Uab 360 It

360 It, Uab

Mindaugas Valkaitis

Dovydas Bespalovas

Kazimieras Celiesius

Jovaldas Januskevicius

Eimantas Puzeris

A method including receiving, by a trusted device from a processor, a request to determine a master key to be utilized for encrypting a private key; determining, by the trusted device based at least in part on receiving the request, the master key and a unique identifier that identifies the master key; transmitting, by the trusted device to the processor, the unique identifier; receiving, by the trusted device from the processor, the unique identifier in association with the private key to indicate to the trusted device that the master key, which is identified by the unique identifier, is to be utilized to encrypt the private key; and transmitting, by the trusted device to the processor, an encrypted private key based at least in part on utilizing the master key to encrypt the private key is disclosed. Various other aspects are contemplated.

Stateless system to protect data

A method including encrypting, by a processor associated with a user device, first factor authentication information associated with determining a first authentication factor; enabling, by the processor, encryption of second factor authentication associated with determining a second authentication factor; detecting, by the processor, an attempt by the user device to access a service to be provided by a service provider; determining, by the processor based at least in part on detecting the attempt, the first authentication factor based at least in part on decrypting the first factor authentication information; determining, by the processor, the second authentication factor based at least in part on enabling decryption of the second factor authentication information; and enabling, by the processor, authentication of the user device with the service provider based at least in part on utilizing the first authentication factor and the second authentication factor is disclosed. Various other aspects are contemplated.

Optimized authentication system

A request is received from a user device. In response to the request, respective penalty scores for VPN servers are calculated. A respective penalty score for a VPN server is calculated based on a time of creation of the VPN server such that a first VPN server of the VPN servers having a first creation time that is earlier in time than a second creation time of a second VPN server of the VPN servers is assigned a higher weight than the second VPN server. One or more of the VPN servers are selected based on the respective penalty scores. Respective internet protocol (IP) addresses of the one or more of the VPN servers are transmitted to the user device.

Using creation times in identifying optimal VPN servers

A method for configuring a first user device to generate a sharing encryption key based at least in part on combining a folder access private key associated with a folder and an assigned public key associated with a second user device; configuring the first user device to encrypt the folder access private key associated with the folder utilizing the sharing encryption key; and configuring the first user device to transmit the encrypted folder access private key to enable the second user device to access the folder is disclosed. Various other aspects are contemplated.

Sharing data in an organized storage system

A method including determining, by a first device, an assigned key pair including an assigned public key and an assigned private key; determining, by the first device for a folder associated with encrypted content, a folder access public key and a folder access private key; determining, by the first device for a group, a group access public key and a group access private key; encrypting, by the first device, the folder access private key by utilizing the assigned public key; encrypting, by the first device, the folder access private key by utilizing the group access public key; and accessing, by a second device, the folder based on decrypting the folder access private key by utilizing the group access private key or based on decrypting the folder access private key by utilizing the assigned private key, the first device being different than the second device. Other aspects are contemplated.

Grouping data in an organized storage system

A method including transmitting, by an infrastructure device to a distributor device, an invitation link to enable the distributor device to distribute to a user device network services provided by the infrastructure device; transmitting, by the infrastructure device to the distributor device based on the distributor device activating the invitation link, seed information to be utilized by the distributor device to determine a distributor key pair including a distributor public key and a distributor private key; receiving, by the infrastructure device from the distributor device, an action request related to an action to be performed regarding the network services, a portion of the action request being signed based on utilizing the distributor private key; and enabling, by the infrastructure device, performance of the action regarding the network services based on validating the action request by utilizing the distributor public key is disclosed.

Optimized access control for network services

The present disclosure discloses determining, by a first device, an access key pair associated with encrypted content, the access key pair including a content access public key and a content access private key; receiving, by the first device, a public key associated with a second device; encrypting, by the first device, the content access private key based at least in part on utilizing the content access private key and the public key associated with the second device; and transmitting, by the first device, the encrypted content access private key to enable the second device to access the encrypted content. Various other aspects are contemplated.

Sharing access to data

A method including transmitting, by a device to a storage server, a request to receive encrypted content and one or more encrypted keys stored in association with the encrypted content; receiving, by the device from the storage server, the encrypted content and the one or more encrypted keys; receiving, by the device, a master string of alphanumeric characters; determining, by the device, a master key based at least in part on the master string; decrypting, by the device based at least in part on utilizing the master key, an encrypted assigned private key associated with the device to determine an assigned private key, the encrypted assigned private key being included in the one or more encrypted keys; and decrypting, by the device, the encrypted content based at least in part on utilizing the assigned private key is disclosed. Various other aspects are contemplated.

Stateless system to encrypt and decrypt data

A method including determining, by a device, an assigned key pair including an assigned key pair including an assigned public key and an assigned private key; determining, by the device for a folder associated with encrypted content, a folder access key pair including a folder access public key and a folder access private key; determining, by the device for a group, a group access key pair including a group access public key and a group access private key; encrypting, by the device, the folder access private key by utilizing the assigned public key; encrypting, by the device, the folder access private key by utilizing the group access public key; and accessing, by the device, the folder based on decrypting the folder access private key by utilizing the group access private key or based on decrypting the folder access private key by utilizing the assigned private key. Other aspects are contemplated.

A method including determining, by a device for a folder associated with encrypted content, a folder access key pair including a folder access public key and a folder access private key; determining, by the device for a group associated with the folder, a group access key pair including a group access public key and a group access private key; encrypting, by the device, the folder access private key by utilizing the group access public key; and accessing, by the device, the folder via the group based at least in part on decrypting the folder access private key. Various other aspects are contemplated.

A method including determining, by a first device for a folder associated with encrypted content, a folder access key pair including a folder access public key and a folder access private key; determining, by the first device for a group, a group access key pair including a group access public key and a group access private key; encrypting, by the first device, the folder access private key by utilizing the group access public key; and accessing, by a second device, the folder via the group based at least in part on decrypting the folder access private key, the second device being different than the first device. Various other aspects are contemplated.

A method including encrypting, by a user device based at least in part on utilizing a symmetric key, a folder stored on the user device; encrypting, by the user device based at least in part on utilizing an assigned public key associated with the user device, the symmetric key to determine a single-encrypted symmetric key; encrypting, by the user device based at least in part on utilizing a trusted key specific to the user device, the single-encrypted symmetric key to determine a double-encrypted symmetric key; and storing, by user device, the double-encrypted symmetric key in an associated memory. Various other aspects and techniques are contemplated.

Authentication system for a multiuser device

A method including receiving, by a user device, encrypted content and an encrypted assigned private key associated with the encrypted content; decrypting, by the user device, the encrypted assigned private key based at least in part on utilizing a master key to determine a decrypted assigned private key; determining, by the user device, a combination decryption key based at least in part on utilizing the decrypted assigned private key and an access public key associated with the encrypted content; decrypting, by the user device, an encrypted access private key associated with the access public key to determine a decrypted access private key; and decrypting, by the user device, the encrypted content based at least in part on utilizing the decrypted access private key is disclosed. Various other aspects are contemplated.

Managing access to data

A method including receiving, by a manager device from an infrastructure device, an invitation link to enable the manager device to manage network services provided by the infrastructure device; receiving, by the manager device from the infrastructure device based on the manager device activating the invitation link, seed information including unique information associated with manager device to enable the manager device to determine authorization information; determining, by the manager device, the authorization information based on utilizing the unique information; transmitting, by the manager device to the infrastructure device, a manager request related to an action to be performed regarding the network services, the manager request being signed based on utilizing a portion of the authorization information; and performing, by the manager device based on authorization of the manager request by the infrastructure device, the action regarding the network services is disclosed. Various other aspects are contemplated.

Access control for network services

The present disclosure discloses configuring a device to determine, for encrypted content, a content access key pair including a content access public key and a content access private key, the encrypted content being determined by encrypting content utilizing a symmetric key; configuring the device to determine, for a folder, a folder access key pair including a folder access public key and a folder access private key; configuring the device to encrypt the content access private key by utilizing the folder access public key; configuring the device to encrypt the symmetric key by utilizing the content access public key; configuring the device to transmit the encrypted content, the encrypted content access private key and the encrypted symmetric key to a stateless server for storage; and configuring the device to access the encrypted content by decrypting the encrypted content access private key and the encrypted symmetric key. Various other aspects are contemplated.

Growing community of inventors

Vilnius, Lithuania

Mindaugas Valkaitis