Method and system for securing data

Abstract

A first access key, which is provided by a key server for decrypting a file and the encrypted file is published on a public network by a first user. Every time the secured file is accessed by a second user, the first access key is provided by the key server to decipher the file. The first user can control access to the file by deleting the first access key on the key server, thus denying the second user access to the access key preventing de-encryption of the secured file.

What is claimed is: 
     
         1 . A method comprising:
 providing a first data file;   requesting an encryption key from a key server by a first user via a communication network;   receiving from the key server a first encryption key, the first encryption key for securing the first data file;   securing the first data file with the first encryption key to form a secured data file, the secured data file for being accessed in plain text only with access to the first encryption key;   storing the first encryption key in a key data store of the key server in association with the secured data file; and   publishing the secured first data file to a public network for unrestricted access thereto.   
     
     
         2 . A method according to  claim 1  comprising:
 requesting, by a secure application, an access key for deciphering the secured first data file, the access key related to the secured first data file and for access thereto; 
 receiving the access key from a key server; and 
 deciphering the secured first data file wit the access key by the secure application. 
 
     
     
         3 . A method comprising:
 providing a first key server;   providing a second other key server;   providing a first file for public access, the first file encoded with a cipher in reliance upon a key associated with the first file and stored within the first key server;   providing a second file for public access, the second file encoded with a cipher in reliance upon a key associated with the second file and stored within the second key server;   upon accessing the first file, retrieving from the first key server the associated key for deciphering thereof, the associated key accessible to the public via at least one secure process and other than accessible to other than the at least one secure process; and   upon accessing the second file, retrieving from the second key server the associated key for deciphering thereof, the associated key accessible to the public via the at least one secure process and other than accessible to other than the at least one secure process.   
     
     
         4 . The method according to  claim 3  wherein within each of the first and second file is stored an indication of a key server having the associated key stored therein. 
     
     
         5 . The method according to  claim 3  wherein a broker server has stored therein data relating the associated key associated with the first file to the first key server. 
     
     
         6 . The method according to  claim 5  wherein a broker server has stored therein data relating the associated key associated with the second file to the second key server, 
     
     
         7 . The method according to  claim 3  comprising:
 duplicating the first key server to form the second other key server. 
 
     
     
         8 . A method comprising:
 providing a first key server; and   providing a first file for public access, the first file encoded with a cipher in reliance upon a first key associated with the first file and stored within the first key server, the first key available via a secure process to members of the public;   providing a second file other than for public access, the second file encoded with a cipher in reliance upon a second key associated with the second file and stored within the first key server, the second key available to some users and unavailable to other users via the secure process.