) The infrastructure device of claim 8, wherein the memory and the processor are configured to: configure the first device to transmit a request to receive the assigned public key associated with the second device; and configure the first device to receive, based at least in part on transmitting the request, the assigned public key associated with the second device. ### Claim 10 (depends on 8) The infrastructure device of claim 8, wherein the memory and the processor are configured to: configure the first device to encrypt data utilizing the assigned public key associated with the second device; configure the first device to transmit the encrypted data to the second device; and configure the first device to receive decrypted data from the second device. ### Claim 11 (depends on 8) The infrastructure device of claim 8, wherein, to configure the first device to determine the symmetric sharing encryption key, the memory and the processor are configured to configure the first device to determine the symmetric sharing encryption key based at least in part on combining the content access private key and the assigned public key. ### Claim 12 (depends on 8) The infrastructure device of claim 8, wherein the memory and the processor are configured to: configure the first device to encrypt the content utilizing a randomly generated key, which is a symmetric key. ### Claim 13 (depends on 8) The infrastructure device of claim 8, wherein the memory and the processor are configured to: configure the first device to verify an authenticity of the assigned public key associated with the second device based at least in part on receiving decrypted sample data from the second device. ### Claim 14 (depends on 8) The infrastructure device of claim 8, wherein the first device is associated with a first registered account having authorized access to the encrypted content. ### Claim 15 A non-transitory computer-readable medium configured to store instructions, which when executed by a processor associated with an infrastructure device, configure the processor to: configure a first device to determine a symmetric sharing encryption key based at least in part on a content access private key of a content access key pair associated with encrypted content and an assigned public key associated with a second device; configure the first device to encrypt the content access private key of the content access key pair associated with the encrypted content utilizing the sharing encryption key; and configure the first device to transmit the encrypted content access private key to enable the second device to access the encrypted content. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the processor is configured to: configure the first device to transmit a request to receive the assigned public key associated with the second device; and configure the first device to receive, based at least in part on transmitting the request, the assigned public key associated with the second device. ### Claim 17 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the processor is configured to: configure the first device to encrypt data utilizing the assigned public key associated with the second device; configure the first device to transmit the encrypted data to the second device; and configure the first device to receive decrypted data from the second device. ### Claim 18 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein, to configure the first device to determine the symmetric sharing encryption key, the processor is configured to configure the first device to determine the symmetric sharing encryption key based at least in part on combining the content access private key and the assigned public key. ### Claim 19 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the processor is configured to: configure the first device to encrypt the content utilizing a randomly generated key, which is a symmetric key. ### Claim 20 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the processor is configured to: configure the first device to verify an authenticity of the assigned public key associated with the second device based at least in part on receiving decrypted sample data from the second device.