公开(公告)号：US09129095B1

公开(公告)日：2015-09-08

申请号：US14576724

申请日：2014-12-19

申请人： Tresorit Kft

发明人： István Lám ,  Szilveszter Szebeni ,  Tamás Koczka

IPC分类号： G06F21/10 ,  G06F21/60 ,  H04L29/06

CPC分类号： H04L63/0442 ,  G06F21/10 ,  G06F21/60 ,  G06F21/6218 ,  H04L63/0428 ,  H04L63/061 ,  H04L63/123 ,  H04L2463/101

摘要： A technique for extending security to a data object (e.g., a document, a file, a message, etc.) once it has been shared and during collaboration with others who have access rights to that data object. The approach advantageously combines group key-based client-side encryption to secure the data object as it travels from a user's computer, to the cloud, and to a chosen collaborator's computer, together with a digital rights management (DRM) layer that provides permission management that associates a set of permission rights that travel with the data object.

摘要翻译： 一旦它被共享并且与具有对该数据对象的访问权限的其他人协作，则将安全性扩展到数据对象（例如，文档，文件，消息等）的技术。 该方法有利地结合基于组密钥的客户端加密来保护数据对象在从用户的计算机，云，以及所选择的协作者的计算机行进时，以及提供许可管理的数字权限管理（DRM）层 它将一组与数据对象一起行进的权限权限相关联。

公开(公告)号：US09563783B2

公开(公告)日：2017-02-07

申请号：US14372234

申请日：2012-03-22

申请人： Szilveszter Szebeni ,  Levente Buttyán ,  István Lám

发明人： Szilveszter Szebeni ,  Levente Buttyán ,  István Lám

IPC分类号： H04L29/06 ,  G06F21/62 ,  H04L29/08

CPC分类号： G06F21/6218 ,  G06F21/6272 ,  G06F2221/2101 ,  G06F2221/2107 ,  G06F2221/2137 ,  H04L63/0428 ,  H04L63/061 ,  H04L63/064 ,  H04L63/065 ,  H04L63/08 ,  H04L67/104

摘要： Method and system for handling group sharing in distributed data storage environment, to utilize online unexploited storage space and bandwidth of users. Files of a user are cut into pieces which are then distributed among other online users. The original files are stored retrievably. Key Lock Boxes (KLB) are used for storing keys encrypted. With an authentication and key exchange protocol a common group key is generated for encrypting a Master Key Lock Box. The Master KLB represents the root of an oriented tree graph, the nodes of the graph represent KLBs. There is an oriented edge between two nodes when a source KLB (17) contains the key of a target KLB (19). The KLBs (13, 14, 17, 19) contain keys (18, 20) to a subset of files. Starting from said Master Key Lock Box by using the common group key the KLBs (13, 14, 17, 19) are opened until the requested file is reached.

摘要翻译： 在分布式数据存储环境中处理组共享的方法和系统，利用在线未开发的存储空间和用户带宽。 用户的文件被切成块，然后分发给其他在线用户。 原始文件可被存储。 密钥锁盒（KLB）用于存储密钥加密。 使用认证和密钥交换协议，生成用于加密主密钥锁定盒的公共组密钥。 主KLB代表定向树图的根，图的节点表示KLB。 当源KLB（17）包含目标KLB（19）的密钥时，在两个节点之间存在定向边缘。 KLB（13,14,17,19）包含一个文件子集的键（18,20）。 通过使用公共组密钥从所述主密钥锁定盒开始，KLB（13,14,17,19）被打开，直到达到所请求的文件。

公开(公告)号：US11356580B1

公开(公告)日：2022-06-07

申请号：US17356256

申请日：2021-06-23

申请人： Tresorit Kft.

发明人： Péter Bartha ,  István Lám ,  Péter István Budai ,  Dániel Krausz

IPC分类号： H04N1/44 ,  G06F21/84 ,  G06F3/14

摘要： A screen capture prevention method includes serving a single-color, DRM-protected video clip for display as a background for a document on a web browser. The document is processed to render its background color as transparent. Content of the document is viewable over the contrasting video clip background. When a screen capture event is detected, the video clip is changed to a same color as the content of the processed document, rendering the content indistinguishable from the background while the screen capture event is active.

公开(公告)号：US10178075B2

公开(公告)日：2019-01-08

申请号：US14846954

申请日：2015-09-07

申请人： Tresorit Kft

发明人： István Lám ,  Szilveszter Szebeni ,  Tamás Koczka

IPC分类号： H04L9/08 ,  H04L9/14 ,  G06F21/62 ,  G06F21/60 ,  H04L29/06 ,  G06F21/10

摘要： A technique for extending security to a data object (e.g., a document, a file, a message, etc.) once it has been shared and during collaboration with others who have access rights to that data object. The approach advantageously combines group key-based client-side encryption to secure the data object as it travels from a user's computer, to the cloud, and to a chosen collaborator's computer, together with a digital rights management (DRM) layer that provides permission management that associates a set of permission rights that travel with the data object.