Data sharing system method

What is this patent about?

’347 is related to the field of secure data sharing systems and online social networks. It specifically addresses the technical challenge of maintaining absolute user privacy and data security in environments where information is stored and managed by a third-party service provider. The background context involves the inherent vulnerability of traditional social networks, where service providers or hackers can access personally identifiable information because the hosting servers typically possess the means to decrypt or view user content.

The underlying idea behind ’347 is the implementation of a zero-knowledge architecture where the service provider acts as a blind intermediary for encrypted data. The key inventive insight is shifting the entire burden of data transformation—both encryption and decryption—exclusively to the user's local device. By ensuring that the decryption keys never exist in an unencrypted state on the central server, the system creates a trustless environment where the host can store and route data packets based on metadata without ever having the technical capability to inspect the actual content.

The claims of ’347 focus on a method for multi-user data exchange that utilizes a third-party server as a storage and transmission relay for encrypted files. The process requires a local data obscuring module on each user's device to transform original files into encrypted versions before they reach the server. Central to the claims is the mechanism for selectively exchanging security keys between qualified users in a manner that bypasses the server’s ability to intercept or reveal those keys, thereby ensuring only authorized recipients can reconstitute the original data.

In practice, the invention works by establishing a key locker on the user's device, which manages the various keys needed to unlock content from different contacts. When a user creates content, the local client encrypts it using a symmetric or asymmetric key before transmission. The server then identifies the intended recipients through unencrypted attributes and forwards the ciphered package. The recipient's device automatically retrieves the corresponding key from its local locker to render the content, ensuring the plaintext only ever exists in the volatile memory of the end-users' devices.

This approach differs from prior solutions by removing the service provider's role as a trusted authority for key management. Unlike standard communal repositories where the host manages encryption in a way that is transparent but accessible to the provider, this system utilizes a blind relay model. By facilitating a key exchange protocol that is opaque to the server, the invention prevents the host from exploiting user data for advertising or analysis, effectively insulating the information from both internal provider abuse and external server-side breaches.