Systems and methods for secure high speed data generation and access

• US 10,579,823 B2
• Filed: 05/21/2018
• Issued: 03/03/2020
• Est. Priority Date: 09/23/2014
• Status: Active Grant

• Current Assignee: UBIQ Security Incorporated
• Original Assignee: UBIQ Security Incorporated
• Inventors: Eigner, Linda, Eigner, William, Iasi, Anthony, Kahle, Charles, Schneir, Gary, Tobias, Eric
• Primary Examiner(s): Patel, Ashokkumar B
• Assistant Examiner(s): Farooqui, Quazi
• Application Number:
  US15/985,560
• Publication Number:
  US 20180276408A1
• Time in Patent Office: 652 Days
• Field of Search: 713193
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification

Abstract

Systems and methods for generating a data map for retrieval of a data object. An example method includes: receiving an indication to generate a data entry for the data map, the data entry corresponding to a field identifier and a field value related to the field identifier; obfuscating the field identifier to generate a record locator associated with the data entry based, at least in part, on one or more variable storage parameters; and encrypting the field identifier and field value and storing the data entry in the data map as an encrypted field identifier and field value in association with the record locator.

Claims

1. A method for generating a data map for retrieval of a data object, the method comprising:

receiving an indication to generate a data entry for the data map, the data entry corresponding to a field identifier and a field value related to the field identifier;

obfuscating the field identifier to generate a record locator associated with the data entry based, at least in part, on one or more variable storage parameters; and

encrypting the field identifier and field value and storing the data entry in the data map as an encrypted field identifier and field value in association with the record locator.

2. The method of claim 1, further comprising obfuscating the field value and field identifier to generate the record locator associated with the data entry.

3. The method of claim 1, wherein the indication to generate the data entry is received in response to a query for retrieving the data object, the query comprising the field identifier and the field value.

4. The method of claim 3, wherein data map comprises a plurality of existing data entries, the method further comprises:

determining if field identifier corresponds to an existing data entry of the data map based on matching the record locator associated with the data entry with an existing record locator associated with at least one of the plurality of existing data entries of the data map; and

in response to determining the field identifier does not correspond to an existing data entry, encrypting the field identifier and field value and storing the data entry in the data map as an encrypted field identifier and field value in association with the record locator.

5. The method of claim 4, further comprising, if the field identifier does correspond to one of the plurality of existing data entries:

decrypting and updating a value associated with the corresponding existing data entry with the field value of the data entry; and

encrypt the updated value associated with the corresponding existing data entry.

6. The method of claim 1, wherein the indication to generate the data entry is received in response to storing the data object.

7. The method of claim 6, further comprising extracting a field identifier and field value from the data object based, at least in part, on the type of the data object.

8. The method of claim 7, wherein said extracting is performed by a plug-in module.

9. The method of claim 6, performing a reverse decomposition of the data object, wherein the data object is previously stored using a decomposition function based in part on one or more variable storage parameters.

10. The method of claim 9, wherein the field value corresponding to the field identifier is determined based in part on the reverse decomposition of the data object.

11. The method of claim 6, further comprising an indication to create the data map automatically in response to storing the data object, wherein creating the data map comprises generating the data entry.

12. The method of claim 1, wherein the one or more variable storage parameters includes at least one of a username, a user passphrase, a current security model, a type of the data object, a size of the data object, one or more security requirements, and one or more performance requirements.

13. The method of claim 1, wherein the one or more variable storage parameters includes at least a type of the data object.

14. The method of claim 13, wherein the type of data object is at least one of an image file, video file, and audio file.

15. A system for generating a data map a data map for retrieval of a data object, the system comprising:

a plurality of data storage locations;

a secure platform comprising one or more processors coupled to at least one memory, the secure platform configured to;

receive an indication to generate a data entry for the data map, the data entry corresponding to a field identifier and a field value related to the field identifier;

obfuscate the field identifier to generate a record locator associated with the data entry based, at least in part, on one or more variable storage parameters; and

encrypt the field identifier and field value and storing the data entry in the data map as an encrypted field identifier and field value in association with the record locator.

16. The system of claim 15, wherein the indication to generate the data entry is received in response to a query for retrieving the data object, the query comprising the field identifier and the field value.

17. The system of claim 15, wherein the indication to generate the data entry is received in response to storing the data object.

18. The system of claim 17, further comprising extracting a field identifier and field value from the data object based, at least in part, on the type of the data object.

19. The system of claim 17, wherein said extracting is performed by a plug-in module.