PATENT CLAIM ANALYSIS

Application Number: 15965463
Application Type: Utility
Filing Date: 2018-04
Publication Date: 2018-11
Patent Classification: ["380", "277000"]

Abstract:
Disclosed is an orthogonal access control system based on cryptographic operations provided by multi-hop proxy re-encryption (PRE) that strictly enforces only authorized access to data by groups of users, scalable to large numbers of users. Scalable delegation of decryption authority can be shared with a plurality of members of a group whether those members be users or devices, and members of a group can further create sub groups and delegate decryption authority to those members, whether users or devices. Members are granted access via generation of transform keys, and membership or access can be revoked merely be deleting the transform key—no elimination of the encrypted data, regardless of its storage location, is needed.

Claim (Index 17):
A non-transitory, tangible computer readable storage medium, encoded with processor readable instructions to perform a method for orthogonal access control to data by groups of devices using public key cryptography to provide provable cryptographic access controls that change which users are able to decrypt data without modifying the encrypted data, the method comprising:\n a. generating a public key and a private key for the first user; b. creating a first group of users by generating a public key and a private key for the first group of users, by the first user, the first user being an administrator of the first group of users; c. encrypting data to the first group of users by encrypting the data to the public key of the first group of users to form a first ciphertext; d. generating a public key and a private key for a second user; e. adding the second user to the first group of users by generating a transform key from the first group of users to the second user, by the first user, using (1) the private key for the first group of users and (2) the public key for the second user; f. storing the transform key from the first group of users to the second user with a server, where the server cannot decrypt the data via access to the transform key from the first group of users to the second user nor access the first or second user's private keys or the first group's private key; and g. decrypting the data by the second user by:\n i. transmitting a request from the second user to the server for access to the first ciphertext; \n ii.granting the second user access to the first ciphertext by, on the server, transforming the first ciphertext with the transform key from the first group of users to the second user to form a first transformed ciphertext or denying access to the second user if no transform key from the first group of users to the second user exists; and \n h. decrypting the first transformed ciphertext to reveal the data to the second user using the private key of the second user.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 91.0
- Lexical Diversity: 1.65333
- Patent Class: 380.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15588614', '11193227', '13477306', '13763631', '15185575']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.4474193404987837
- 35 USC 102 Novelty (BERT): 0.5031044189262956
- Combined Prediction Score: 0.4529878483415349
- Mean Citation Score: 269.208104
- Max Citation Score: 289.68906
- Similarity Product: 214.45138925567505

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test