# US 2025/0097189 A1 · Private data sharing system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2025/0097189 A1
- Document ID: US20250097189A1
- Status: Published application
- Kind: A1
- Application number: 18/963,486
- Filed: 2024-11-28
- Published: 2025-03-20
- Earliest claimed: 2010-10-08
- Inventors: Brian Lee Moffat
- Web page: https://patentgrep.com/patent/US20250097189A1

## CPC

- H04L 9/0822: {using key encryption key}
- G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes}
- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying}
- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 51/066: Format adaptation, e.g. format conversion or compression
- H04L 51/212: using filtering or selective blocking
- H04L 51/52: for supporting social networking services
- H04L 63/0421: {Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)}
- H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)}
- H04L 63/065: {for group communications (cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833)}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 67/303: Terminal profiles
- H04L 67/306: User profiles
- G06Q 10/40: Business processes related to social networking or social networking services
- H04L 2209/16: Obfuscation or hiding, e.g. involving white box
- H04L 2209/60: Digital content management, e.g. content distribution
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A novel architecture for a data sharing system (DSS) is disclosed and seeks to ensure the privacy and security of users' personal information. In this type of network, a user's personally identifiable information is stored and transmitted in an encrypted form, with few exceptions. The only key with which that encrypted data can be decrypted, and thus viewed, remains in the sole possession of the user and the user's friends/contacts within the system. This arrangement ensures that a user's personally identifiable information cannot be examined by anyone other than the user or his friends/contacts. This arrangement also makes it more difficult for the web site or service hosting the DSS to exploit its users' personally identifiable information. Such a system facilitates the encryption, storage, exchange and decryption of personal, confidential and/or proprietary data.

## Claims

### Claim at position 1

1-155. (canceled)

### Claim 156

A method for data exchange between a plurality of personal computing devices, comprising:
establishing, on each personal computing device, a data sharing server from which a user receives, stores, and transmits data stored thereon with data sharing servers established by remote users on their respective personal computing devices;
establishing, on each personal computing device, an encryption/decryption module that exchanges data with a respective data sharing server on the respective remote user personal computing device;
generating a file encryption key and a file decryption key associated with and unique to an original data file using the encryption/decryption module of a first personal computing device associated with a first user, the file decryption key being usable for reconstituting data files encrypted with the file encryption key;
encrypting the original data file with the file encryption key for sharing with a remote personal computing device associated with a second user selected by the first user and with a remote personal computing device associated with a third user, each selected by the first user;
encrypting the file decryption key with a first recipient encryption key unique to the second user to produce a first encrypted file decryption key;
encrypting the file decryption key with a second recipient encryption key unique to the third user to produce a second encrypted file decryption key;
transmitting the encrypted data file and the first encrypted file decryption key from the data sharing server of the first personal computing device to the data sharing server of the second personal computing device;
transmitting the encrypted data file and the second encrypted file decryption key from the data sharing server of the first personal computing device to the data sharing server of the third personal computing device;
transmitting the encrypted data file and the first encrypted file decryption key from the data sharing server of the second personal computing device to the encryption/decryption module of the second personal computing device;
transmitting the encrypted data file and the second encrypted file decryption key from the data sharing server of the third personal computing device to the encryption/decryption module of the third personal computing device;
decrypting the file decryption key using the encryption/decryption module of the second personal computing device to reconstitute the file decryption key from the first encrypted file decryption key and a first recipient decryption key, the first recipient decryption key being usable for reconstituting data files encrypted with the first recipient encryption key;
decrypting the file decryption key using the encryption/decryption module of the third personal computing device to reconstitute the file decryption key from the second encrypted file decryption key and a second recipient decryption key, the second recipient decryption key being usable for reconstituting data files encrypted with the second recipient encryption key;
decrypting the encrypted data file using the encryption/decryption module of the second personal computing device to reconstitute the original data file from the encrypted data file and the file decryption key; and
decrypting the encrypted data file using the encryption/decryption module of the third personal computing device to reconstitute the original data file from the encrypted data file and the file decryption key.

### Claim 157 (depends on 156)

The method of claim 156, wherein the encryption/decryption module of the first personal computing device automatically generates a different encryption key through a systematic modification of a base primary key provided by the first user.

### Claim 158 (depends on 156)

The method of claim 156, further comprising transmitting the encrypted data file, the first encrypted file decryption key, and the second encrypted file decryption key from the encryption/decryption module of the first personal computing device to the data sharing server of the first personal computing device for storage.