Patent ID: 9369443
Filing Date: 2016-06-14
CPC Classification: G06F,H04L

Claim Text:
1. A method for protecting data transferred between a client device and a server, comprising: receiving a user's authentication data from a client device; obtaining a public key of a first public/private key pair; receiving a request to access an element of data stored on the server from the client device; determining that the user is authorized to access the element of data; generating a second public/private key pair; sending the public key of the second public/private key pair to the client device; accessing the element of data; encrypting the accessed element of the data using the public key of the first public/private key pair; transferring the encrypted data to the client device; receiving a modified version of the accessed element of the data, the modified version having been encrypted using the public key of the second public/private key pair; and decrypting the received modified version of the accessed element of the data using the private key of the second public/private key pair.