# US 12,015,597 B1 · Encrypting content and facilitating legal access to the encrypted content > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,015,597 B1 - Document ID: US12015597B1 - Status: Granted - Kind: B1 - Application number: 17/463,648 - Filed: 2021-09-01 - Granted: 2024-06-18 - Earliest claimed: 2016-08-15 - Assignees: BlueRISC, Inc. - Applicants: BlueRISC, Inc. - Inventors: Csaba Andras Moritz - Web page: https://patentgrep.com/patent/US12015597B1 ## CPC - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 9/0822: {using key encryption key} - H04L 9/085: {Secret sharing or secret splitting, e.g. threshold schemes} - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 9/321: {involving a third party or a trusted authority} - H04L 9/3215: {using a plurality of channels (network architectures or network communication protocols using different networks H04L63/18)} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04L 63/30: {for supporting lawful interception, monitoring or retaining of communications or communication related information (circuit switched telephony call monitoring H04M3/2281)} - H04L 2463/062: applying encryption of the keys - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An example method performed by one or more processing devices includes: generating encrypted content at a sender device using one or more first keys that are available from a key provider; and outputting the encrypted content to a recipient device over one or more channels; where the key provider enables access, following authorization, by the recipient device to one or more second keys for decrypting the encrypted content; and where an entity that enables the channel is unaffiliated with the key provider. ## Claims ### Claim 1 A method performed by one or more processing devices, comprising: generating encrypted content at a sender device using one or more first keys that are available from a key provider; and outputting the encrypted content to a recipient device over one or more channels; wherein the key provider enables access, following authorization, by the recipient device to one or more second keys for decrypting the encrypted content; and wherein generating the encrypted content comprises: breaking content comprised of data into first and second fragments; encrypting the first fragment using a first session key to produce an encrypted first fragment and encrypting the second fragment using a second session key to produce an encrypted second fragment; encrypting the first session key and the second session key using the one or more first keys to produce, respectively an encrypted first session key and an encrypted second session key; and associating the encrypted first session key with the encrypted second fragment to produce first encrypted content, and associating the encrypted second session key with the encrypted first fragment to produce second encrypted content, the encrypted content comprising the first encrypted content and the second encrypted content. ### Claim 2 (depends on 1) The method of claim 1, wherein the first encrypted content is output over a first channel and the second encrypted content is output over a second channel, the first channel being different from the second channel. ### Claim 3 (depends on 2) The method of claim 2, wherein the first session key is encrypted using a first key of the one or more first keys and the second session key is encrypted using a second key of the one or more first keys, the first key of the one or more first keys being different from the second key of the one or more first keys. ### Claim 4 (depends on 3) The method of claim 3, wherein the first key of the one or more first keys is from a first key provider and the second key of the one or more first keys is from a second key provider, the first key provider being different from the second key provider. ### Claim 5 (depends on 1) The method of claim 1, wherein the one or more channels are defined by one or more cloud service providers. ### Claim 6 (depends on 1) The method of claim 1, wherein the one or more second keys comprises a PGP private key. ### Claim 7 A method performed by one or more processing devices, comprising: obtaining one or more first cryptographic keys from one or more key providers, the one or more first cryptographic keys being accessible from the one or more key providers through an authentication process; encrypting content using one or more session cryptographic keys to produce a first part of encrypted content, the one or more session cryptographic keys being different from the one or more first cryptographic keys; encrypting the one or more session cryptographic keys using the one or more first cryptographic keys to produce a second part of the encrypted content; and outputting the encrypted content, including the first part and the second part, from a sending device to a recipient device, the encrypted content requiring, for decryption thereof, authentication via the one or more key providers. ### Claim 8 (depends on 7) The method of claim 7, wherein encrypting the content comprises breaking the content into fragments, where each fragment comprises part of the content; and wherein encrypting the content comprises encrypting each of the fragments using at least two different session cryptographic keys to produce the first part of the encrypted content. ### Claim 9 (depends on 8) The method of claim 8, wherein outputting the encrypted content comprises outputting at least two encrypted fragments over different channels. ### Claim 10 (depends on 7) The method of claim 7, wherein encrypting the content comprises breaking the content into fragments, where each fragment comprises part of the content; wherein encrypting the content comprises encrypting the fragments using more than one session cryptographic keys to produce the first part of the encrypted content; and wherein outputting the encrypted content comprises outputting at least two encrypted fragments over different channels. ### Claim 11 (depends on 7) The method of claim 7, wherein the content comprises social media content. ### Claim 12 (depends on 7) The method of claim 7, wherein the one or more first cryptographic keys are part of a PGP private and public key pair, the PGP private key being encrypted and stored at the one or more key providers. ### Claim 13 One or more non-transitory machine-readable storage media storing instructions that are executable by one or more processing devices to perform operations comprising: generating encrypted content at a sender device using one or more first keys that are available from a key provider; and outputting the encrypted content to a recipient device over one or more channels; wherein the key provider enables access, following authorization, by the recipient device to one or more second keys for decrypting the encrypted content; and wherein generating the encrypted content comprises: breaking content comprised of data into first and second fragments; encrypting the first fragment using a first session key to produce an encrypted first fragment and encrypting the second fragment using a second session key to produce an encrypted second fragment; encrypting the first session key and the second session key using the one or more first keys to produce, respectively an encrypted first session key and an encrypted second session key; and associating the encrypted first session key with the encrypted second fragment to produce first encrypted content, and associating the encrypted second session key with the encrypted first fragment to produce second encrypted content, the encrypted content comprising the first encrypted content and the second encrypted content. ### Claim 14 One or more non-transitory machine-readable storage media storing instructions that are executable by one or more processing devices to perform operations comprising: obtaining one or more first cryptographic keys from one or more key providers, the one or more first cryptographic keys being accessible from the one or more key providers through an authentication process; encrypting content using one or more session cryptographic keys to produce a first part of encrypted content, the one or more session cryptographic keys being different from the one or more first cryptographic keys; encrypting the one or more session cryptographic keys using the one or more first cryptographic keys to produce a second part of the encrypted content; and outputting the encrypted content, including the first part and the second part, from a sending device to a recipient device, the encrypted content requiring, for decryption thereof, authentication via the one or more key providers. ### Claim 15 (depends on 13) The one or more non-transitory machine-readable storage media of claim 13, wherein the first encrypted content is output over a first channel and the second encrypted content is output over a second channel, the first channel being different from the second channel. ### Claim 16 (depends on 15) The one or more non-transitory machine-readable storage media of claim 15, wherein the first session key is encrypted using a first key of the one or more first keys and the second session key is encrypted using a second key of the one or more first keys, the first key of the one or more first keys being different from the second key of the one or more first keys. ### Claim 17 (depends on 16) The one or more non-transitory machine-readable storage media of claim 16, wherein the first key of the one or more first keys is from a first key provider and the second key of the one or more first keys is from a second key provider, the first key provider being different from the second key provider. ### Claim 18 (depends on 13) The one or more non-transitory machine-readable storage media of claim 13, wherein the one or more channels are defined by one or more cloud service providers. ### Claim 19 (depends on 13) The one or more non-transitory machine-readable storage media of claim 13, wherein the one or more second keys comprises a PGP private key. ### Claim 20 (depends on 14) The one or more non-transitory machine-readable storage media of claim 14, wherein encrypting the content comprises breaking the content into fragments, where each fragment comprises part of the content; and wherein encrypting the content comprises encrypting at least two of the fragments using different session cryptographic keys to produce the first part of the encrypted content. ### Claim 21 (depends on 20) The one or more non-transitory machine-readable storage media of claim 20, wherein outputting the encrypted content comprises outputting at least two encrypted fragment over different channels. ### Claim 22 (depends on 14) The one or more non-transitory machine-readable storage media of claim 14, wherein encrypting the content comprises breaking the content into fragments, where each fragment comprises part of the content; wherein encrypting the content comprises encrypting the fragments using more than one session cryptographic keys to produce the first part of the encrypted content; and wherein outputting the encrypted content comprises outputting at least two encrypted fragments over different channels. ### Claim 23 (depends on 14) The one or more non-transitory machine-readable storage media of claim 14, wherein the content comprises social media content.