Method and system for implementing an encryption sdk
AssigneeBox, Inc.
InventorsChristopher Vasselli, Irving Yunchi Ruan
Life of this patent
Estimating the term…
Abstract
Disclosed is an approach to implement a new layer of security within mobile devices using an encryption SDK, which implements a standalone component for applications to encrypt, decrypt, and view sensitive data on the device. A security layer is implemented on the device, wherein the security layer manages encryption for data retrieved onto the device from a cloud-based environment. Encrypted content is then generated at the security layer before storing the encrypted content by receiving the content object from the cloud-based environment and encrypting the content object with an encryption key that is password protected. The encrypted content is stored within an encrypted filesystem for presenting the content on the device.
Claims20
A method comprising:
- identifying data in a cloud-based environment, the cloud-based environment comprising at least a storage device storing at least one content object accessible over a network;
- implementing a security layer on a device, wherein the security layer manages encryption for the data retrieved onto the device from the cloud-based environment;
- and
- generating encrypted content at the security layer before storing the encrypted content by:
- receiving the at least one content object to be stored at the device from the cloud-based environment, and
- encrypting the at least one content object with an encryption key, wherein the encrypted key is password protected;
- and
- storing the encrypted content within an encrypted filesystem on the device.
A computer program product, embodied in a non-transitory computer readable medium, the non-transitory computer readable medium having stored thereon a sequence of instructions which when stored in memory and executed by a processor causes the processor to perform a set of acts, the act of:
- identifying data in a cloud-based environment, the cloud-based environment comprising at least a storage device storing at least one content object accessible over a network;
- implementing a security layer on a device, wherein the security layer manages encryption for the data retrieved onto the device from the cloud-based environment;
- and
- generating encrypted content at the security layer before storing the encrypted content by:
- receiving the at least one content object to be stored at the device from the cloud-based environment, and
- encrypting the at least one content object with an encryption key, wherein the encrypted key is password protected;
- and
- storing the encrypted content within an encrypted filesystem on the device.
A system comprising:
- a storage medium having stored thereon a sequence of instructions and
- a processor or processors that execute the instructions to cause the processor or processors to perform a set of acts, the acts comprising:
- identifying a storage device in a cloud-based environment, the storage device storing at least one content object accessible over a network;
- identifying data in a cloud-based environment, the cloud-based environment comprising at least a storage device storing at least one content object accessible over a network;
- implementing a security layer on a device, wherein the security layer manages encryption for the data retrieved onto the device from the cloud-based environment;
- and
- generating encrypted content at the security layer before storing the encrypted content by:
- receiving the at least one content object to be stored at the device from the cloud-based environment, and
- encrypting the at least one content object with an encryption key, wherein the encrypted key is password protected;
- and
- storing the encrypted content within an encrypted filesystem on the device.
Dependencies are inferred from the claim text.