Encrypted data file transmission
AssigneeMcAfee, Inc.
InventorRobert Grupe
Life of this patent
Estimating the term…
Abstract
A mechanism for encrypting confidential information, uses a transmission package than can be attached to an electronic message. The transmission package is an executable application and controls the decryption, using a separately stored key, and rendering of the contents. On termination of the rendering of the information the transmission package triggers deletion of the encrypted file, the transmission package, and the separately stored key.
Claims28
A computer program product, embodied on a computer storage medium, comprising a computer program operable to control a first computer to encrypt a computer data file and to create decryption control information for said data file, said computer program comprising:
- encryption logic for encrypting said data file to create an encrypted file and for creating a decryption key for said encrypted file, said data file comprising a text file and said encryption logic converting said text file to at least one graphic formatted image prior to encryption;
- transmission logic for controlling said computer to transmit said decryption key to a remote location;
- and
- application creation logic for creating an executable application for controlling decryption of and user access to said encrypted file on a second computer, said executable application comprising:
- retrieval logic for retrieving a decryption key stored at a remote location, triggering deletion of said decryption key from said remote location, and retrieving decryption logic, user access logic and deletion logic,
- said decryption logic for decrypting said encrypted file using said decryption key to create a decrypted file,
- said user access logic for providing user access to said decrypted file, and
- said deletion logic for triggering deletion of said decrypted file, said encrypted file and said executable application on termination of user access to said decrypted file;
- wherein output devices not involved in said user access are disabled during said user access to said decrypted file;
- wherein input devices are disabled during said user access to said decrypted file;
- wherein said user access logic provides said user access to said decrypted file for a predetermined period of time, and said deletion logic deletes said decrypted file, said encrypted file and said executable application on expiry of said predetermined period of time;
- wherein said retrieval logic is operable to request input of access credentials and compare said access credentials with credentials stored within said executable application, and, upon said access credentials matching said stored credentials, to proceed to activate said retrieval logic to perform further processing.
A computer program product, embodied on a computer storage medium, comprising an executable application operable to control a computer to provide user access to an encrypted file, said executable application comprising:
- retrieval logic for retrieving a decryption key stored at a remote location, triggering deletion of said decryption key from said remote location, and retrieving decryption logic, user access logic and deletion logic,
- said decryption logic for decrypting said encrypted file using said decryption key and for generating a decrypted file,
- said user access logic for providing user access to said decrypted file, and
- said deletion logic for triggering deletion of said decrypted file, said encrypted file and said executable application on termination of said user access to said decrypted file;
- wherein said encrypted file comprises a text file converted to at least one graphic formatted image prior to encryption;
- wherein output devices not involved in said user access are disabled during user access to a decrypted file;
- wherein input devices are disabled during said user access to said decrypted file;
- wherein said user access logic provides said user access to said decrypted file for a predetermined period of time, and said deletion logic deletes said decrypted file, said encrypted file and said executable application on expiry of said predetermined period of timex;
- wherein said retrieval logic is operable to request input of access credentials and compare said access credentials with credentials stored within said executable application, and, upon said access credentials matching said stored credentials, to proceed to activate said retrieval logic to perform further processing.
A computer-implemented method of encrypting a computer data file and creating decryption control information for said file on a first computer, said method comprising the steps of:
- encrypting said computer data file to create an encrypted file and creating a decryption key for said encrypted file, said computer data file comprising a text file and said step of encrypting includes converting said text file to at least one graphic formatted image prior to encrypting;
- transmitting said decryption key to a remote location;
- creating control logic for controlling a second computer to perform the following method steps:
- retrieving said decryption key stored at said remote location and thereby triggering deletion of said decryption key from said remote location;
- and
- retrieving decryption, user access and deletion logic for controlling decryption of said encrypted file using said decryption key to produce a decrypted file, provision of user access to said decrypted file and deletion of said decrypted file, said encrypted file and said control logic on termination of said user access to said decrypted file;
- wherein output devices not involved in said user access are disabled during user access to said decrypted file;
- wherein input devices are disabled during said user access to said decrypted file;
- wherein said user access is provided to said decrypted file for a predetermined period of time, and said decrypted file, said encrypted file and said control logic are deleted on expiry of said predetermined period of time;
- wherein said control logic is operable to request input of access credentials and compare said access credentials with credentials stored within said control logic, and, upon said access credentials matching said stored credentials, to proceed to activate said control logic to perform further processing.
A computer-implemented method of providing user access to an encrypted file on a computer, comprising the step of:
- executing an executable application to:
- retrieve a decryption key stored at a remote location and thereby triggering deletion of said decryption key from said remote location;
- and
- retrieve decryption, user access and deletion logic operable to control, respectively, decryption of said encrypted file using said decryption key to produce a decrypted file, provision of user access to said decrypted file and deletion of
- said decrypted file, said encrypted file and said executable application
- on termination of said user access to said decrypted file;
- wherein said encrypted file comprises a text file converted to at least one graphic formatted image prior to encryption;
- wherein output devices not involved in said user access are disabled during said user access to said decrypted file;
- wherein input devices are disabled during said user access to said decrypted file;
- wherein said user access is provided to said decrypted file for a predetermined period of time, and said decrypted file, said encrypted file and said executable application are deleted on expiry of said predetermined period of time;
- wherein said retrieval of said decryption key includes requesting input of access credentials and comparing said access credentials with credentials stored within said executable application, and, upon said access credentials matching said stored credentials, to proceed to activate said retrieval of said decryption key to perform further processing.
An apparatus for encrypting a computer data file and creating decryption control information for said file, said apparatus comprising:
- an encrypting device for encrypting a computer data file and for creating a decryption key for said encrypted file, said computer data file comprising a text file and said encrypting device for converting said text file to at least one formatted image prior to said encrypting;
- a transmitter for transmitting said decryption key to a remote location;
- and
- an application creator for creating an executable application for controlling decryption of and user access to said encrypted file on a second computer, said application creator creating an executable application comprising:
- retrieval logic for retrieving a decryption key stored at a remote location, triggering deletion of said decryption key from said remote location, and retrieving decryption logic, user access logic and deletion logic,
- said decryption logic for decrypting said encrypted file using said decryption key,
- said user access logic for providing user access to said decrypted file, and
- said deletion logic for triggering deletion of said decrypted file, said encrypted file and said executable application on termination of the access to said decrypted file;
- wherein output devices not involved in said user access are disabled during said user access to said decrypted file;
- wherein input devices are disabled during said user access to said decrypted file;
- wherein said user access logic provides said user access to said decrypted file for a predetermined period of time, and said deletion logic triggers deletion of said decrypted file, said encrypted file and said executable application on expiry of said predetermined period of time,
- wherein said retrieval logic is operable to request input of access credentials and compare said access credentials with credentials stored within said executable application, and, upon said access credentials matching said stored credentials, to proceed to activate said retrieval logic to perform further processing.
Dependencies are inferred from the claim text.