Patent No. US9397983 (titled "Private data sharing system") on Mar 4, 2015. The application was issued on Jul 19, 2016.
’983 is related to the field of secure data sharing systems (DSS) and online social networks. Traditional social platforms often store user data in a format accessible to the service provider, creating vulnerabilities to data mining, unauthorized employee access, and external hacking. The background context emphasizes a long-felt need for a system where privacy is mathematically guaranteed, ensuring that personally identifiable information remains confidential even from the entities hosting the infrastructure.
The underlying idea behind ’983 is the implementation of a zero-knowledge architecture where data is obfuscated at the source and remains encrypted throughout its entire lifecycle on the network. The key inventive insight is shifting the burden of decryption from the central server to the individual client nodes. By ensuring the server never possesses the de-obfuscation logic or keys, the system creates a trustless environment where the service provider acts merely as a blind postman, routing packets it cannot read.
The claims of ’983 focus on a multi-user data sharing method and client architecture that facilitates private exchange between at least three distinct users. The independent claims cover the specific mechanism where each user employs a unique data obfuscation value and/or program (DOVP) to secure their files before transmission. Crucially, the claims require that each recipient client must possess a specific, complementary de-obfuscation value provided directly or indirectly by the original author to successfully render the data.
In practice, the invention works by having each user initialize their client with a personal passphrase that generates a unique encryption profile. When a user shares a photo or message, the client encrypts the file locally before it ever hits the wire. The central server receives these obfuscated data packets (ODPs) and routes them to authorized contacts. Because each user has a different key, a recipient's client must maintain a key locker containing the specific decryption parameters for every individual friend in their network to decode the incoming stream.
This approach differentiates itself from prior solutions by eliminating the central authority's role in key management. Unlike standard communal repositories that use server-side encryption, this system ensures that the server lacks the de-obfuscation means entirely. Even if the server infrastructure is compromised, the data remains useless to the attacker. Furthermore, the system provides a secure recovery path by allowing users to retrieve lost keys from their trusted contacts, leveraging the distributed nature of the social graph to maintain availability without sacrificing privacy.
In the early 2010s when ’983 was filed, online social networks and data sharing systems were typically implemented using centralized server architectures where user data was stored in a format accessible to the service provider. At a time when systems commonly relied on server-side encryption using provider-managed keys rather than client-side obfuscation, the privacy of personally identifiable information was often vulnerable to internal exploitation or external breaches. Furthermore, when hardware and software constraints made the seamless, automated exchange of private decryption keys between disparate client devices non-trivial, most platforms prioritized ease of access and data mining capabilities over absolute user-controlled data sovereignty.
The disclosed invention represents a meaningful technical advancement through the integration of a client-side obfuscation architecture that ensures neither the central server nor its operators can access or discern the underlying user data. This architectural shift is achieved by utilizing a local client program to encrypt data before transmission and managing a secure 'key locker' structure that is itself doubly encrypted, requiring both user-defined and system-supplied values for access. This configuration enables a novel capability where users can recover lost credentials through a distributed trust model with established contacts without exposing the keys to the central authority. By decoupling data storage from data de-obfuscation, the system overcomes the technical constraint of provider-side data vulnerability while maintaining the social functionality of shared archives and real-time communication.
This patent contains 63 claims, with claims 1, 3, 24, 37, 42, 45, and 54 being independent. The independent claims focus on methods, client architectures, and computer-readable media for facilitating private data sharing among multiple users by utilizing unique, user-specific obfuscation and de-obfuscation values or programs that ensure a central server cannot access the underlying data. The dependent claims serve to further define specific technical implementations, such as the use of encryption keys, the storage of obfuscated data on servers, the management of keys within secure lockers, and the verification of user credentials and sharing permissions within the network.
Definitions of key terms used in the patent claims.
US Latest litigation cases involving this patent.

The dossier documents provide a comprehensive record of the patent's prosecution history - including filings, correspondence, and decisions made by patent offices - and are crucial for understanding the patent's legal journey and any challenges it may have faced during examination.
Get instant alerts for new documents