FR3081063A1 - SECURE METHOD FOR DELAYED DATA SHARING BETWEEN A TRANSMITTER USER AND A RECEIVING USER, WITH LOCAL CREATION OF A CONTAINER. - Google Patents

Abstract

A method of file sharing (2) between a user (A) issuer and a user (B) recipient, which comprises three phases: - Writing: ○ Create, locally, at the user (A) issuer, a container ( 6) file associated with the user (B) recipient; ○ During a writing delay (T1), allow the sending user (A) to write to the container (6); - Archiving: ○ Transmit the container (6) to a remote computer system (1); ○ Encrypt the data of the container (6) using the public key (ZB) of the recipient user (B); ○ During an archive delay (T2), store the encrypted container (6B); - Sharing: allow the recipient user (B) to download the encrypted container (6B) for decryption using his private key (BZ).

Description

Secure method of delayed data sharing between a sending user and a receiving user, with local creation of a container

The invention relates to the field of computing, and more specifically to the sharing of computer data files between a sending user and a receiving user.

The term “user” is used here to designate a communicating device (in English “user device”), typically a smartphone, a tablet, or more generally a computer, for example. a portable or fixed computer or a workstation capable of connecting, via a local computer network (LAN), metropolitan (MAN) or extended (WAN, typically the Internet), to a remote server, the term "server ”Designating here a physical unit or, in a virtualization framework, a computing and / or memory space allocated within a physical unit and on which an operating system or an operating system emulation is running.

However, we understand that a real user (that is to say a natural or legal person) who carries out operations using this device is associated with such an electronic client device.

The use of computer networks is quite widespread today, especially for data sharing.

There are various types of systems for sharing data.

Mailbox-type e-mails, which work asynchronously, allow user A (sender) to address user B (recipient) a message containing information that can be included in the body of the message itself , or as attached files.

In an electronic messaging system, the message delivery time depends essentially on the bandwidth (availability) of the network connecting the sending and receiving users, and on the memory size of the message, including its any attachments.

Quite often, routing takes a few seconds. The recipient can then open and read the message from the sender whenever they want.

At the time of writing, e-mail is limited in size to the messages sent, usually around ten megabytes (MB).

To exchange data of large volume (that is to say of size greater than 10 MB), it has become customary to use specialized platforms, e.g. DropBox (registered trademark).

In principle, these platforms aim to allow permanent access to a private memory space on which files are stored, for any user identified as having the right to it.

Hacking files involves either unauthorized access to this memory space, or the theft of the identity of a user with access rights.

These platforms are easy to use but nevertheless meet limits with regard to data security. In particular, identity theft is very effective in accessing data immediately, and - in general - both read and write.

There therefore remains a need to share computer data files between users, with a higher degree of security, while preserving a certain simplicity of use.

To this end, a method of sharing computer data files is proposed between a sending user and a receiving user via a computer system equipped:

From a communication server,

At least one file server, and

A profile database containing profiles associated with users respectively, each profile comprising at least one identifier and at least one public cryptographic key to which a private key corresponds;

A control unit, connected to the communication server, the file server and the database;

This process comprising three successive phases:

A writing phase, which includes the operations of:

o Create locally at the sending user a data container to share, associated with an identifier of the recipient user;

o Associate the container with a predetermined writing period;

o As long as the writing period has not expired, allow the sending user write access to the container;

An archiving phase, which includes the operations consisting in: o At the end of the writing period, transmit the container to the computer system;

o Encrypt the container using the public key of the recipient user to form an encrypted container;

o Associate the encrypted container with a predetermined archiving period;

o Until the archiving period has expired, store the encrypted container in the file server by prohibiting access to it at least to the recipient user;

A sharing phase, which includes the operation, at the end of the archiving period, of allowing the recipient user to download the encrypted container in order to decrypt it using his private key.

Various additional characteristics can be provided, alone or in combination. So, for example:

Since the sending user is distinct from the receiving user, the profiles associated in the profile database with the sending user and the receiving user are separate.

The writing time is advantageously defined by the sending user.

The archiving period can be defined by the recipient user, or automatically.

Before being transmitted to the computer system, the container is advantageously encrypted, at the level of the sending user, using his private key. In this case, at the computer system level, the container encrypted using the private key of the sending user is first decrypted using the public key of the latter before being re-encrypted using the public key of the recipient user.

Provision may be made for the communication server to receive a decryption notification of the container by the recipient user. In this case, it is advantageously provided for the destruction of the container on the file server after receipt of the decryption notification by the recipient user.

Other objects and advantages of the invention will emerge in the light of the description of an embodiment, given below with reference to the appended drawings in which:

FIG.1 is a synthetic diagram of a computer system illustrating the writing phase of a method according to the invention;

FIG.2 is a diagram similar to FIG.1, illustrating the archiving phase;

FIG.3 is a diagram similar to FIG.1, illustrating the sharing phase;

FIG.4 is a diagram illustrating different stages of the process of the invention.

FIG. 1 to FIG. 3 shows a computer system 1, intended to allow the sharing of files 2 of computer data between a sending user A and a receiving user B. The term “user” here designates, in concrete terms, an electronic device, such as a smartphone, a computer, a tablet, and provided with a communication interface (wired or wireless) through which this device is capable to connect to a remote server, via a local (LAN), metropolitan (MAN) or wide area network (WIDE, such as the Internet). It is understood, however, that, by extension, the term “user” indirectly designates one (or more) real user (s) (for example a natural or legal person) associated with this device.

The computer system 1 comprises, first of all, a communication server 4, programmed to be able to establish communication sessions (preferably secure) with users (in particular users A and B).

The computer system 1 comprises, secondly, a file server 5.

The computer system 1 comprises, thirdly, a profile database 7 which contains profiles PA, PB of users in memory. In this case, the database contains at least one PA profile associated with the sending user A, and a PB profile associated with the receiving user B.

Each PA, PB user profile includes at least one IDA, IDB identifier linked to the user (eg a name, an email address, a telephone number) and at least one public cryptographic ZA, ZB key.

To this public cryptographic key ZA, ZB corresponds a private cryptographic key AZ, BZ.

The private cryptographic key AZ, BZ associated with each user A or B is stored locally in a memory space thereof.

According to a particular embodiment, the sending user A is distinct from the receiving user B. In this case, the profiles PA, PB associated, in the profile database 7, with the sending user A and the receiving user B, are distinct (the same applies to their public keys ZA, ZB - and their private, respective AZ, BZ keys.

The computer system 1 comprises, fourthly, a control unit 8, connected to the communication server 4, to the file server 5 and to the database 7. The control unit 8 comprises at least one processor and a programmable memory. The control unit 8 is programmed to control the communication server 4, the file server 5 and to administer the database 7.

The sending user A includes a memory space in which directories or “containers” 6 of data files to be shared can be created. In these containers 6 can be created, deposited, copied, pasted, deleted, modified, data files 2 of any type, eg. files from office applications (eg word processing, spreadsheet), sound, image, or video files.

The operations intended to allow the sharing of files 2 between the sending user A and the receiving user B are grouped into three phases.

A first phase, called writing, includes the operations of:

o Create locally at the user A sender a container 6 of files 2 of data to be shared, associated with an IDB identifier of the recipient user B;

o Associate with container 6 a predetermined writing delay T1;

o As long as the T1 writing delay has not expired, allow the sending user A write access to container 6.

These operations are advantageously controlled by means of a local application implemented in the sending user A.

During the writing phase, the sending user A is authorized to modify the container 6 by adding or subtracting data files 2 therefrom. These data files 2 can come from the sending user A himself, or can be downloaded from remote servers via the network 3.

The T1 writing delay (shown diagrammatically in the drawings by a first countdown) is advantageously defined by the sending user. The T1 writing delay can also be defined automatically by the local application.

A second phase, called archiving, includes the operations of:

o At the end of the T1 writing period, transmit the container 6 to the computer system 1;

o Encrypt container 6 using the public ZB key of recipient user B to form an encrypted container 6B;

o Associate with the encrypted container 6B a predetermined T2 archiving period;

o As long as the T2 archiving period has not expired, store the encrypted container 6B in the file server 5 by prohibiting access to it at least to the recipient user B.

In practice, at the end of the writing period T1, the sending user A sends to the computer system 1, via the network 3, the transmission request from the container 6. This request passes through the communication server 4, which performs identity checks of the sending user A, typically by comparison of information communicated by the latter (eg a password) with information associated with his IDA profile as stored in the database 7 . As soon as the sending user A is identified, access is given to him (possibly by another communication channel, as illustrated in FIG. 1) to the file server 5.

According to a preferred embodiment, before its transmission to the computer system 1, the container 6 is encrypted by the sending user A by means of its private AZ key, so that it is impossible for any entity not having the public key ZA of user A transmitter, to decrypt container 6. This operation secures (admittedly temporarily and insufficiently) container 6. Once received container 6, the system decrypts it (preferably immediately) using the public key of the sending user A (stored in their PA profile), to re-encrypt it using the public key ZB of the receiving user B.

The archiving time T2 (shown schematically in the drawings by a second countdown) can be defined by the sending user A, or automatically. The T2 archiving period is advantageously implemented within the IT system 1, e.g. by means of an internal clock controlled by (or integrated into) the control unit 8.

The T2 archiving period is advantageously greater than one hour. It is preferably greater than one day. It can reach a month or even one or more years.

According to a preferred embodiment, the control unit 8 is devoid of instructions for communicating to the recipient user B, during the archiving phase, the very existence of a container 6 or of an encrypted container 6B to its attention, so that the real user (or real users) associated with user B recipient is (are) kept (s) in ignorance of this existence.

A third phase, called sharing, includes the operation consisting, at the end of the T2 archiving period, in allowing the recipient user B to download the encrypted container 6B with a view to decrypting it using his private BZ key.

In practice, the control unit 8 is, for example. programmed to send the recipient user B (in particular via the communication server 4) a notification of availability of the encrypted container 6B. This notification advantageously contains an IDA identifier associated with the originating user A. The download is then preferably ordered by the recipient user B, rather than carried out automatically on command from the control unit 8. Knowledge of the IDA profile of the sending user A by the receiving user B may constitute for the latter an indication of confidence in the origin and / or the safety of the data shared by the sending user A.

Concretely, the encrypted container 6B is sent, on command of the control unit 8, to the recipient user B via the network 3. The decryption is carried out locally by the recipient user B, by means of his key BZ private locally stored. The recipient user B can then read (and if necessary write) the container 6, that is to say the data files 2 which it contains, as deposited at the initiative of the user Has transmitter.

After decryption, the data files 2 can be stored locally by the recipient user B.

At the end of the decryption, the recipient user B can send (automatically or on external command) to system 1 a decryption notification. This notification is received by the communication server 4.

In this case, it is advantageously provided for the destruction of the container 6 on the file server 5 after reception, by the system 1, of the decryption notification.

In this way, memory space is freed up within the file server 5, which facilitates the subsequent creation of new containers 6.

The process which has just been presented offers a certain advantage in terms of safety compared with the known processes (respectively the systems). Indeed, during the archiving phase, the data files 2 cannot be read - nor a fortiori modified - by the sending user A or by the receiving user B. Any impersonation of any of them is ineffective since it is necessary to have the private key of the recipient user B to decrypt the container 6B.

It can even be seen that the control exercised by the sending user A over the container 6 (that is to say over the data files 2 to be shared) ceases at the end of the writing delay T1, even when its content is not yet accessible to the recipient user B. The (predetermined) delay with which the recipient user B accesses the files 2 of data shared by the sending user A makes it impossible for any dialogue between them in real time, to the benefit of the parsimony with which the users exchange data with each other. This in particular results in an optimization of the bandwidth necessary, in networks, for exchanges between users.

Claims (9)

1. Method for sharing files (2) of computer data between a sending user (A) and a receiving user (B) via a computer system (1) equipped: A communication server (4), At least one file server (5), and A database (7) of profiles containing in memory associated profiles (PA, PB) intended for users (A, B), each profile (PA, PB) comprising at least one identifier (IDA, IDB) and at minus a public cryptographic key (ZA, ZB) to which a private key (AZ, BZ) corresponds; A control unit (8), connected to the communication server (4), to the file server (5) and to the database (7); This process being characterized in that it comprises three successive phases: A writing phase, which includes the operations of: o Create locally at the level of the sending user (A) a container (6) of data to be shared, associated with an identifier (IDB) of the recipient user (B); o Associate with the container (6) a predetermined writing delay (T1); o As long as the writing delay (T1) has not expired, allow the sending user (A) write access to the container (6); An archiving phase, which includes the operations of: o At the end of the writing period (T1), transmit the container (6) to the computer system (1); o Encrypt the container (6) using the public key (ZB) of the recipient user (B) to form an encrypted container (6B); o Associate with the encrypted container (6B) a predetermined archiving time (T2); o As long as the archiving period (T2) has not expired, store the encrypted container (6B) in the file server (5) by prohibiting access to at least the recipient user (B); A sharing phase, which includes the operation consisting, at the end of the archiving period (T2), in allowing the recipient user (B) to download the encrypted container (6B) in order to decrypt it on using his private key (BZ). 2. Method according to claim 1, in which, the sending user (A) being distinct from the receiving user (B), the profiles (PA, PB) associated, in the database (7) of profiles, with the sending user (A) and the receiving user (B) are separate. 3. Method according to claim 1 or claim 2, wherein the writing delay (T1) is defined by the sending user (A). 4. Method according to one of claims 1 to 3, wherein the archiving time (T2) is defined by the user (A) transmitter. 5. Method according to one of claims 1 to 3, wherein the archiving time (T2) is automatically defined. 6. Method according to one of claims 1 to 5, wherein, before its transmission to the computer system (1), the container (6) is encrypted, at the level of the sending user (A), using his private key (AZ). 7. The method of claim 6, wherein, at the computer system (1), the container (6) encrypted using the private key (AZ) of the sending user (A) is first decrypted using the public key (ZA) of the sending user (A) before being re-encrypted using the public key of the receiving user (B). 8. Method according to one of the preceding claims, which comprises the reception, by the communication server (4), of a decryption notification of the container (6) by the recipient user (B). 9. The method of claim 8, which comprises destroying the container (6B) encrypted on the file server (5) after receipt of the decryption notification by the recipient user (B).