Vaultive Ltd.

Cyberark Software Ltd.

Ben Matzkel

Aviad Lahav

Maayan Tal

Disclosed embodiments relate to systems and methods for analyzing data communication attributes of the target application without requiring preexisting knowledge of the data communication attributes. Techniques include implementing a training phase with respect to the target application comprising: identifying a training data element to be transmitted from an interface application to a target application through an intermediary agent, receiving a training electronic communication from the interface application containing the training data element, and analyzing one or more structural attributes of the training electronic communication; and implementing a runtime phase with respect to the target application comprising: receiving a runtime electronic communication transmitted from the interface application, identifying, based on the one or more structural attributes analyzed during the training phase, a corresponding one or more structural attributes of the runtime electronic communication, and implementing a control operation for the runtime electronic communication.

Investigating and securing communications with applications having unknown attributes

A system and method for auditing data. A first request, the request including at least one data item and generated at a client may be received. The at least one data item may be processed to produce at least one processed data item. A second request may be generated based on the first request and on the processed data items. The second request may be forwarded to a server.

System and method for controlling and monitoring access to data processing applications

A system and method for protecting access to authentication systems. A mediator may accept original authentication credentials from a client, may process the authentication credentials to provide processed authentication credentials and may forward the processed authentication credentials to an authentication system. Processing original authentication credentials may include encrypting at least one portion of original authentication credentials.

System and method for protecting access to authentication systems

A method for encrypting data. The method comprises receiving, from a user, via a client terminal, digital content including at least one textual string for filling in at least one field in a document managed by a network node via a computer network, encrypting the at least one textual string, and sending the at least one encrypted textual string to the network node via the computer network so as to allow filling in the at least one field with the at least one encrypted textual string. The network node is configured for storing and retrieving the at least one textual encrypted string without decrypting.

Method and system for secure use of services by untrusted storage providers

A method and system for securing data transmitted between a client device and a server by obtaining input text at an intermediate module, processing the input text to obtain processed text, deciding whether to transform the input text deterministically or non-deterministically, or a combination of deterministically and non-deterministically, and based on that decision, transforming the input text accordingly, using at least one key to obtain processed text, and transmitting the processed text to the server. Other embodiments and features of the invention include searching for processed text, allowing for sorting of processed text records by applying an order-preserving transformation, storing unabridged processed elements in a storage device managed by the intermediate module, providing a function by the intermediate module on the input data in lieu of the server, and processing the processed text so as to determine by the intermediate module a transformation applied by the server on input text.

System, apparatus and method for encryption and decryption of data transmitted over a network

A system and method for secure use of messaging systems. A mediator may receive an original message, process the original message to produce a processed message, and may forward the processed message to a server or a messaging system. A mediator may receive a processed message from a server or a messaging system, process the received processed message to produce an unprocessed message that may be substantially identical to the original message and may forward the unprocessed message to a destination.

System and method for secure use of messaging systems

A method and system for securing data transmitted between a client device and a server by obtaining input text at an intermediate module, processing the input text to obtain processed text, deciding whether to transform the input text deterministically or non-deterministically, or a combination of deterministically and non-deterministically, and based on that decision, transforming the input text accordingly, using at least one key to obtain processed text, and transmitting the processed text to the server. Other embodiments and features of the invention include (independently or together) searching for processed text, allowing for sorting of processed text records by applying an order-preserving transformation, storing unabridged processed elements in a storage device managed by the intermediate module, providing a function by the intermediate module on the input data in lieu of the server, and processing the processed text so as to determine by the intermediate module a transformation applied by the server on input text.

A method and system for securing data transmitted between a client device and a server by obtaining input text at an intermediate module, processing the input text to obtain processed text, and transmitting the processed text to the server. Embodiments of the invention include securing data between a client device and a server by processing the input text at the intermediate module by applying an order-preserving transformation, the order-preserving transformation comprising: generating order information based on the input text, the order information indicative of a relative order of the input text within a set of possible input texts according to a collation rule.

A method and system for securing data transmitted between a client device and a server by obtaining input text at an intermediate module, processing the input text to obtain processed text, and transmitting the processed text to the server. According to one embodiment of the invention, the intermediate module may add excess information (referred to herein as bait) to encrypted user data in known locations. Such bait may be used when processed user data is received at the intermediate module in order to infer the kind of transformation applied to processed user data. Non-limiting examples of transformations for which bait may be used are application of a certain character encoding scheme and HTML tag elimination.

A method and system for securing data transmitted between a client device and a server by obtaining input text at an intermediate module, processing the input text to obtain processed text, and transmitting the processed text to the server. In particular, the server may be configured to provide at least one function on input data provided by the client device, and the intermediate module may be configured to receive input data from the client device, to transform the input data into processed data, and to transmit the processed data to the server. Embodiments of the invention may include systems and methods for intercepting the input data at the intermediate module without transmission of the input data to the server; providing the at least one function by the intermediate module on the input data; and generating by the intermediate module at least one message to the client device based on a result of the at least one function.

Growing community of inventors

Givatayim, Israel

Ben Matzkel