Encrypting content and facilitating legal access to the encrypted content
AssigneeBlueRISC, Inc.
InventorCsaba Andras Moritz
Life of this patent
Estimating the term…
Abstract
An example method performed by one or more processing devices includes: generating encrypted content at a sender device using one or more first keys that are available from a key provider; and outputting the encrypted content to a recipient device over one or more channels; where the key provider enables access, following authorization, by the recipient device to one or more second keys for decrypting the encrypted content; and where an entity that enables the channel is unaffiliated with the key provider.
Claims23
A method performed by one or more processing devices, comprising:
- generating encrypted content at a sender device using one or more first keys that are available from a key provider;
- and
- outputting the encrypted content to a recipient device over one or more channels;
- wherein the key provider enables access, following authorization, by the recipient device to one or more second keys for decrypting the encrypted content;
- and
- wherein generating the encrypted content comprises:
- breaking content comprised of data into first and second fragments;
- encrypting the first fragment using a first session key to produce an encrypted first fragment and encrypting the second fragment using a second session key to produce an encrypted second fragment;
- encrypting the first session key and the second session key using the one or more first keys to produce, respectively an encrypted first session key and an encrypted second session key;
- and
- associating the encrypted first session key with the encrypted second fragment to produce first encrypted content, and associating the encrypted second session key with the encrypted first fragment to produce second encrypted content, the encrypted content comprising the first encrypted content and the second encrypted content.
A method performed by one or more processing devices, comprising:
- obtaining one or more first cryptographic keys from one or more key providers, the one or more first cryptographic keys being accessible from the one or more key providers through an authentication process;
- encrypting content using one or more session cryptographic keys to produce a first part of encrypted content, the one or more session cryptographic keys being different from the one or more first cryptographic keys;
- encrypting the one or more session cryptographic keys using the one or more first cryptographic keys to produce a second part of the encrypted content;
- and
- outputting the encrypted content, including the first part and the second part, from a sending device to a recipient device, the encrypted content requiring, for decryption thereof, authentication via the one or more key providers.
One or more non-transitory machine-readable storage media storing instructions that are executable by one or more processing devices to perform operations comprising:
- generating encrypted content at a sender device using one or more first keys that are available from a key provider;
- and
- outputting the encrypted content to a recipient device over one or more channels;
- wherein the key provider enables access, following authorization, by the recipient device to one or more second keys for decrypting the encrypted content;
- and
- wherein generating the encrypted content comprises:
- breaking content comprised of data into first and second fragments;
- encrypting the first fragment using a first session key to produce an encrypted first fragment and encrypting the second fragment using a second session key to produce an encrypted second fragment;
- encrypting the first session key and the second session key using the one or more first keys to produce, respectively an encrypted first session key and an encrypted second session key;
- and
- associating the encrypted first session key with the encrypted second fragment to produce first encrypted content, and associating the encrypted second session key with the encrypted first fragment to produce second encrypted content, the encrypted content comprising the first encrypted content and the second encrypted content.
One or more non-transitory machine-readable storage media storing instructions that are executable by one or more processing devices to perform operations comprising:
- obtaining one or more first cryptographic keys from one or more key providers, the one or more first cryptographic keys being accessible from the one or more key providers through an authentication process;
- encrypting content using one or more session cryptographic keys to produce a first part of encrypted content, the one or more session cryptographic keys being different from the one or more first cryptographic keys;
- encrypting the one or more session cryptographic keys using the one or more first cryptographic keys to produce a second part of the encrypted content;
- and
- outputting the encrypted content, including the first part and the second part, from a sending device to a recipient device, the encrypted content requiring, for decryption thereof, authentication via the one or more key providers.
Dependencies are inferred from the claim text.