Password-less security and protection of online digital assets

摘要

Digital assets stored on an asset server by an asset owner are protected without a password. Instead, the digital assets are functionally handicapped by removing at least a portion of digital data (or a key) associated with the digital asset and discarding the key after being sent to an enabling device. The portion of digital data (or a key) is then handicapped by the enabling device by a cryptographic key which is formed from a human gesture and subsequently discarded. When access to the digital asset is requested, an asset owner is notified by the enabling device for approval. A human gesture from the asset owner first provides a key to reconstitute the digital data portion which is transmitted to the asset server to reconstitute the digital asset upon which the access is granted and logged.

主权项

1. A computer-implemented method for protecting a digital asset on an asset server with a key and destroying the key, the method, comprising the steps of:
storing the digital asset on the asset server;
disabling the digital asset, comprising:
handicapping the digital asset on the asset server with security data to prevent normal use of the digital asset, by removing a portion of bits from the digital asset itself to prevent normal use of the digital asset;sending the security data from the asset server to the remote device, wherein the remote device handicaps the security data with a second security data based on a user gesture to prevent normal use of the security data, wherein the second security data is completely discarded from the remote device; andcompletely discarding the security data from the asset server, wherein the digital asset remains disabled on the asset server; andenabling the digital asset, comprising:
receiving the security data from the remote device responsive to a request to access the digital asset, wherein the remote device reconstitutes the second security data from user gesture and uses the second security data to enable the security data that was handicapped by the remote device for normal use of the security data; andreconstituting the digital asset using at least the security data in order to enable the digital asset that was handicapped by the asset server for normal use of the digital asset.