COMPUTERIZED METHOD AND SYSTEM FOR MANAGING SECURE CONTENT SHARING IN A NETWORKED SECURE COLLABORATIVE EXCHANGE ENVIRONMENT WITH CUSTOMER MANAGED KEYS

摘要

In embodiments of the present invention, improved capabilities are described for securely sharing computer data content between business entities as managed through an intermediate business entity, where the secure sharing process utilizes encryption provided by the intermediate business entity but where the encryption keys used in the encryption are at least in part managed through one of the business entities as customer managed keys.

主权项

1. A method for managing a networked secure collaborative computer data exchange environment, the method comprising:
establishing, by a secure exchange server managed by an intermediate business entity, a user login data authentication procedure that allows a user through at least one client computing device to access the secure exchange server, wherein the user is one of a plurality of users of a plurality of other business entities and communications between the secure exchange server and the plurality of users is through a communications network; storing, by the secure exchange server, at least one user login authentication data for at least one of the plurality of users; receiving at the exchange server a computer data content from a first of the plurality of users, wherein the first of the plurality of users permits a sharing access to the computer data content to at least a second of the plurality of users, and wherein management for access to the computer data content is through an exchange content access facility managed by the intermediate business entity, wherein at least one of the plurality of other business entities manages its own encryption keys for use in encrypting computer data content; granting, by the secure exchange server, sharing access to the computer data content to the at least second of the plurality of users when the secure exchange server receives from the second of the plurality of users its client login authentication data provided that the second of the plurality of users is one of the subset of the plurality of users to which sharing access is permitted.