# US 12,008,117 B2 · System and methods for using cipher objects to protect data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,008,117 B2 - Document ID: US12008117B2 - Status: Granted - Kind: B2 - Application number: 17/374,781 - Filed: 2021-07-13 - Published: 2021-11-04 - Granted: 2024-06-11 - Earliest claimed: 2011-12-09 - Assignees: Sertainty Corporation - Applicants: Sertainty Corporation - Inventors: Gregory Scott Smith; Melani Leigh Smith Weed; Daniel Michael Fischer; Elke M. Ridenour; Behzad Nadji - Web page: https://patentgrep.com/patent/US12008117B2 ## CPC - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F 21/606: {by securing the transmission between two devices or processes} - H04L 63/104: {Grouping of entities} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04W 4/185: {by embedding added-value information into content, e.g. geo-tagging} - G06F 2221/2107: File encryption - G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems, methods, and devices configured to build and utilize an intelligent cipher transfer object are provided. The intelligent cipher transfer object includes a set of participants protected by cloaking patterns. A portable dynamic rule set, which includes executable code for managing access to the protected set of participants, is included within the intelligent cipher transfer object. For a given user, the intelligent cipher transfer object may provide access to some of the participants while preventing access to other participants, based on the portable dynamic rule set therein. ## Claims ### Claim 1 A computer-implemented method for creating digitally secured data, comprising: initializing a dynamic participant controller (DPC); receiving, by the DPC, a set of digital participant data; constructing, by the DPC and using the set of digital participant data, a computer-based intelligent cipher transfer object (ICTO); applying, by the DPC, an outer cloaking pattern to the set of digital participant data in the ICTO using an interim ruleset; adding, by the DPC, owner data elements to the ICTO; replacing, by the DPC, the interim ruleset with owner-specific rules; applying, by the DPC, an inner cloaking pattern to the ICTO based at least in part on the owner-specific rules, thus creating a secure set of digital participant data. ### Claim 2 (depends on 1) The method of claim 1, wherein the ICTO is implemented in a portable identity appliance (PIA). ### Claim 3 (depends on 1) The method of claim 1, wherein initializing a dynamic participant controller (DPC) comprises: validating the DPC is executed by a trusted system. ### Claim 4 (depends on 1) The method of claim 1, wherein the owner data elements are optional. ### Claim 5 (depends on 1) The method of claim 1, wherein the owner-specific rules are obtained from a portable dynamic rule set (PDRS). ### Claim 6 (depends on 1) The method of claim 1, wherein the set of digital participant data comprises object descriptions, mixture metadata, owner data, outer cloaking patterns, inner cloaking patterns, an identity module, and an intelligence module. ### Claim 7 (depends on 6) The method of claim 6, wherein the object descriptions comprise owner-supplied and owner-defined earmarks, data identifiers, and properties. ### Claim 8 (depends on 6) The method of claim 6, wherein the owner data comprises a document, a file, a buffer, a directory, a pointer to remotely stored data, and a database. ### Claim 9 (depends on 6) The method of claim 6, wherein the intelligence module comprises a rule to apply separate inner cloaking patterns, by DPC, to separate components of the set of digital participant data. ### Claim 10 (depends on 6) The method of claim 6, wherein the intelligence module comprises nested layers of cloaking of the set of digital participant data. ### Claim 11 (depends on 1) The method of claim 1, wherein the ICTO comprises a digital signature key. ### Claim 12 (depends on 1) The method of claim 1, wherein the inner cloaking pattern describes transformations applied to the set of digital participant data to protect the set of digital participant data. ### Claim 13 (depends on 12) The method of claim 12, wherein the transformations comprise at least one of data compression, data normalization, and encryption. ### Claim 14 (depends on 1) The method of claim 1, wherein the inner cloaking pattern comprises encryption techniques. ### Claim 15 (depends on 1) The method of claim 1, wherein applying, by the DPC, an outer cloaking pattern to the set of digital participant data in the ICTO using an interim ruleset comprises: applying an algorithm, by the DPC, to select an outer cloaking pattern; applying the outer cloaking pattern, by the DPC, to at least part of the set of digital participant data using the interim ruleset; and constructing, by the DPC, the initial cloaking pattern and an interim cipher object. ### Claim 16 (depends on 15) The method of claim 15, wherein the algorithm utilizes time and the owner-specific rules to randomize the inner cloaking pattern. ### Claim 17 (depends on 15) The method of claim 15, further comprising: adding the algorithm to an identity module, wherein the algorithm are managed internally and not shared externally. ### Claim 18 (depends on 1) The method of claim 1, wherein the owner data elements comprise a nested ICTO. ### Claim 19 (depends on 1) The method of claim 1, further comprising: constructing a nested ICTO by adding a first ICTO, by a rule within the first ICTO, to a second ICTO. ### Claim 20 (depends on 1) The method of claim 1, further comprising: stopping if an anomaly is detected.