Private Data Sharing System

What is this patent about?

’050 is related to the field of secure data sharing systems , specifically addressing the need for enhanced privacy and security in online social networks and other data sharing platforms. Traditional systems often store user data in a way that allows the hosting service or malicious actors to access and exploit it, leading to privacy concerns and potential security breaches. The patent aims to overcome these limitations by ensuring that user data remains encrypted and accessible only to the user and their designated contacts.

The underlying idea behind ’050 is to create a data sharing system where user data is encrypted on the user's device before being transmitted to a central server. The decryption key remains solely in the possession of the user and their trusted contacts , preventing the server or any unauthorized party from accessing the unencrypted data. This is achieved through a novel architecture that facilitates the secure exchange of encryption keys between users, ensuring that only authorized individuals can decrypt and view the shared information.

The claims of ’050 focus on a method for data exchange between multiple computing devices, involving a third-party server that receives, stores, and transmits encrypted data. The independent claims cover the process of generating encryption and decryption keys, encrypting data files, and securely sharing them with selected users. The key aspect is that the server itself does not have the ability to decrypt the data , as the decryption keys are exchanged directly between the users' devices.

In practice, the invention relies on a client-side encryption/decryption module that handles the encryption and decryption processes. When a user wants to share a file, the module encrypts it using a generated encryption key. This key is then encrypted separately for each intended recipient using their respective public keys. The server stores and forwards these encrypted components, but it cannot access the original data. The recipients use their private keys to decrypt the file's decryption key, and then use that key to decrypt the file itself.

’050 differentiates itself from prior approaches by placing the control of data privacy firmly in the hands of the users. Unlike traditional systems where the service provider has access to user data, this invention ensures that only the user and their contacts can access the information. This is achieved through end-to-end encryption and a secure key exchange mechanism, making it more difficult for hackers or unscrupulous service providers to exploit user data. The system also allows for the dynamic management of access rights, enabling users to revoke access to their data at any time.