Systems and methods for smartkey information management

A smartkey-based computer file access system, said system including:

• a user computer system operating a smartkey encryption/decryption application, wherein said smartkey encryption/decryption application receives:
• a smartkey team name data for a team;
• a first user password data, wherein said first user is a member of said team;
• a second user password data, wherein said second user is a member of said team;
• a team public key data;
• and
• a team private key data,
• wherein said smartkey encryption/decryption application forms a smartkey electronic data structure including:
• said smartkey team name data in unencrypted form;
• a team encrypted master key data, wherein said team encrypted master key data is formed by said smartkey encryption/decryption application by determining a master key data derived from random data and encrypting said master key using said team public key data;
• a first user password-accessible team encrypted master key data comprising:
• said team public key data;
• and
• said team private key data, encrypted by said first user password to form a first user encrypted team key data;
• and
• a second user password-accessible team encrypted master key data comprising:
• said team public key data;
• and
• said team private key data, encrypted by said second user password to form a second user encrypted team key data,
• wherein said smartkey encryption/decryption application receives an electronic data file,
• wherein said smartkey encryption/decryption application forms a session key associated with said electronic data file and encrypts said data file to form an encrypted data file using said session key,
• wherein said smartkey encryption/decryption application encrypts said session key using said team encrypted master key data and stores the result as a team encrypted session key data in said smartkey electronic data structure;
• and
• a smartkey provider computer system, wherein said smartkey encryption/decryption application initiates the transmission of said smartkey electronic data structure from said user computer system to said smartkey computer provider system,
• wherein said smartkey electronic data structure is stored at said smartkey computer provider system and a second user computer system operating an instance of said smartkey encryption/decryption application, wherein said second user computer system receives:
• a target smartkey team name data;
• said encrypted data file;
• and
• a user password data representing a user to be allowed to decrypt said encrypted data file, wherein said user is a member of said team,
• wherein said second computer system transmits said target smartkey team name data to said smartkey provider system,
• wherein said smartkey provider system searches a plurality of stored smartkey electronic data structures, identifies a smartkey electronic data structure including smartkey team name data matching said target smartkey team name data, and transmits said smartkey data structure to said second computer system,
• wherein said second computer system uses said user password data to decrypt said user password-accessible encrypted team key data to obtain said team private key data,
• wherein said second computer system uses said team private key data to decrypt said team encrypted master key data to obtain said master key data,
• wherein said second computer system uses said master key data to decrypt said team encrypted session key data to obtain said session key data, and
• wherein said second computer system uses said session data to decrypt said encrypted data.