Patent ID: 9294267
Filing Date: 2016-03-22
CPC Classification: H04L

Claim Text:
1. A non-transitory computer-readable storage medium with an executable program stored thereon, wherein the program instructs a processor in a client machine to perform a method, the method comprising the steps of: determining, on said client machine, an activation for secure access to a secured information stored on at least one server device, wherein said client machine and said at least one server device are communicating through a global communication network; obtaining, on said client machine, at least a first username information, first password information, and first answer to a challenge question information configured to create a first account for at least one user for access to said secured information stored on said at least one server device, wherein said client machine communicates through said global communication network, said first username information to said at least one server device, and wherein said first username information is stored on said at least one server device; constructing, on said client machine, a first password hash, in which a hash operation is performed on said first password information configured to construct said first password hash, wherein said client machine communicates through said global communication network, said first password hash to said at least one server device, and wherein said first password hash is stored on said at least one server device, and in which said first password hash is configured to authenticate a user account needing secure access to said secure information, and wherein said first password information is not communicated or stored on said at least one server device configured to ensure said first password information is not accessible to an administrator or a user associated with said at least one server device of said at least one server device; generating, on said client machine, a first random key, in which said first random key comprising a first master key for encryption; creating, on said client machine, a first encrypted master key, wherein said first master key is encrypted with said first password information to create said first encrypted master key, said client machine communicates through said global communication network, said first encrypted master key to said at least one server device, and wherein said first encrypted master key is stored on said at least one server device, and wherein said first master key is not accessible to said administrator or any other user associated with said at least one server device, in which an unencrypted form of said first encrypted master key is configured to retrieve or store encrypted content on said at least one server device; producing, on said client machine, a first challenge answer hash, in which said first answer to said challenge question information is configured to produce said first challenge answer hash, wherein said client machine communicates through said global communication network, said first challenge answer hash to said at least one server device and said first challenge answer hash is stored on said at least one server device; receiving, on said client machine, said first master key and said first answer to a challenge question information, in which said received first master key is encrypted with said answer to said first challenge question information being configured to generate a first encryption key; formulating, on said client machine, a second encrypted master key, wherein said first encryption key is configured to formulate said second encrypted master key, in which said client machine communicates through said global communication network, said second encrypted master key to said at least one server device, and wherein said second encrypted master key is generally stored on said at least one server device; prompting, on said client machine, at least a login username and a login password of a user requesting secure access to said secure information stored in said at least one server device, wherein said prompting step is a login process configured to authenticate a user logging into a created user account in said obtaining step, and wherein said login password is not communicated to said at least one server device to perform a secure login process, thereby, said login password is not accessible to said administrator or any other user associated with said at least one server device; verifying, on said client machine, the authenticity of said login username and login password, in which a comparison password hash is generated with said login password, wherein said login username is compared with said first username information stored on said at least one server device, and said comparison password hash is compared against said stored first password hash, in which a matching comparison of said login username and said comparison password hash is configured to retrieve said first encrypted master key stored on said at least one server, and in which said first encrypted master key is decrypted with said login password to generate a master key identical to said first master key produced in said step of generating a random key for said content retrieval or storage; and communicating, by said client machine through said global communication network, a first encrypted content key and said encrypted content to said at least one server device for storage under said account created for said user, wherein only an account user logged in on said client machine has access to said content.