US 9,015,858 B2Granted

Graphical user interface for seamless secure private collaboration

AssigneenCrypted Cloud LLC

InventorsNicholas Stamos, Igor Odnovorov

Life of this patent

Estimating the term…

Loading patent…

Abstract

Seamless, secure, private, collaborative file synchronization across trust boundaries, typically as a companion to a store and sync file service. Information needed to recover a file is stored within the file itself, without giving away secret data. User specific personal keys are preferably only stored on the users' device(s). A unique ID is also created for each protected file; a password is generated that depends on (a) a key value that can either be (i) the user's personal key in the case of a file that is to be private or (ii) a shared key in the case of a file that is to be shared with other users, and (b) the unique file ID. The password is then encrypted using a recovery key and also stored in the file itself. The file is secured using a format that supports password-based content encryption.

Claims11

Dependent claims

A system associated with a user, comprising:

one or more network interfaces adapted to communicate data over a computer network;
a hardware processor coupled to the network interfaces and adapted to execute one or more processes;
and
a memory configured to store a process executable by the hardware processor, the process when executed operable to:
display a file system object icon representation of a file system object, the file system object including at least one file or one folder,
determine whether a-user input is received to share or securely share a file system object that is synchronized across two or more systems associated with the user over the computer network,
in response to receiving a user input to share the file system object, displaying a shared icon adjacent to the file system object icon,
in response to receiving a user input to securely share the file system object, displaying a shared securely icon adjacent to the file system object icon,
provide access to the file system object on systems associated with the user and on another system associated with a different user in response to determining that the user input is received to share the file system object,
provide access to the file system object, utilizing a password to secure the file system object, on systems associated with the user and on the another system associated with the different user in response to determining that the user input is received to securely share the file system object, and
in response to determining the user input is not received to share or not received to securely share the file system object, maintain the file system object only across one or more of the systems associated with the user.

8 more elements

A method of providing a graphical user interface (GUI) of a device for controlling shared and shared securely access to a file system object comprising:

displaying a file system object icon representation of the file system object, the file system object including at least one file or one folder,
synchronizing the file system object across two or more data processing systems associated with a user,
determining whether user input is received to share or securely share the file system object,
and
if the user input is to share the file system object, displaying a shared icon adjacent to the file system object icon,
if the user input is to securely share the file system object, displaying a shared securely icon adjacent the file system object icon, the shared securely icon being visually distinguishable from the shared icon,
if no user input is to share or securely share the file system object, maintain the file system object for access only by data processing systems associated with the user,
providing access to the file system object on systems associated with the user and on another system associated with a different user in response to determining that the user input is received to share the file system object, and
providing access to the file system object, utilizing a password to secure the file system object, on systems associated with the user and on the another system associated with the different user in response to determining that the user input is received to securely share the file system object.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/027,441Filed 16 Sep 2013 · continuation
Priority: 30 Nov 2012
Published: US 2014/0157435 A15 Jun 2014
Granted: 21 Apr 2015
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 63/04
Network architectures or network communication protocols for network security: for providing a confidential data exchange among entities…
G06F 21/6209
Protecting access to data via a platform, e.g. using keys or access control rules: to a single file or object, e.g. in a secure envelope,…
H04L 9/0863
Generation of secret information including derivation or calculation of cryptographic keys or passwords: involving passwords or one-time passwords
H04L 63/0428
For providing a confidential data exchange among entities communicating through data packet networks: wherein the data content is protected, e.g.…

Family

Application13/690,800Parent of this continuation · filed 30 Nov 2012
Application13/743,051Parent of this continuation · filed 16 Jan 2013
US 2014/0157435 A1Pre-grant publication · published 5 Jun 2014
US 8,572,757 B1Parent of this continuation
US 9,015,858 B2This patent

From the US filing history. Foreign family members aren’t listed.