# US 2020/0401720 A1 · Virtualization for privacy control > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2020/0401720 A1 - Document ID: US20200401720A1 - Status: Published application - Kind: A1 - Application number: 16/904,063 - Filed: 2020-06-17 - Published: 2020-12-24 - Earliest claimed: 2019-06-18 - Assignees: TMRW Foundation IP & Holding S. À R.L. - Applicants: TMRW Foundation IP & Holding S. À R.L. - Inventors: Cevat Yerli - Web page: https://patentgrep.com/patent/US20200401720A1 ## CPC - G06F 21/6209: {to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself} - G06F 21/6227: {where protection concerns the structure of data, e.g. records, types, queries} - G06F 3/0623: {in relation to content} - G06F 3/0667: {at data level, e.g. file, record or object virtualisation} - G06F 3/0673: {Single storage device} - G06F 21/602: {Providing cryptographic facilities or services} - H04L 9/085: {Secret sharing or secret splitting, e.g. threshold schemes} - H04L 9/30: Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy - H04L 9/3247: {involving digital signatures} - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 67/1004: Server selection for load balancing - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - G06F 2221/2107: File encryption - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A system and method for increasing user control of data comprising a first user device configured to create data; a user application configured to virtualize and fragment data created by the first user device; a data collector server configured to store, protect, and composite data fragments; a private user storage area configured to store and protect data fragments; and a second user device connected configured to request data uploaded by the first user device. The first user device creates data that gets sent the user application, which virtualizes, fragments and sends a majority of the data to the data collector servers and a minority of the data to the private user storage area. As a user via the second user device requests the data uploaded by the first user device, the data collector server composites the data fragments and transfers the composited data to the second user device. ## Claims ### Claim 1 A system for increasing user control of data, the system comprising: one or more private user storage areas comprising at least one processor and memory storing at least one user application configured to virtualize and fragment data received from a first user device into two or more data fragments; one or more data collector servers comprising at least one processor and memory and configured to store and composite the data fragments; and wherein the at least one user application in the one or more private user storage areas is further configured to send a first portion of the data fragments representing a majority of the data to the one or more data collector servers and to store a second portion of the data fragments representing a minority of the data in the one or more private user storage areas, and wherein the one or more data collector servers are further configured to, in response to a request by a second user device for data received from the first user device, retrieve the second portion of the data fragments from the one or more private user storage areas, composite the data from the first and second portions of the data fragments, and transfer the composited data to the second user device. ### Claim 2 (depends on 1) The system of claim 1, wherein the one or more private user storage areas comprise one or more user servers or client device local memories. ### Claim 3 (depends on 1) The system of claim 1, wherein the one or more private user storage areas are configured within a distributed ledger network. ### Claim 4 (depends on 3) The system of claim 3, wherein the system is configured to perform asymmetric key encryption of the minority of the data in the distributed ledger network by: creating a key pair by a first user device in a distributed ledger private area, the key pair comprising a private key digital signature and a public key; sending the public key to a distributed ledger public area; and encrypting, with the private key digital signature in the distributed ledger private area, the second portion of the data fragments representing the minority of the data, creating a signed message. ### Claim 5 (depends on 1) The system of claim 1, wherein the data fragments are encrypted using an asymmetric key encryption mechanism comprising: creating a key pair by the data collector server, the key pair comprising a private key and a public key; sending the public key to the one or more private user storage areas storing the at least one user application; encrypting, by the at least one user application, the data fragments with the public key of the data collector. ### Claim 6 (depends on 1) The system of claim 1, wherein the data fragments are encrypted using a symmetric key encryption mechanism comprising: creating a private key in one of the one or more private user storage areas; encrypting the data fragments by the private user storage area using the private key. ### Claim 7 (depends on 1) The system of claim 1, wherein the data received from the first user device comprises media files including one or more of text files, image files, audio files, or video files, or combinations thereof. ### Claim 8 (depends on 1) The system of claim 1, wherein the one or more data collector servers are part of a social media network. ### Claim 9 (depends on 1) The system of claim 1, wherein the majority of the data represents between about 99% and about 99.99% of the data, and wherein the minority of the data represents between about 1% and about 0.01% of the data. ### Claim 10 (depends on 1) The system of claim 1, wherein a data owner can delete the minority of the data located in the one or more private user storage areas, thereby invalidating the majority of the data. ### Claim 11 A method for increasing user control of data, the method comprising: receiving, by a user application stored in a memory of one or more private user storage areas, data from a first user device; virtualizing the data by the user application; fragmenting the data by the user application into two or more data fragments; sending, by the user application, a first portion of the data fragments representing a majority of the data to one or more data collector servers; storing a second portion of the data fragments representing a minority of the data in the one or more private user storage areas; receiving, by the one or more data collector servers, a request from a second user device for the data received from the first user device; retrieving, by the one or more data collector servers, the second portion of the data fragments representing the minority of the data from the one or more private user storage areas; compositing the data from the first and second portions of the data fragments by the one or more data collector servers; and sending the composited data to the second user device. ### Claim 12 (depends on 11) The method of claim 11, wherein the one or more private user storage areas comprise one or more user servers or client device local memories. ### Claim 13 (depends on 11) The method of claim 11, wherein the one or more private user storage areas are configured within a distributed ledger network. ### Claim 14 (depends on 13) The method of claim 13, further comprising performing asymmetric key encryption of the minority of the data in the distributed ledger network by: creating a key pair by a first user device in a distributed ledger private area, the key pair comprising a private key digital signature and a public key; sending the public key to a distributed ledger public area; and encrypting, with the private key digital signature in the distributed ledger private area, the second portion of the data fragments representing the minority of the data, creating a signed message. ### Claim 15 (depends on 11) The method of claim 11, wherein the data fragments are encrypted using an asymmetric key encryption mechanism including: creating a key pair by the data collector server, the key pair comprising a private key and a public key; sending the public key to the one or more private user storage areas storing the user application; encrypting, by the user application, the data fragments with the public key of the data collector. ### Claim 16 (depends on 11) The method of claim 11, wherein the data fragments are encrypted using a symmetric key encryption mechanism including: creating a private key in one of the one or more private user storage areas; encrypting the data fragments using the private key. ### Claim 17 (depends on 11) The method of claim 11, wherein the one or more data collector servers are included in a social media network. ### Claim 18 (depends on 11) The method of claim 11, wherein the majority of the data represents between about 99% and about 99.99% of the data, and wherein the minority of the data represents between about 1% and about 0.01% of the data. ### Claim 19 (depends on 11) The method of claim 11, further comprising deleting the minority of the data located in the private user storage area, thereby invalidating the majority of the data. ### Claim 20 One or more non-transitory computer readable media stored thereon instructions configured to cause a computer system comprising memory and at least one processor to perform a method for increasing user control of data, comprising the steps of: receiving, by a user application stored in a memory of one or more private user storage areas, data created by a first user device; virtualizing the data by the user application; fragmenting the data by the user application into two or more data fragments; sending, by the user application, a first portion of the data fragments to one or more data collector servers; storing a second portion of the data fragments in the one or more private user storage areas; and sending the second portion of the data fragments to the one or more data collector servers to composite the data from the first and second portions of the data fragments and transmit the composited data to a second user device.