Uab 360 It

360 It, Uab

Mindaugas Valkaitis

Dovydas Bespalovas

Kazimieras Celiesius

Jovaldas Januskevicius

Eimantas Puzeris

A method configuring a manager device, responsible for managing network services provided by an infrastructure device, to determine a manager request including a signature header signed by utilizing a manager private key associated with the manager device and a timestamp header identifying a point in time when the signature header was signed; configuring the manager device to transmit, to the infrastructure device, the manager request to request performance of an action associated with managing the network services; and configuring the manager device to receive, from the infrastructure device based on transmitting the manager request, an authorization message indicating successful authorization of the manager request, the successful authorization being based on a verification that a time difference between the point in time when the signature header was signed and a current time satisfies a predetermined duration of time is disclosed. Various other aspects are contemplated.

Optimized header information to enable access control

A method in a virtual private network (VPN) environment, the method including receiving, at a user device, domain information associated with a VPN service provider; transmitting, by the user device, a first connection request to the VPN service provider based at least in part on utilizing the domain information; determining, by the user device, that the VPN service provider cannot be reached via utilization of the domain information; determining, by the user device based at least in part on determining that the VPN service provider cannot be reached, substitute domain information to be utilized for transmitting a second connection request; and transmitting, by the user device, the second connection request to the VPN service provider based at least in part on utilizing the substitute domain information is disclosed. Various other aspects are contemplated.

Providing substitute domain information in a virtual private network

A method including receiving, by a trusted device from a processor, a request to determine a master key to be utilized for encrypting a private key; determining, by the trusted device based at least in part on receiving the request, the master key and a unique identifier that identifies the master key; transmitting, by the trusted device to the processor, the unique identifier; receiving, by the trusted device from the processor, the unique identifier in association with the private key to indicate to the trusted device that the master key, which is identified by the unique identifier, is to be utilized to encrypt the private key; and transmitting, by the trusted device to the processor, an encrypted private key based at least in part on utilizing the master key to encrypt the private key is disclosed. Various other aspects are contemplated.

Stateless system to protect data

A method including encrypting, by a processor associated with a user device, first factor authentication information associated with determining a first authentication factor; enabling, by the processor, encryption of second factor authentication associated with determining a second authentication factor; detecting, by the processor, an attempt by the user device to access a service to be provided by a service provider; determining, by the processor based at least in part on detecting the attempt, the first authentication factor based at least in part on decrypting the first factor authentication information; determining, by the processor, the second authentication factor based at least in part on enabling decryption of the second factor authentication information; and enabling, by the processor, authentication of the user device with the service provider based at least in part on utilizing the first authentication factor and the second authentication factor is disclosed. Various other aspects are contemplated.

Optimized authentication system

A request is received from a user device. In response to the request, respective penalty scores for VPN servers are calculated. A respective penalty score for a VPN server is calculated based on a time of creation of the VPN server such that a first VPN server of the VPN servers having a first creation time that is earlier in time than a second creation time of a second VPN server of the VPN servers is assigned a higher weight than the second VPN server. One or more of the VPN servers are selected based on the respective penalty scores. Respective internet protocol (IP) addresses of the one or more of the VPN servers are transmitted to the user device.

Using creation times in identifying optimal VPN servers

A method for configuring a first user device to generate a sharing encryption key based at least in part on combining a folder access private key associated with a folder and an assigned public key associated with a second user device; configuring the first user device to encrypt the folder access private key associated with the folder utilizing the sharing encryption key; and configuring the first user device to transmit the encrypted folder access private key to enable the second user device to access the folder is disclosed. Various other aspects are contemplated.

Sharing data in an organized storage system

A method including determining, by a first device, an assigned key pair including an assigned public key and an assigned private key; determining, by the first device for a folder associated with encrypted content, a folder access public key and a folder access private key; determining, by the first device for a group, a group access public key and a group access private key; encrypting, by the first device, the folder access private key by utilizing the assigned public key; encrypting, by the first device, the folder access private key by utilizing the group access public key; and accessing, by a second device, the folder based on decrypting the folder access private key by utilizing the group access private key or based on decrypting the folder access private key by utilizing the assigned private key, the first device being different than the second device. Other aspects are contemplated.

Grouping data in an organized storage system

A method including transmitting, by an infrastructure device to a distributor device, an invitation link to enable the distributor device to distribute to a user device network services provided by the infrastructure device; transmitting, by the infrastructure device to the distributor device based on the distributor device activating the invitation link, seed information to be utilized by the distributor device to determine a distributor key pair including a distributor public key and a distributor private key; receiving, by the infrastructure device from the distributor device, an action request related to an action to be performed regarding the network services, a portion of the action request being signed based on utilizing the distributor private key; and enabling, by the infrastructure device, performance of the action regarding the network services based on validating the action request by utilizing the distributor public key is disclosed.

Optimized access control for network services

The present disclosure discloses determining, by a first device, an access key pair associated with encrypted content, the access key pair including a content access public key and a content access private key; receiving, by the first device, a public key associated with a second device; encrypting, by the first device, the content access private key based at least in part on utilizing the content access private key and the public key associated with the second device; and transmitting, by the first device, the encrypted content access private key to enable the second device to access the encrypted content. Various other aspects are contemplated.

Sharing access to data

A method including transmitting, by a device to a storage server, a request to receive encrypted content and one or more encrypted keys stored in association with the encrypted content; receiving, by the device from the storage server, the encrypted content and the one or more encrypted keys; receiving, by the device, a master string of alphanumeric characters; determining, by the device, a master key based at least in part on the master string; decrypting, by the device based at least in part on utilizing the master key, an encrypted assigned private key associated with the device to determine an assigned private key, the encrypted assigned private key being included in the one or more encrypted keys; and decrypting, by the device, the encrypted content based at least in part on utilizing the assigned private key is disclosed. Various other aspects are contemplated.

Stateless system to encrypt and decrypt data

A method including determining, by a device, an assigned key pair including an assigned key pair including an assigned public key and an assigned private key; determining, by the device for a folder associated with encrypted content, a folder access key pair including a folder access public key and a folder access private key; determining, by the device for a group, a group access key pair including a group access public key and a group access private key; encrypting, by the device, the folder access private key by utilizing the assigned public key; encrypting, by the device, the folder access private key by utilizing the group access public key; and accessing, by the device, the folder based on decrypting the folder access private key by utilizing the group access private key or based on decrypting the folder access private key by utilizing the assigned private key. Other aspects are contemplated.

A method including determining, by a device for a folder associated with encrypted content, a folder access key pair including a folder access public key and a folder access private key; determining, by the device for a group associated with the folder, a group access key pair including a group access public key and a group access private key; encrypting, by the device, the folder access private key by utilizing the group access public key; and accessing, by the device, the folder via the group based at least in part on decrypting the folder access private key. Various other aspects are contemplated.

A method including determining, by a first device for a folder associated with encrypted content, a folder access key pair including a folder access public key and a folder access private key; determining, by the first device for a group, a group access key pair including a group access public key and a group access private key; encrypting, by the first device, the folder access private key by utilizing the group access public key; and accessing, by a second device, the folder via the group based at least in part on decrypting the folder access private key, the second device being different than the first device. Various other aspects are contemplated.

A method including encrypting, by a user device based at least in part on utilizing a symmetric key, a folder stored on the user device; encrypting, by the user device based at least in part on utilizing an assigned public key associated with the user device, the symmetric key to determine a single-encrypted symmetric key; encrypting, by the user device based at least in part on utilizing a trusted key specific to the user device, the single-encrypted symmetric key to determine a double-encrypted symmetric key; and storing, by user device, the double-encrypted symmetric key in an associated memory. Various other aspects and techniques are contemplated.

Authentication system for a multiuser device

A method including receiving, by a user device, encrypted content and an encrypted assigned private key associated with the encrypted content; decrypting, by the user device, the encrypted assigned private key based at least in part on utilizing a master key to determine a decrypted assigned private key; determining, by the user device, a combination decryption key based at least in part on utilizing the decrypted assigned private key and an access public key associated with the encrypted content; decrypting, by the user device, an encrypted access private key associated with the access public key to determine a decrypted access private key; and decrypting, by the user device, the encrypted content based at least in part on utilizing the decrypted access private key is disclosed. Various other aspects are contemplated.

Growing community of inventors

Vilnius, Lithuania

Mindaugas Valkaitis