Adeia Guides Inc.

Envault Corporation Oy

Splitstreem Oy

Valtion Teknillinen Tutkimuskeskus

Pcms Holdings, Inc.

Ville J Ollikainen

Harri Rautio

Juuso Pesola

Pekka Koskela

Anni Karinsalo

Juhani Latvakoski

Pekka Pursula

Markku Kylanpaa

Markku-Juhani Saarinen

Markku Kylänpää

Juha Latvakoski

Christer Bäckström

Markku-Juhani Sarinen

Sari Eliisa Vainikainen

Asta I Bäck

Systems and methods are described for encrypting and decrypting data in a distributed storage environment. Such systems and methods for encryption may divide a data payload into slices, the slices including a first slice and a subsequent slice, employ a content encryption key and an initialization vector, encrypt the first slice using the content encryption key and the initialization vector, generate a subsequent initialization vector for the subsequent slice based upon the initialization vector and the unencrypted content of the first slice, and encrypt the subsequent slice using the subsequent initialization vector and the content encryption key. The systems and methods may then generate a list of the encrypted slices into which the data payload has been generated, and publish to a secure storage location, the slice list, the content encryption key and the initialization vector for the first slice in the slice list, with the slices outputted to the distributed storage environment. Systems and methods for decryption may receive, from a secure storage location, a slice list, a content encryption key, and an initialization vector, determine the encrypted slices to be received from the distributed storage environment. The systems and methods may receive, from the distributed storage environment, at least encrypted first slice and the encrypted subsequent slice, and decrypt the first slice using the content encryption key and the initialization vector, to generate a decrypted first slice, and generate a subsequent initialization vector for the subsequent slice based upon the initialization vector and the decrypted first slice, decrypt the subsequent slice using the subsequent initialization vector and the content encryption key, and combine the first slice and the subsequent slice into a data payload.

Distributed data content protection

A peer-to-peer content provision network is disclosed which implements a privacy-preserving payment mechanism for rewarding actors in the network (for example, a content supplier, a content distributor and storage-contributing peers). To reward some or all of those actors, a user device obtains, from a token service, anonymous digital payment tokens which include an ephemeral public key. Payment is achieved by adding an assignment layer to the token which involves combining a payee ephemeral public key with the token, and applying a digital signature to the combination using the ephemeral private key corresponding to the ephemeral public key in the token. Subsequent assignments can be made by the payee by adding a further assignment layer to the token using a payee ephemeral private key which pairs with the payee ephemeral public key in the received token. A payment service can divide a payment from the user between actors in the network.

Privacy-preserving payments for peer-to-peer networks

Systems and methods are described for providing user control over access to private data. An exemplary embodiment is performed on a client computing device in which separate computing environments referred to as context modules are installed. Each context module has a context identifier. An application is installed in a context module. The client computing device receives a request for data from the application, where the request for data includes a schema identifier that identifies the data. If the schema identifier is associated with the context identifier in a rules data storage, then the data is provided to the application. Otherwise, a user is prompted as to whether to permit the data request.

Method and system for context-based control over access to personal data

A method for writing data to a memory device comprising a first and a second memory device the first memory device comprises data blocks numbered with block numbers and the second memory device comprises at least one reference calculated from a data block digest and its physical block number. The invention comprises at least the steps: calculating the digest from at least part of the data block content, receiving at least one physical block number, to which the data block contents in the first memory device is stored, encrypting the data block content, storing the data block content to the first memory device to the position pointed by the physical block number, and storing or issuing a command to save the digest, or a number derived from it, and at least one said physical block number to the second memory device. A system, computer program, and server are also presented.

Method and apparatus for implementing secure and selectively deniable file storage

A Method and a terminal intended for securing information in a local memory device which is couplable to a terminal having a data link interface. At the terminal, the method divides the original data resulting in a first portion and a second portion. The method stores the first portion in the local memory device and sends the second portion for storage in a remote memory device. Upon obtaining an authorized read request targeted to the original data the method retrieves the second portion and combines the two portions. The method provides high data security if the data, is encrypted prior to the step of dividing. Another aspect of the invention comprises a terminal capable of at least combing the first and second data portions to reconstruct the original data, and preferably to perform the step required for dividing the data. The data may or may not be encrypted.

Method and apparatus for securing data in a memory device

The invention concerns a method for writing data to a memory device arrangement comprising a first and a second memory device in which the first memory device comprises data blocks numbered with block numbers and the second memory device comprises at least one reference calculated from a data block digest and its physical block number. The invention is characterized in that it comprises the following steps: calculating the digest from at least part of the data block content, receiving at least one physical block number, to which the data block contents in the first memory device is stored, encrypting the data block content, storing the data block content to the first memory device to the position pointed by the physical block number, and storing or issuing a command to save the digest, or a number derived from it, and at least one said physical block number to the second memory device. Also a system, a computer program and server computer in accordance to the invention are presented.

A Method and a terminal intended for securing information in a local memory device which is couplable to a terminal having a data link interface. At the terminal, the method comprises the following steps. The method dividesoriginal data included in the information to be secured, a division of the original data resulting in a first portion and a second portion. The method storesthe first portion in the local memory device and sendsthe second portion via the data link interface for storage in a remote memory device. The method includes obtainingan authorized read request targeted to the original data and responsive to the authorized read request reconstructs the original data. In more detail, the method retrievesvia the data link interface the second portion and combinesthe second portion and the first portion which was stored in the local memory device. The method provides very high data security if the data, from which the second portion is removed, is encrypted prior to the step of dividing. Another aspect of the invention comprises a terminal capable of at least combing the first and second data portions to reconstruct the original data, and preferably to perform the step required for dividing the data. The data may or may not be encrypted.

The invention is especially intended for visually impaired persons who are not able to read text printed on products or product containers. With the invented method at least a part of a product description, which corresponds to a bar code read and which is fetched from a product information database, is stored in at least one memory accessible to the terminal. After this, in response to a command ordered by a user of the terminal, the RFID identifier attached to the terminal is read and the product description is presented in speech format so that the information readable in the memory and the RFID identifier is utilized in the presentation. The terminal is preferably a mobile station equipped with a speech synthesizer. A visually impaired person can point with the terminal to one or more products and listen via an audio system of the terminal to the product descriptions related to them. When RFID identifiers are attached to the product, the products need to be pointed to as precisely when reading bar codes. The products are, for example, foodstuff or medicine.

Growing community of inventors

Vihti, Finland

Ville J Ollikainen