Private data sharing system

What is this patent about?

’281 is related to the field of secure data sharing systems and online social networks. It addresses the inherent privacy risks in centralized platforms where service providers or hackers can access and exploit unencrypted personal information. The background context involves the need for a system where data remains private to a user and their designated contacts, even when stored on third-party servers.

The underlying idea behind ’281 is the implementation of a zero-knowledge architecture where the central server acts merely as a blind relay and storage vault. The key inventive insight is shifting all encryption and decryption processes to the client-side, ensuring that the server never possesses the keys or the logic required to view the raw data. By utilizing user-defined keys and a secure peer-to-peer key exchange mechanism, the system creates a private ecosystem where data is only intelligible to the sender and their authorized recipients.

The claims of ’281 focus on a multi-user data sharing method and architecture where a central server facilitates the exchange of obfuscated data packets between at least three distinct clients. The independent claims specifically cover the server's role in receiving and redistributing these packets while explicitly lacking the value, method, or program needed to de-obfuscate them. Furthermore, the architecture requires each user to initialize their own unique obfuscation logic, which is then shared directly with other clients via the server in a protected manner.

In practice, the invention works by having the client program manage a key locker, which is a secure data structure containing the decryption keys for all of a user's contacts. When a user posts content, the client encrypts it before it ever hits the network. The server then routes this encrypted payload to the intended friends, whose own clients retrieve the necessary key from their local locker to render the content visible. This ensures that even if the server's database is compromised, the attacker only finds useless, scrambled bits.

This approach differs from prior solutions by removing the service provider's ability to act as a trusted intermediary for decryption. Unlike standard cloud storage that might use server-side encryption, this system prevents the host from performing data mining or complying with broad data requests, as they physically cannot access the content. The invention further differentiates itself through a secure key exchange protocol that uses asymmetric cryptography to pass private symmetric keys between users without the server ever seeing the underlying key values.