Patent US10805084

Decentralized system for secure access of digital content
[+] Show Details

US10805084

1. A decentralized system for secure access of digital content in an overlay network, the system comprising: (3) (2)

a memory device; and

one or more processors in communication with the memory device, the one or more processors configured to: obtain, from a client, a first request to access encrypted digital content, the first request comprising a call on a digital contract, the call passing an ephemeral key set encrypted with a public key of a consumer associated with the client,

record, in the digital contract, a transaction identifying the first request in association with the encrypted ephemeral key set, the transaction being identified by a transaction identifier (ID),

send, to the client, the transaction ID,

obtain, from the client, a second request comprising: an authorization token comprising the transaction ID and a signature of the consumer,

verify, based on the authorization token, authorization of the consumer,

record, in the digital contract, a transaction identifying one or more key management service (KMS) keys, the one or more KMS keys comprising: a proxy re-encryption key generated using a public/private key pair, and an encrypted version of a content key of the ephemeral key set, the encrypted version of the content key encrypted with a public key of the consumer,

re-encrypt, using the proxy re-encryption key, the digital content from a first key space to a second key space, the first key space being an original key space, and the second key space being an ephemeral key space, and

send, to the client, the re-encrypted digital content.

2. The system of claim 1, the one or more processors further configured to: (1) (2)

4. The system of claim 1, wherein the transaction identifying the one or more KMS keys is recorded in the digital contract responsive to a call from a KMS. (0)

5. The system of claim 1, wherein the re-encrypted digital content is configured to be decrypted by the client by: (0) (3)

6. A non-transitory computer-readable medium storing program code to be executed by one or more processors, the program code comprising instructions configured to cause: (3) (8)

obtaining, from a client, a first request to access encrypted digital content, the first request comprising a call on a digital contract, the call passing an ephemeral key set encrypted with a public key of a consumer associated with the client;

recording, in the digital contract, a transaction identifying the first request in association with the encrypted ephemeral key set, the transaction being identified by a transaction identifier (ID);

sending, to the client, the transaction ID;

obtaining, from the client, a second request comprising: an authorization token comprising the transaction ID and a signature of the consumer;

verifying, based on the authorization token, authorization of the consumer;

recording, in the digital contract, a transaction identifying one or more KMS keys, the one or more KMS keys comprising: a proxy re-encryption key generated using a public/private key pair, and an encrypted version of a content key of the ephemeral key set, the encrypted version of the content key encrypted with a public key of the consumer;

re-encrypting, using the proxy re-encryption key, the digital content from a first key space to a second key space, the first key space being an original key space, and the second key space being an ephemeral key space; and

sending, to the client, the re-encrypted digital content.

7. The non-transitory computer-readable medium of claim 6, the instructions further configured to cause: (1) (2)

9. The non-transitory computer-readable medium of claim 6, wherein the transaction identifying the one or more KMS keys is recorded in the digital contract responsive to a call from a KMS. (0)

10. The non-transitory computer-readable medium of claim 6, wherein the re-encrypted digital content is configured to be decrypted by the client by: (0) (3)

11. A method comprising: (3) (8)

recording, in the digital contract, a transaction identifying the first request in association with the encrypted ephemeral key set, the transaction being identified by a transaction identifier (ID);

sending, to the client, the transaction ID;

obtaining, from the client, a second request comprising: an authorization token comprising the transaction ID and a signature of the consumer;

verifying, based on the authorization token, authorization of the consumer;

sending, to the client, the re-encrypted digital content.

12. The method of claim 11, the method further comprising: (1) (2)

14. The method of claim 11, wherein the transaction identifying the one or more KMS keys is recorded in the digital contract responsive to a call from a KMS. (0)

15. The method of claim 11, wherein the re-encrypted digital content is configured to be decrypted by the client by: (0) (3)

View Abstract and Specification Size

PDF with Images and Document Face >

Full Text Publication >

Patent US10805084

Decentralized system for secure access of digital content

Patent Matrix® Search