Gold Comet™ Solution:
Enterprise Platform-as-a-Service

A system and method for sharing an encrypted file stored on a cloud server is disclosed. In  certain embodiments, the method includes generating a file key associated with the encrypted file stored in the cloud server; generating a share message, the share message including the generated file key, and identifying a recipient user and the encrypted file stored in the cloud server; encrypting the file key using an identification key of the recipient user to  generate a share key; storing the share key in the cloud server; notifying the recipient user of the encrypted file and share key stored on the cloud server; retrieving the encrypted file and the share key from the cloud server; decrypting the share key using the identification key of the recipient user to reconstruct the file key; and using the reconstructed file key to decrypt the encrypted file.

The present invention provides a method and system for securing a digital data stream. The first key of the first asymmetric key pair from a key store remote from a host node is received at the host node. A dynamically generated key is received at the host node, which is used to encipher the digital data stream. The dynamically generated key is enciphered with the first key of the first asymmetric key pair. The enciphered digital data stream and the enciphered dynamically generated key are stored remotely from the host node and the key store.

Disclosed is a system and method for providing secure access control to an electronic network or device.  By limiting the ability of a single administrator to act unilaterally without the agreement and /or notification of further system administrators, the data integrity and security of stored data, such as email accounts, may be enhanced and risk of compromise ameliorated.  By permitting multiple administrators acting in a concert of action to access stored data, such as without notification of the email account holder, potential misconduct by email account holders may be audited.

A method for securing access to an account of a user, the method comprising: storing an access feature for authenticating the user to access the account in a credential database, the access feature comprising a first credential including an original password to the account set by the user and a universal reset credential; during a reset of the account, resetting, by a system administrator of the account, who is not the user, the access feature to the universal reset credential without any input from the user; preventing the system administrator of the account from changing the original password included in the first credential in response to detecting that the universal reset credential has been set; preventing the system administrator of the account from changing the universal reset credential; preventing the system administrator from changing the universal reset credential to the first credential in response to detecting that the account has been reset; and preventing use of the first credential of the access feature, after the resetting the first credential in the credential database to the universal reset credential, wherein the system administrator is restricted to resetting the access feature to the universal reset credential.