Method and system for managing personal information within independent computer systems and digital networks

• US 10,311,250 B2
• Filed: 04/05/2017
• Issued: 06/04/2019
• Est. Priority Date: 04/05/2016
• Status: Active Grant

• Current Assignee: Zamna Technologies Ltd.
• Original Assignee: VChain Technology Ltd.
• Inventors: Khi, Irra Ariella, Gorelik, Aleksandr
• Primary Examiner(s): Jamshidi, Ghodrat
• Application Number:
  US15/480,313
• Publication Number:
  US 20170286717A1
• Time in Patent Office: 790 Days
• CPC Class Codes: G06F 16/903 Querying for retrieval from the web G06F16/953
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/3218 using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity

Abstract

A system and method for reliably and securely recording and storing all attributes of personal identification, for the identification and authorization of individual identity as well as attributes relating to it and personal data including but not limited to individual'"'"'s physical description, bank details, travel history, etc. (the “Personally Identifiable Information “PII”). PII can be difficult to manage in networks where correlation between data sources is required. Thus, in some embodiments, the system combines a distributed database to create a framework for a robust security. The system manages the distributed database to associate transactions, or actions, using data, digital signatures, and/or cryptographic keys, which can be unique to an individual.

Claims

1. A personal identifiable information system for data management and authentication within independent computer systems and digital networks, the system comprising:

a local client device for receiving raw data representing the personal identifiable information and comprising a cryptographic processor for processing the raw data through a cryptographic function to generate cryptographic data;

a storage system communicatively coupled with the local client device and comprising one or more storage nodes on a remote server, the storage system being unique from the local client device, the one or more storage nodes for receiving and storing sub-portions of the cryptographic data, and wherein the raw data is never stored on the storage system; and

a ledger database for parallel storage of one or more ledger transactions associated with any event associated with the storage system, wherein each ledger transaction comprises a record hash of core data and metadata, the core data and metadata being extracted from the cryptographic data.

2. The system of claim 1, wherein the ledger database comprises at least one of a public blockchain and a private blockchain.

3. The system of claim 1, wherein said storage comprises at least one of a distributed database, a distributed hash table, a peer-to-peer hypermedia distributed storage, an operating memory, a centralized database, and a cloud-based storage.

4. The system of claim 1, wherein a selected storage node maintains only a unique sub-portion of a complete set of the cryptographic data.

5. The system of claim 4, wherein a total number of sub-portions of the cryptographic data is less than a total number of storage nodes.

6. The system of claim 1, wherein the cryptographic function comprises at least one of a secure hash algorithm-2 and a secure hash algorithm-3.

7. The system of claim 1, wherein said local client device further generates a pair of cryptographic keys comprising a public key and an associated private key.