METHOD FOR SECURE STORING AND SHARING OF A DATA FILE VIA A COMPUTER COMMUNICATION NETWORK AND OPEN CLOUD SERVICES

摘要

A computer implemented method, server computer and computer program for securely storing a data file via a computer communication network and open cloud services. The method includes: providing a user's computer with code for providing a unique user name; asking the user for a password; generating an asymmetric key pair having one public key and one private key; encrypting the private key via a hash of the password; generating a file-specific symmetric key specific for the data file; encrypting the data file via the file-specific symmetric key; encrypting the file-specific symmetric key via the public key; where the code is executed by a web browser on the computer; storing the encrypted file-specific symmetric key as a header part of the encrypted data file, and interacting with the file exchange interface of a cloud service which receives the encrypted data file, and storing the encrypted data file and header part.

主权项

1. Computer implemented method for secure storing of a data file via a computer communication network, comprising the steps of:
providing a computer device of a user with code for:
providing a unique user name for the user;asking the user for a password;generating an asymmetric key pair for the user having one public key and one private key;encrypting the private key of the user by means of a hash of the password, resulting in an encrypted private key;generating a file-specific symmetric key specific for the data file;encrypting the data file by means of the file-specific symmetric key, resulting in an encrypted data file;encrypting the file-specific symmetric key by means of the public key of the user, resulting in an encrypted file-specific symmetric key;where the code is executed by a web browser on the computer device;
storing the encrypted file-specific symmetric key as a header part of the encrypted data file; interact with the file exchange interface of a cloud service; the cloud service receiving the encrypted data file and storing the encrypted data file and header part; storing the public key of the user and the encrypted private key of the user in a user management system.