Patent ID: 8850544

Claim:
A method for performing user centered privacy which works universally across all web services, but without requiring the web services to implement or enforce said privacy mechanisms or any encryption mechanism, wherein: a) each user in a Hyde-It system has an identity, a first authentication factor such as a password and a second authentication factor called 2F which is stored locally in a memory on a user device; b) a Hyde-It Identity Provider (HIP) which stores the user identity, their first authentication factor such as a hash of their password; and a hash of the second authentication factor 2F, called 2F+; c) the user can store multiple ‘ryngs’ at the HIP which are lists of other users; d) a Hyde-It Service (HITS) which stores for each user a hash of 2F+, called 2F++; wherein there is a toolbar at the user's browser which allows the user to select content which the user is allowed to edit at a 3rd Party site, wherein the user selects content to keep secret; specifying, by the user, other users or ryngs who can decrypt the selected content, the toolbar then selects a fresh randomly generated session key to encrypt the selected content and proceeds to encrypt the content; wherein the toolbar initiates the HIP and the HITS to perform MashSSL with the MashSSL scrambling happening using a combination of the user's first authentication factor and 2F+; the toolbar encrypts the specified content with the session key, send the session key and the list of users/ryngs who would be able to decrypt the content to the appropriate HITS; the HITS prepares data structures for key distribution by creating userid:encrypt(session-key,valid user 2F++), where each data structure contains the userid of a user who can decrypt the data, and the session key encrypted with that particular user's 2F++; the HITS returns the data structures to the toolbar and the toolbar adds the data structures to the encrypted content; and the toolbar either posts the encrypted content with data structures to the appropriate website or relies on whatever mechanism the web application has of posting the content from the browser to the website.