US 2024/0179150 A1 · MANAGEMENT OF ACCESS RIGHTS TO DIGITAL FILES WITH POSSIBLE DELEGATION OF THE RIGHTS

Abstract

The present invention relates to a method for exchanging data between a delegator device (I2) and a delegate device (I3) for access to an encrypted dataset, an access entry specific to the delegator device and associated with said dataset being stored in a public access list of an access management base, a decryption key for said dataset being able to be computed by the delegator device using the access entry, the method comprising the following steps, implemented by a processing unit of the delegator device (I2): —receiving (1100) an identification value specific to the delegate device (ID(U3, f1)) and associated with said file, —generating (1200) a delegation value (Del) on the basis of said identification value, such that the delegate device is able to subsequently receive the delegation value, obtain the access entry specific to the delegator device using the delegation value and compute the decryption key for said dataset.

Claims23

Dependent claims

A method for exchanging data between a delegator device and a delegate device for an access to an encrypted dataset stored in a memory,

an access entry specific to the delegator device and associated with said encrypted dataset being stored in a public access list of an access management database (DB), a decryption key of said encrypted dataset being computable by the delegator device using the access entry, the method comprising the following steps implemented by a processing unit of the delegator device:
receiving an identification value specific to the delegate device and associated with said encrypted dataset,
generating a delegation value as a function of the identification value specific to the delegate device,
such that the delegate device can subsequently receive the delegation value, obtain the access entry specific to the delegator device using the delegation value and compute the decryption key of said encrypted dataset.

1 more element

A method for exchanging data between a delegate device and an access management database for an access to an encrypted dataset stored in a memory,

an access entry specific to a delegator device and associated with said encrypted dataset being stored in the access management database, said access entry allowing the delegator device to obtain a decryption key of said dataset, the delegate device having previously received a delegation value generated by the delegator device,
the method comprising the following steps implemented by a processing unit of the delegate device (I3):
obtaining the access entry specific to the delegator device and associated with said encrypted dataset,
computing the decryption key of said encrypted dataset, as a function of the following three data:
an identification value specific to the delegate device and associated with said encrypted dataset;
the previously obtained access entry specific to the delegator device and associated with said encrypted dataset;
the delegation value previously received from the delegator device.

4 more elements

Dependencies are inferred from the claim text.

Management of access rights to digital files with possible delegation of the rights

Life of this patent

Management of access rights to digital files with possible delegation of the rights

Life of this patent

Abstract

Claims23