US 2026/0037646 A1Published application

Method for Secure Access to Digital Data

AssigneeMailSPEC LLC

InventorsJon Doyle, Freddy Frouin, Tanguy Godquin, Chukri Soueidi

Life of this patent

Estimating the term…

Loading patent…

Abstract

The invention relates to a method for secure access to digital data, said digital data being encrypted with a given user's public encryption key and stored on a server. The method comprises the following steps: A. receiving at said server a request from said user to access said digital data; B. transmitting, via said server, via a secure communication interface, a request to a secure user device to release a password stored on said user device; C. obtaining said password via said secure communication interface, from said user device in response to a validated security test issued by said user device to a user; and D. retrieving, via said server, the user's encrypted private key, said user's private key being encrypted with said password, and decrypting said user's encrypted private key with said password to obtain that user's private key, and decrypting said encrypted digital data with said user's private key, and presenting said digital data to said user. Another method is provided for new users who do not yet have encryption keys, where the sender temporarily encrypts the digital data and, upon user enrollment, the server re-encrypts the data to the user's public encryption key before proceeding with the server-assisted decryption process.

Claims15

Dependent claims

A method for secure access to digital data between two or more users comprising the following steps:

A. receiving, at a server, a request from a first user to send secure digital data to a second user;
B. detecting, by the server, that the second user is an external user,
C. generating, by the server, a temporary public encryption key and a temporary private encryption key for the second user;
D. sending, by the server, the temporary public encryption key to the first user via a first user device;
E. encrypting, by the first user device, the digital data with the temporary public encryption key;
F. sending, by the first user device, the encrypted digital data to the server for storage;
G. sending, by the server, a message to the second user via a second user device that the secure digital data is pending;
H. generating, by the second user device, a validated security test, a password, a public encryption key and a private encryption key;
I. encrypting, by the second user device, the private encryption key with the password;
J. sending, by the second user device via a secure communication interface to the server, the public encryption key and the encrypted private key;
K. decrypting, by the server, the secure digital data using the temporary private encryption key;
L. encrypting, by the server, the secure digital data using the public encryption key;
M. sending, by the server via the secure communication interface, a request to the second user device to release the password stored on the second user device;
N. obtaining the password via the secure communication interface, from the second user device in response to the validated security test issued by the second user device to the second user;
and
O. retrieving, via the server, the second user's encrypted private encryption key, the second user's private encryption key being encrypted with the password, decrypting the second user's encrypted private encryption key with the password to obtain the second user's private encryption key, decrypting the secure digital data using the private encryption key and presenting the secure digital data to the second user.

13 more elements

A system for secure access to digital data shared between two or more users comprising:

a server configured to receive a request to send or receive digital data, detect if a user is an external user, generate a temporary public encryption key and a temporary private encryption key for the external user, store the digital data, send a message to the external user that the digital data is pending, decrypting the digital data using the temporary private encryption key, storing a public encryption key and an encrypted private encryption key for the external user, encrypting the external user's data with the public encryption key, retrieving the external users encrypted private encryption key, the encrypted private encryption key being encrypted with a password, decrypting the external user's encrypted private encryption key with the password to obtain the external user's private encryption key, decrypting the digital data using the private encryption key and presenting the secure message to the external user;
a first user device for sending and receiving the digital data, encrypting the digital data with the temporary public encryption key, and sending the encrypted digital data to the server for storage;
and
a second user device for sending and receiving the digital data, configured to generate and store a password, generate the public encryption key and the private encryption key, generate a validated security test, encrypt the private encryption key with the password, send the public encryption key and encrypted private encryption key to the server via a secure communications interface, and send the password in response to a request to release the password via the secure communications interface in response to a validated security test.

1 more element

Dependencies are inferred from the claim text.

Facts

Application: 19/357,364Filed 14 Oct 2025
Priority: FR FR 22018653 Mar 2022
Published: 5 Feb 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06F 21/602
Protecting data: providing cryptographic facilities or services
H04L 9/0863
Generation of secret information including derivation or calculation of cryptographic keys or passwords: involving passwords or one-time passwords
H04L 9/0894
Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords: escrow, recovery or storing of secret…
H04L 9/3228
Using a predetermined code, e.g. password, passphrase or PIN: one-time or temporary data, i.e. information which is sent for every authentication…

Family

Application18/115,977Continuation in part · filed 1 Mar 2023
Application19/357,364Continuation in part
US 12,526,263 B2Related patent
US 2023/0283467 A1Published application
US 2026/0037646 A1This patent

From the US filing history. Foreign family members aren’t listed.