Encrypted file control
AssigneeKeyavi Data Corporation
InventorsPrashant Shripad Njasure, Elliot Daniel Lewis
Life of this patent
Estimating the term…
Abstract
An access client may transmit an access request to a server, and the access request may be an example of a decryption request or an encryption request. The access request may include access information and file information for a file to be accessed. The server may validate the access information and generate an access package that includes a set of access keys and executable code. The access keys may be transmitted to the access client. The access client may execute the executable code and decrypt or encrypt the file. The file may include one or more data packs that include file access policies, ownership information, and file access logs.
Claims21
A method for data security at an access client, comprising:
- identifying that a file is associated with the access client based at least in part on metadata associated with the file, wherein the file includes a payload encrypted using a first key of one or more access keys and one or more encrypted data packs that are encrypted using at least one second key of the one or more access keys;
- transmitting, to a server, an access request that includes access information and file information for the file to be accessed, wherein transmitting the access request comprises:
- transmitting, to the server, a decryption request and the file information, wherein the decryption request is transmitted to the server based at least in part on the file being associated with the access client;
- receiving, from the server based at least in part on transmitting the access request, an access package that includes executable code and the one or more access keys, wherein the executable code includes code that is used to decrypt the file;
- executing, by the access client, the executable code to access the file using the one or more access keys;
- and
- removing the access package from memory associated with the access client.
An apparatus for data security at an access client, comprising:
- a processor;
- memory coupled with the processor;
- and
- instructions stored in the memory and executable by the processor to cause the apparatus to:
- identify that a file is associated with the access client based at least in part on metadata associated with the file, wherein the file includes a payload encrypted using a first key of one or more access keys and one or more encrypted data packs that are encrypted using at least one second key of the one or more access keys;
- transmit, to a server, an access request that includes access information and file information for the file to be accessed, wherein transmitting the access request comprises:
- transmitting, to the server, a decryption request and the file information, wherein the decryption request is transmitted to the server based at least in part on the file being associated with the access client;
- receive, from the server based at least in part on transmitting the access request, an access package that includes executable code and the one or more access keys, wherein the executable code includes code that is used to decrypt the file;
- execute, by the access client, the executable code to access the file using the one or more access keys;
- and
- remove the access package from memory associated with the access client.
A non-transitory computer-readable medium storing code for data security at an access client, the code comprising instructions executable by a processor to:
- identify that a file is associated with the access client based at least in part on metadata associated with the file, wherein the file includes a payload encrypted using a first key of one or more access keys and one or more encrypted data packs that are encrypted using at least one second key of the one or more access keys;
- transmit, to a server, an access request that includes access information and file information for the file to be accessed, wherein transmitting the access request comprises:
- transmitting, to the server, a decryption request and the file information, wherein the decryption request is transmitted to the server based at least in part on the file being associated with the access client;
- receive, from the server based at least in part on transmitting the access request, an access package that includes executable code and the one or more access keys, wherein the executable code includes code that is used to decrypt the file;
- execute, by the access client, the executable code to access the file using the one or more access keys;
- and
- remove the access package from memory associated with the access client.
Dependencies are inferred from the claim text.